Wizard Application has been registered with the UK Information Commissioner's Office, the ICO, as a data controller since 13 May 2026. Registration is a legal requirement for organisations that handle personal data, and it reflects the seriousness with which we treat your information.
What this means
As a registered data controller we are accountable to the ICO for how we collect, store, and use personal data. We operate in line with the UK General Data Protection Regulation and the Data Protection Act 2018, which means we:
- Only collect the personal data we actually need.
- Are clear about why we hold it and how it is used.
- Keep it accurate, secure, and no longer than necessary.
- Maintain proper records of our processing activities.
Your rights
Data protection law gives you strong rights over your personal data. You have the right to:
- Access the personal data we hold about you.
- Ask us to correct anything that is inaccurate.
- Ask us to delete your data where appropriate.
- Object to or restrict certain kinds of processing.
Our privacy policy explains these rights in full and how to exercise them.
Privacy beyond the UK
We extend the same protections to every region we serve, and we comply with the major data protection regimes our customers operate under:
- EU GDPR for individuals across the European Union.
- US state privacy laws, including CCPA and CPRA, VCDPA, CPA, CTDPA, UCPA, TDPSA, OCPA, and MCDPA.
- LGPD in Brazil, with rights to access, correct, port, and delete personal data.
- APPI in Japan, backed by the EU-Japan and UK-Japan adequacy framework.
- PIPEDA and Quebec Law 25 in Canada.
You also choose your data residency region at signup, and your data, backups, and processing stay within that jurisdiction for the lifetime of your account.
Part of a wider commitment
ICO registration sits alongside our Cyber Essentials certification and our wider security practices as part of a commitment to privacy and security that we will keep building on as we grow.