Privacy Policy

Learn more about how Wisard collects and uses data and your rights as a user.

Last Updated on: 22 June, 2023

Our promise to be privacy-first

.................

Quick Overview

Who is Wisard and how did we come to be?

Wisard, the platform, is the product of Weyouchain Technologies Ltd., which is a creative technology company based in Oxford, England. We began in 2020, during the pandemic, to investigate why people cannot manage their personal data, which they share online. We soon discovered that while people are concerned about their online privacy, they feel powerless when it comes to retaining control of it. Although businesses were adapting to the General Data Protection Regulation, consumers still felt powerless.

Wisard aims to provide a "smart privacy assistant" to help individuals and businesses monitor, manage, and protect access to their data.

Our vision is to become the most trusted online privacy solution.

We are committed to safeguarding your privacy and ensuring the security of your personal data. Please read this policy carefully to understand how we handle your information.

Key Takeaways (TLDR) –
For the quick readers

When you use our service, we will never sell, trade, or rent your data. Not today, not tomorrow, never.
You remain in control of your data – you can remove it from the Wisard platform at any time. You can also use our Discover service to ask other companies to remove your data.
We use cookies for the purposes of our site functioning and improving our user experience. There’s more detail on this below in our Cookie Policy.
We make all efforts to ensure we comply with data protection laws both in the UK and EU.
All of the data held within Wisard is subject to the highest security standards.
As a data controller, we are responsible for the data that we process.
We are fully accountable to the UK data protection authority, the Information Commissioner’s Office (ICO) via Registration reference: ZB426384.

For more detailed legal stuff, our full Privacy Policy is below. If you have any further questions, please do get in touch, we’d love to hear from you.

Privacy Policy

Data Collection

This Privacy Policy applies to personal data we process through our website and the Wisard platform. This Privacy Policy explains how Wisard processes, stores and protects this personal data, as well as what your rights are as a data subject. What we process, why and the legal basis for doing so.

Is Wisard a Data Controller?

The data controller for this Policy is Wisard (Part of Weyouchain Technologies Ltd), a company registered in England and Wales, with company number 12993235 (Wisard, we, us, our). We are registered with the ICO, with registration number ZB426384. Our address is 229, London Road, Oxford OX3 9JA. You can contact us here.

The responsible use of personal data and consumer rights are two areas that we are proud of. As such, we make all efforts to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Sensitive Data

Certain types of data are classified as “special category” under the GDPR. This type of data is deemed to be potentially sensitive, as it relates to matters including race, ethnicity, sexuality, sex life, health status and religious or philosophical views. A higher threshold of protection requirements applies to dealing with this data. Wisard will never request you to provide any special category data, but we recognise that we may receive this while scanning your email. Where we process this data, we do so on the basis of our contract.

Children Under 16 are not permitted to use our service

The Wisard platform is not intended for use by anyone under 16 years of age. If parents or guardians wish to exercise their children’s rights on their behalf, then they can find out more information about this from the ICO here.

Creating an Account

When you create an account with Wisard, we collect your name and email address and store those in your account. If you choose to register using an Identity Provider (Google for example) then we will collect that information from the provider. We process this data on the basis of entry into a contract with you to provide you with services, which are governed by this Privacy Policy and our Terms of Use.

When you register to our service, we will ask you to provide us your permission to connect to your email inbox. We use methods such as “Sign in with Google” to securely access your email inbox. These methods are based on the OAUTH2 secured authorization protocol, which means we don’t have any access to your password.

During the entire process, we do not process or collect the content of any email in your inbox.

Discover Service

Your email inbox provides a great representation of the companies that process your personal information. We’ve designed a non-intrusive technology that searches your inbox to identify the companies you interact with, whilst only collecting and processing the minimum amount of data. You can then select any of those companies and send data rights requests to them directly from your email address. This feature is currently only available for Gmail users

Analysing Your Inbox

When you allow our technology to search for companies in your inbox, it does so by using your Identity Provider’s secure APIs, which control the scope of the data processed.

If the Identity Provider is Google, Wisard’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

When using this service, our technology analyses email metadata, which is information about the transmission of an email, such as who it was from and when it was received. It does not retrieve the content of the body of the email.

We do require read-only access to your inbox (your Identity Provider will allow you to grant Wisard permission) in order to perform searches, which allows us to narrow the number of emails we actually need to look at. While we do need to search through the emails in your inbox in order to identify which ones are from companies, the Discover Service does not read any of the content, conversations or attachments within them.

