1. Introduction
Wafix Technologies (“Wafix Technologies,” “the Company,” “we,” “us,” or “our”) is a digital service provider offering website design and development, mobile application development, software development, UI/UX design, graphic design, branding and logo design, digital marketing, search engine optimization (“SEO”), social media marketing, paid advertising campaign management (including Google Ads and Meta/Facebook Ads), video editing, animation, content writing, artificial intelligence (“AI”) automation services, virtual assistant services, information technology consulting, cloud services, web hosting services, domain registration, technical support, business consulting, and other related digital and technology services (collectively, the “Services”).
This Privacy Policy describes how Wafix Technologies collects, uses, discloses, stores, and protects personal information obtained from visitors to our websites, users of our Services, and individuals who otherwise interact with us (each, a “User,” “Client,” or “you”). We provide Services to businesses and individuals located in the United States, Canada, Australia, the United Kingdom, the European Union and European Economic Area (“EEA”), the Middle East, Asia, Africa, South America, and other jurisdictions worldwide. Because our Client base is global, we have designed this Privacy Policy to address the requirements of multiple legal regimes, including but not limited to the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the General Data Protection Regulation (“GDPR”), the United Kingdom GDPR and Data Protection Act 2018 (“UK GDPR”), the Australian Privacy Principles (“APPs”) under the Privacy Act 1988 (Cth), the CAN-SPAM Act of 2003, and applicable cookie consent and electronic communications laws.
By accessing our websites, engaging our Services, submitting information to us, or otherwise interacting with Wafix Technologies, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should not use our websites or Services. This Privacy Policy is incorporated by reference into, and should be read together with, our Terms and Conditions.
2. Definitions
For purposes of this Privacy Policy, the following terms have the meanings set forth below:
2.1 “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, including but not limited to the categories described in Section 3.
2.2 “Processing” means any operation performed on Personal Information, whether by automated means or not, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, use, disclosure, transmission, dissemination, combination, restriction, erasure, or destruction.
2.3 “Data Controller” means the entity that determines the purposes and means of Processing Personal Information. For purposes of information collected through our own websites and marketing activities, Wafix Technologies acts as a Data Controller.
2.4 “Data Processor” means an entity that Processes Personal Information on behalf of a Data Controller. Where Wafix Technologies Processes Client end-user data solely to perform contracted Services (for example, data uploaded to a website we host or an application we build), Wafix Technologies acts as a Data Processor or “Service Provider” (as that term is used under the CCPA/CPRA) on behalf of the Client.
2.5 “Client” means any business or individual who has entered into an agreement with Wafix Technologies for the provision of Services.
2.6 “User” means any visitor to our websites or any individual whose Personal Information we collect, whether or not that individual is a Client.
2.7 “Third-Party Service Providers” means payment processors, hosting providers, analytics providers, communication platforms, and other vendors engaged by Wafix Technologies to support the Services.
2.8 “Sensitive Personal Information” has the meaning given under applicable law, including under the CCPA/CPRA and GDPR, and generally includes government identification numbers, precise geolocation, financial account information, and similar categories.
3. Information We Collect
Wafix Technologies collects the following categories of Personal Information:
3.1 Identification and Contact Information: full name, business name, job title, email address, telephone number, and billing or mailing address.
3.2 Payment Information: billing information necessary to process payments, including the last four digits of payment cards, transaction identifiers, and billing addresses. Full payment card numbers, card verification values (“CVV”), and full bank account credentials are collected and processed exclusively by our Third-Party Service Providers described in Section 8, and are not stored on Wafix Technologies’s own systems in unencrypted form.
3.3 Technical Information: Internet Protocol (“IP”) address, device identifiers, device type and operating system, browser type and version, referring and exit pages, and other technical data collected automatically when you visit our websites or use our applications.
3.4 Communications: records of correspondence between you and Wafix Technologies, including emails, chat transcripts, support tickets, video call recordings (where consented to), and telephone call notes.
3.5 Project and Business Information: files, documents, images, source code, brand assets, and other materials you upload or otherwise provide to us in connection with a project; project requirements, specifications, and briefs; and business information necessary to perform the Services.
3.6 Financial and Account Records: invoices, payment history, subscription status, and account correspondence.
3.7 Usage and Analytics Data: information regarding how you interact with our websites, applications, and marketing communications, including pages viewed, links clicked, time spent on pages, and similar engagement metrics.
3.8 Cookie and Tracking Data: information collected through cookies, web beacons, pixels, and similar technologies, as further described in Section 9.
