BUSINESS MESSAGING WORKSPACELast updated: 12 October 2026
1. Who is responsible
DUCKLINGTON SOLAR LIMITED (Company No. 13035477), 3rd Floor, St George's House, 13–14 Ambrose Street, Cheltenham, GL50 3LG, UK. Privacy enquiries: admin@miyakophro.shop.
2. Whose data is involved
This notice concerns website visitors, business customers and their authorised team users, and individuals contacting those businesses over WhatsApp. Depending on the arrangement, the subscribing business may determine why and how its customer communications are processed, and DUCKLINGTON SOLAR LIMITED may act as its processor; for company account administration and support it may act as a controller. Actual roles must be documented in customer agreements.
3. Categories of information
- Account and business data: business name, admin/team identifiers, work contact details, configuration, service enquiries and access records.
- Meta/WhatsApp business assets: identifiers of authorised WhatsApp Business Accounts and phone numbers, template details, granted permissions, connection status and relevant webhook metadata.
- Messages and contacts: WhatsApp contact names/phone numbers, messages, attachments/media, timestamps, delivery statuses and conversation assignments, but only to the extent these are actually delivered to or processed by the integrated application.
- Technical information: IP address, browser information, device and server logs, security events and support correspondence where generated.
4. Purposes
Potential purposes include onboarding authorised businesses, enabling requested WhatsApp message sending/receiving, displaying assigned conversations to permitted agents, maintaining templates and account connections, supporting operations, detecting misuse, and complying with legal requests. We do not describe unrelated advertising, data resale or automated profiling as an offered service.
5. Lawful bases and customer responsibilities
Where UK GDPR applies, relevant bases may include performance of a contract, legitimate interests in secure and effective business operations, compliance with a legal obligation, and consent where applicable. The exact basis depends on the processing and applicable circumstances. Business customers are responsible for their own lawful WhatsApp communication practices, including required opt-ins and notices.
6. Meta and other recipients
When Meta WhatsApp Business Platform features are used, the service necessarily interacts with Meta/WhatsApp for authorisation and message delivery under Meta's applicable terms. Hosting providers, security providers and other service providers may process limited data when appointed under appropriate agreements. The definitive list of actual subprocessors and locations has not yet been confirmed and must be published or supplied before processing begins.
7. Location and international transfers
Our corporate registration is in the UK; this does not establish where platform data or backups are hosted. Actual hosting region, recipient locations and any cross-border transfer safeguards are pending operational confirmation. We must implement legally appropriate mechanisms before transfers requiring them.
8. Retention
Account information, message history, media, system logs and backups must each have documented retention rules reflecting customer instructions, operational needs and legal obligations. Specific durations have not yet been confirmed and will be supplied before commercial processing. Data is deleted or de-identified when no longer necessary, subject to applicable retention requirements.
9. Security
We intend to restrict access by authorised users, use protected connections and apply appropriate security measures to any deployed service. Independent verification of production access controls, encryption, backup protections and incident-response arrangements is required before service launch; this website does not claim completed audits or certifications.
10. Your rights
Subject to applicable law, individuals may request access, correction, deletion, restriction, objection or portability. If we process a customer business's messaging records on its behalf, we may direct requests to that business or work with it to address them.
Submit privacy requests to admin@miyakophro.shop; see the Data Deletion Instructions. We may take reasonable steps to verify requests. You may also have a right to complain to the UK's Information Commissioner's Office (ICO), ico.org.uk.
11. Disconnecting Meta
Business administrators may revoke a granted Meta integration in the relevant Meta account settings. Revoking permission does not automatically resolve any separate deletion request for data previously held; contact us through the deletion process.
12. Website cookies and external resources
The current static website does not intentionally set advertising or analytics cookies. Hosting providers may generate technical logs. Refer to our Cookie Policy.
13. Updates
We may update this notice as the platform is implemented or legal requirements change. The current version date appears above.