Updated 12 October 2026
Who we are
We Are Panda is a UK partnership. We are the controller of personal information you submit to us about our own services. For privacy questions, write to We Are Panda, 1 Westley Mews, BS24 7FZ, United Kingdom, or email business@wearepanda.co.uk.
Enquiries we receive today
Our website forms ask for your name, email address and a message. You may also give a business name and select the work you are interested in. We use these details to respond, discuss your requirements and prepare a quote. Where you enquire as an individual intending to contract with us, this is generally to take steps at your request before a contract. Where you represent a business, our legitimate interest is communicating with its contacts about requested work.
Please do not send passwords, payment-card details or sensitive information in an initial enquiry. Our hosting provider may process technical request and security logs needed to deliver and protect the website. We use limited technical information for that purpose on the basis of our legitimate interest in keeping the site secure.
Watching example videos
The video previews on our design and animation page are hosted on this website. If you select Play, your browser connects to YouTube to load the privacy-enhanced player. YouTube may receive your IP address and device information and may use storage and access technologies for the video. You can follow a direct link to watch on YouTube instead. See Google's privacy policy and our cookie information for more detail.
Spam protection you choose to use
The online form offers Google reCAPTCHA v3 to help distinguish genuine enquiries from abuse. We load it only when you choose to allow the check and submit the form. Google receives device, browser and network information and may use cookies for this check. We receive a verification result and risk score; we do not store your reCAPTCHA token with your enquiry or send it to our nurture workflow. Our security processing is based on our legitimate interest in protecting the form. The form asks for your choice before loading Google's technology. You can instead email hello@wearepanda.co.uk without using reCAPTCHA. See Google's privacy policy and our cookie information.
Analytics and advertising we plan to add
We plan to use Google Analytics 4 to understand how visitors use the site and which pages lead to enquiries. We also plan to use the Meta Pixel to measure Meta ads and show relevant ads to people who have visited this site. Google Tag Manager support is present but disabled; Analytics and the Meta Pixel are not active. Before enabling them, we will explain the data and cookie lifetimes in our cookie information and ask for the appropriate choices. Advertising tracking and remarketing will only run after consent. We will not put enquiry message contents into analytics or ad events.
When enabled with your consent, these tools may send information about your visit, device, browser and interactions to Google or Meta. Their use of that information is also described in the Google Privacy Policy and Meta Privacy Policy. We will confirm the exact setup, recipients and any international transfers before switching the tools on.
Enquiry follow-up and automated assistance
Our prepared website integration passes submitted enquiry details securely from our server to our self-hosted WAP n8n system. The workflow stores the enquiry and prepares a brief follow-up or a handoff to Paul or Alan. It may ask a few simple questions about the work you requested. A constrained OpenAI connection helps select a question and summarise the conversation; the assistant cannot agree a contract, negotiate prices or take actions on other systems. You can ask for a person or reply STOP to end automated follow-up.
The nurture workflow is currently an unpublished draft and does not send emails. Our WAP n8n system is hosted on a DigitalOcean server in the UK. Before activating it, we will verify the private intake connection, retention, email delivery and reply tracking. Automation emails are intended to use Resend from hello@e.wearepanda.co.uk, with replies tracked until handoff to the shared business@wearepanda.co.uk Google Workspace group. Paul or Alan then replies directly. Connected Meta lead forms use the same enquiry purpose. We will update this notice if the final providers or process differ.
A response about the enquiry you made is different from a later promotional message. Sending an enquiry does not subscribe you to marketing emails or messages. If we introduce promotional follow-up, we will explain it separately and only send it where the applicable marketing rules allow it, with a way to opt out.
Who receives information
This website is hosted on Vercel. Our team uses Google Workspace for email. When the prepared nurture integration is activated, our n8n hosting provider will process enquiry and conversation records, OpenAI will process the limited conversation information needed for the assistant, and Resend will process email addresses and message content for delivery and reply handling. Our draft asks OpenAI not to store responses; this does not eliminate any provider security or abuse-monitoring retention. Google separately handles reCAPTCHA information when you allow it. Meta handles lead forms completed on its platform. We may share relevant details with professional advisers or authorities where necessary or required by law. We do not sell enquiry information.
How long we keep it
Enquiries with no contact for two weeks are due for archive and review. For enquiries that do not become customers, we arrange deletion of enquiry and conversation records, including relevant email copies, three calendar months after the last contact. Paul and Alan are responsible for deletion and reviewing exceptions. An unresolved enquiry, delivery outcome, legal obligation or dispute may require a limited hold; we review the need rather than keep it indefinitely. We retain the minimum opt-out information needed to honour an objection to marketing.
Customer contracts, invoices and accounting records in Xero have different retention needs, which we explain when you become a customer. For websites hosted on our 20i service, standard automatic backups roll off after the provider's backup window. Our n8n server has weekly backups deleted after 28 days. Deleting active records does not immediately remove a backup copy; restored records must be checked against deletion requests before reuse. The new Vercel website is a separate service whose retention arrangements must be verified before launch. The nurture draft disables saving enquiry execution payloads; its archive and purge automation is not yet active.
International handling
Some technology suppliers may process information outside the UK. Where this happens, we require an applicable transfer mechanism or safeguard. Ask us for details about the suppliers and safeguards relevant to your enquiry. We will check the Google, Meta and n8n setup before their planned use begins.
Your rights and complaints
Depending on the circumstances, you may ask to access, correct or erase your information, restrict or object to its use, or receive a portable copy. You can object to direct marketing at any time. Contact us at business@wearepanda.co.uk and we will explain any applicable limits. You can also complain to the Information Commissioner’s Office.
Cookies and similar technology
See our cookie information for this build's analytics and advertising configuration, purposes, providers and available controls. On the main website, the configured Google Analytics and Meta tools can process visit, device and interaction information. Our consent controls and provider settings remain subject to review; contact business@wearepanda.co.uk if you need help with a choice.