We do not knowingly collect government identification numbers, Social Security numbers, health information, or other special categories of Sensitive Personal Information unless specifically required for a discrete purpose (for example, tax reporting), in which case we will identify the additional safeguards applied.
4. How Information Is Collected
We collect Personal Information through the following means: (a) directly from you when you complete a contact form, request a quote, sign a service agreement, upload project files, or otherwise communicate with us; (b) automatically through cookies, server logs, and similar technologies when you visit our websites; (c) from Third-Party Service Providers, including payment processors who confirm transaction status, and analytics or advertising partners who provide aggregated or pseudonymized insights; and (d) from publicly available sources, such as public business registries, where relevant to verifying a prospective Client’s business identity.
5. Legal Basis for Processing
Where the GDPR or UK GDPR applies, Wafix Technologies relies on one or more of the following legal bases to Process Personal Information: (a) performance of a contract, where Processing is necessary to provide the Services you have requested or to take steps prior to entering into an agreement; (b) legitimate interests, including operating and improving our business, preventing fraud, and direct marketing to existing Clients, provided such interests are not overridden by your rights; (c) consent, where you have affirmatively opted in, such as for certain cookies or marketing communications, and which you may withdraw at any time; (d) legal obligation, where Processing is required to comply with tax, accounting, anti-fraud, or other applicable law; and (e) vital interests, in the rare circumstance necessary to protect life or physical safety. Where Processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of Processing carried out before withdrawal.
6. How We Use Information
Wafix Technologies uses Personal Information for the following purposes: (a) to provide, operate, and maintain the Services, including website design, development, hosting, and technical support; (b) to process payments and manage billing, invoicing, and account records; (c) to communicate with you regarding projects, support requests, invoices, and account status; (d) to develop, test, and improve our Services, internal tools, and AI automation workflows; (e) to send marketing and promotional communications in accordance with Section 16 and applicable law; (f) to comply with legal, tax, accounting, and regulatory obligations; (g) to detect, investigate, and prevent fraud, security incidents, and unauthorized access; (h) to enforce our Terms and Conditions and other contractual rights; and (i) for any other purpose disclosed to you at the time of collection or to which you otherwise consent.
7. Payment Processing
Wafix Technologies accepts payment via credit card, debit card (including Visa, Mastercard, American Express, and Discover), Apple Pay, Google Pay, bank transfer, wire transfer, Automated Clearing House (“ACH”) transfer, PayPal, Stripe, and other payment gateways approved by Wafix Technologies from time to time (collectively, the “Payment Processors”). All card and bank account data submitted for payment is transmitted directly to and processed by the applicable Payment Processor through secure, encrypted channels compliant with the Payment Card Industry Data Security Standard (“PCI DSS”). Wafix Technologies does not store full payment card numbers, CVV codes, or full bank account credentials on its own servers. Wafix Technologies’s role with respect to payment data is limited to receiving confirmation of transaction status, amount, and payment method type (e.g., “Visa ending in 4242”) for accounting and reconciliation purposes. Each Payment Processor maintains its own privacy policy and PCI DSS compliance obligations, and by submitting payment information you also agree to the applicable Payment Processor’s terms and privacy policy.
8. Cookies and Similar Technologies
Our websites use cookies, web beacons, pixels, local storage, and similar tracking technologies (“Cookies”) to operate the site, remember preferences, analyze traffic, and deliver relevant advertising. We use the following categories of Cookies: (a) Strictly Necessary Cookies, required for core website functionality and security, which cannot be disabled; (b) Performance and Analytics Cookies, which help us understand how visitors interact with our websites; (c) Functionality Cookies, which remember your preferences and settings; and (d) Advertising and Targeting Cookies, which are used to deliver relevant advertisements and measure campaign performance. Where required by applicable law, including the EU ePrivacy Directive, GDPR, and UK GDPR, we will request your consent through a cookie banner before placing non-essential Cookies, and you may manage or withdraw your preferences at any time through our cookie consent tool or your browser settings. Disabling certain Cookies may affect the functionality of our websites.
9. Analytics
We use third-party analytics services, which may include Google Analytics and comparable platforms, to collect and analyze information about website usage, including page views, session duration, device and browser type, and general geographic location derived from IP address. Analytics data is generally aggregated and used to improve website performance and content, and to inform our marketing strategy. Analytics providers may set their own Cookies subject to their respective privacy policies.
10. Advertising
Wafix Technologies may engage in digital advertising, including through Google Ads, Meta/Facebook Ads, and other advertising networks, to promote our Services. These advertising partners may use Cookies and similar technologies to deliver advertisements based on your prior interactions with our websites (“retargeting” or “remarketing”) and to measure advertising effectiveness through conversion tracking. Where required by law, we obtain your consent before enabling advertising Cookies. You may opt out of interest-based advertising through industry tools such as the Digital Advertising Alliance’s opt-out page, the Network Advertising Initiative’s opt-out page, or your device and browser settings.
11. Third-Party Services
In the course of providing the Services, Wafix Technologies may engage or integrate with Third-Party Service Providers, including but not limited to payment processors (Stripe, PayPal, Square, Authorize.net, Braintree, Adyen, and similar providers), cloud hosting and infrastructure providers, domain registrars, email and communication platforms, project management and file-sharing tools, customer relationship management systems, and artificial intelligence or automation platforms used to deliver AI Automation Services. Each Third-Party Service Provider Processes Personal Information subject to its own privacy policy and terms, which we encourage you to review. Wafix Technologies selects Third-Party Service Providers that maintain industry-standard security and confidentiality obligations, and, where required, enters into data processing agreements with such providers.
12. Data Sharing and Disclosure
Wafix Technologies does not sell Personal Information for monetary consideration. We may share Personal Information in the following circumstances: (a) with Third-Party Service Providers as described in Section 11, solely as necessary to perform the Services; (b) with professional advisors, including accountants, auditors, and legal counsel, subject to confidentiality obligations; (c) with a successor entity in connection with a merger, acquisition, financing, or sale of all or substantially all of our assets, subject to appropriate confidentiality protections; (d) where required to comply with applicable law, regulation, subpoena, court order, or governmental request; (e) to protect the rights, property, or safety of Wafix Technologies, our Clients, or others, including to investigate fraud or security incidents; and (f) with your consent or at your direction. To the extent any sharing described above constitutes a “sale” or “sharing” of Personal Information under the CCPA/CPRA (for example, certain disclosures to advertising partners for cross-context behavioral advertising), you may exercise your opt-out rights as described in Section 17.
13. International Data Transfers
Because Wafix Technologies provides Services globally and engages Third-Party Service Providers located in multiple jurisdictions, Personal Information may be transferred to, stored in, and Processed in countries other than the country in which it was originally collected, including the United States, which may not offer the same level of data protection as your home jurisdiction. Where Personal Information originating from the EEA, United Kingdom, or Switzerland is transferred to a country not deemed to provide an adequate level of protection, Wafix Technologies relies on appropriate safeguards, including the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or other legally recognized transfer mechanisms, together with supplementary technical and organizational measures as appropriate. By using our Services or providing Personal Information to us, you acknowledge that your information may be transferred internationally as described in this Section.
14. Data Retention
Wafix Technologies retains Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, maintain business and tax records, resolve disputes, and comply with legal obligations. As a general matter: (a) project files, communications, and account records are retained for the duration of the Client relationship and for a period of up to seven (7) years thereafter for accounting, tax, and legal defense purposes, unless a longer retention period is required by law; (b) marketing contact information is retained until you unsubscribe or request deletion; and (c) technical and analytics data is generally retained for up to twenty-six (26) months. Retention periods may vary depending on the nature of the information, applicable statutory limitation periods, and legitimate business needs. Upon expiration of the applicable retention period, we will securely delete, anonymize, or aggregate the relevant Personal Information.
15. Security Measures
Wafix Technologies implements administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, and destruction, including encryption of data in transit via Transport Layer Security (“TLS”), access controls limiting internal access to Personal Information on a need-to-know basis, secure hosting infrastructure, regular security reviews, and reliance on PCI DSS-compliant Payment Processors for payment card data. Notwithstanding these measures, no method of electronic transmission or storage is completely secure, and Wafix Technologies cannot guarantee absolute security. In the event of a data breach affecting Personal Information, Wafix Technologies will notify affected individuals and applicable regulators as required by applicable law.
16. Children’s Privacy (COPPA)
Our websites and Services are directed to businesses and individuals who are at least eighteen (18) years of age and are not intended for use by children under the age of thirteen (13). Wafix Technologies does not knowingly collect Personal Information from children under thirteen (13) in a manner inconsistent with the Children’s Online Privacy Protection Act (“COPPA”). If we become aware that we have inadvertently collected Personal Information from a child under thirteen (13) without verifiable parental consent, we will take reasonable steps to delete such information promptly. If you believe we have collected information from a child in violation of this Section, please contact us using the information in Section 22.
17. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the CCPA/CPRA, subject to certain exceptions: (a) the right to know the categories and specific pieces of Personal Information we have collected, used, disclosed, and sold or shared about you; (b) the right to delete Personal Information we have collected from you, subject to certain exceptions such as completing a transaction or complying with a legal obligation; (c) the right to correct inaccurate Personal Information; (d) the right to opt out of the sale or sharing of Personal Information and of the use of Sensitive Personal Information for certain purposes; (e) the right to non-discrimination for exercising your CCPA/CPRA rights; and (f) the right to designate an authorized agent to make a request on your behalf. To exercise any of these rights, please submit a request using the contact information in Section 22. We will verify your identity before responding to a request, generally by matching the information you provide to information we already maintain. We will respond within the time periods required by the CCPA/CPRA.
18. GDPR and UK GDPR Rights
If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights with respect to your Personal Information, subject to applicable exceptions: (a) the right of access to obtain confirmation of, and access to, Personal Information we hold about you; (b) the right to rectification of inaccurate or incomplete Personal Information; (c) the right to erasure (“right to be forgotten”) in certain circumstances; (d) the right to restrict Processing; (e) the right to data portability, allowing you to receive your Personal Information in a structured, commonly used, machine-readable format; (f) the right to object to Processing based on legitimate interests or for direct marketing purposes; (g) the right to withdraw consent at any time where Processing is based on consent; and (h) the right to lodge a complaint with your local data protection supervisory authority. You may exercise these rights by contacting us using the information in Section 22. Where Wafix Technologies acts as a Data Processor on behalf of a Client, requests relating to end-user data should generally be directed to the applicable Client, and Wafix Technologies will provide reasonable assistance to the Client in responding to such requests.
19. International User Rights
Users located in Australia, Canada, the United Kingdom (outside the UK GDPR context above), and other jurisdictions may have additional privacy rights under applicable local law, including the Australian Privacy Principles under the Privacy Act 1988 (Cth) and Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”). Wafix Technologies will honor legitimate requests to access, correct, or delete Personal Information consistent with applicable local law, and will apply the substantive protections described in Sections 17 and 18 to Users in other jurisdictions to the extent reasonably practicable, even where not strictly required by local law.
20. Marketing Communications
Wafix Technologies may send marketing communications regarding our Services, promotions, and updates to Clients and prospective Clients who have provided their contact information, consistent with applicable law. Where required by law (for example, in the EEA and UK), we will obtain your prior opt-in consent before sending marketing communications by email. You may opt out of marketing communications at any time by clicking the “unsubscribe” link included in each marketing email or by contacting us using the information in Section 22. Please note that even if you opt out of marketing communications, we may continue to send you transactional or service-related communications, such as invoices, project updates, and support responses, which are necessary to perform the Services.
21. Email Communications and CAN-SPAM Compliance
All commercial email communications sent by Wafix Technologies will: (a) accurately identify Wafix Technologies as the sender and avoid false or misleading header or subject-line information; (b) include a clear and conspicuous mechanism to opt out of future commercial emails; (c) honor opt-out requests within ten (10) business days, consistent with the CAN-SPAM Act; and (d) include our valid physical postal address. Wafix Technologies does not sell or transfer email addresses collected from Users to third parties for their own independent marketing purposes without your consent.
22. Data Deletion and Access Requests
To submit a request to access, correct, delete, or otherwise exercise your privacy rights described in this Privacy Policy, please contact us using the information in Section 23. To help us process your request efficiently, please include: (a) your full name and the email address associated with your account or communications with us; (b) a description of the request; and (c) any information necessary to verify your identity. We will respond to verified requests within the timeframes required by applicable law, generally within thirty (30) to forty-five (45) days depending on jurisdiction. We may deny a deletion request in whole or in part where retention is necessary to complete a transaction, comply with a legal obligation, detect security incidents, or exercise or defend legal claims.
23. Disclaimers
This Privacy Policy applies solely to Personal Information collected by Wafix Technologies through its own websites, communications, and Services. It does not apply to information collected by third-party websites or platforms that may be linked from our websites, or to information you provide directly to Third-Party Service Providers, which is governed by their respective privacy policies. Wafix Technologies is not responsible for the privacy practices of any third party. This Privacy Policy does not constitute a contractual offer and does not create rights enforceable by third parties except as expressly set forth in our Terms and Conditions. Nothing in this Privacy Policy shall be construed as legal advice; individuals with specific legal questions regarding their privacy rights should consult independent legal counsel.