The technology uses your email inbox to build a list of companies for your requests. We store which companies were found during the process to help you build your request. We may add these companies to our list of organisations so other users can send similar requests.

Sending Emails From Your Inbox

Our Discover Service requires permission to send emails on your behalf from your inbox. Your Identity Provider will allow you to grant Wisard permission to do this. The technology allows you to easily make requests directly from your email inbox. You can preview these emails prior to sending them.

We help you send these requests, but we do not act as an agent on your behalf.

Sending your request directly from your inbox enables companies to confirm that any request is coming directly from you. They can then take action and respond directly to your inbox.

We only use this technology for the purposes set out above. We do not collect any content or personal information from your emails and we will only ever send request emails where you select and confirm this.

We process this data on the basis of your consent, collected through your Identity Provider. You can revoke this at any time at the relevant management page for your Identity Provider:

• Google: https://myaccount.google.com/permissions

We store records of which companies you sent requests to, and what type of GDPR request it was. We process this data on the basis of entry into a contract with you to provide you with services, which is governed by this Privacy Policy and our Terms of Use.

Deleting your Account

You can delete your Wisard account at any time by contacting us here. The Wisard platform will soon have a facility to delete the account from the platform itself.

Providing Support to You

When you request assistance from our support staff, they may access details of requests you have sent through our platform in order to help you.

Information is also stored when you communicate with Wisard via email, phone or other means. This is usually limited to your name, email address and/or phone number depending on how you contact us and any correspondence with us on resolving your enquiry.

We process this data on the basis of our contract with you and/or our legitimate interests in providing an efficient service to you.

Surveys and feedback

In order to better understand our customers, Wisard also collects anonymised data in surveys and other feedback methods. This helps us improve our service by tailoring our developments. Participation in surveys is optional and anonymous. Where you choose to participate in a survey, we process this data on the basis of our legitimate interests in understanding your experience on our platform.

When you agree to provide additional feedback as part of a survey, we may collect your name and/or email address and use those in order to correspond with you. We process this information on the basis of your consent.

Operational Data

When using our website and/or platform, we may also record your IP address as part of normal request processing and session management, and to support you and our service in the event of problems occurring. We process this data on the basis of our legitimate interests in providing a secure platform.

Mailing List

If you choose to sign up to our mailing list, we will process your name and email address in order to send you information and updates about our work and platform. We process this data on the basis of your consent.

Data Sharing and Processors

When you use Wisard to send a request to one or more companies, the information you provide will be shared with the companies for the purposes of satisfying your request and on the basis of the contract in place with you.

We also work with carefully selected third party providers to perform certain data processing tasks on our behalf. We engage these providers on terms that ensure the confidentiality and security of your data.

Except as set out below, Wisard does not share your data with any other third parties unless required to do so in response to a lawful request by authorities.

The list below sets out the third parties we engage as processors and provides more information about their data protection practices.

Wix. Our website development system is Wix and submissions to our Contact Us form and other forms of website analysis are stored there. Their privacy policy can be found here.
Zoho. Zoho acts as a hub for all our email communication. Their privacy policy can be found here.
Azure. We use Azure as our cloud solution provider for all our storage related to our platform. Azure’s privacy policy is available here.
Google Analytics. We use Google Analytics and other service providers to collect information regarding visitor behaviour and demographics to improve our services and user experience. This information is not used to directly identify anyone. For more information about Google Analytics, please visit https://privacy.google.com/businesses/compliance/. You can also choose to opt-out at any time. To do this, please visit https://tools.google.com/dlpage/gaoptout.
Google AdWords. We use Google AdWords for paid advertising and use some of their tracking to help monitor the effectiveness of our campaigns. Their privacy policy is here. You can opt-out at any time by visiting their Settings page.
Facebook. We use Facebook for paid advertising and use their conversion tracking so that we know which of our advertising campaigns are working best on their platform. We make every effort to minimise the data sent to Facebook in order to protect your privacy including filtering/limiting the events we sent to them. Facebook’s privacy policy is here, and their EU Data Transfer Addendum is here.
Microsoft (Bing). We use Bing for paid advertising and use their conversion tracking to monitor the effectiveness of our advertising campaigns. Their privacy policy is here, and you can control your privacy settings on their platform here.
Twitter. We use Twitter for paid advertising and use their conversion tracking to monitor the effectiveness of our advertising campaigns. Their privacy policy is here.
Google Cloud Platform. GCP is DAD’s Cloud environment. Our cloud infrastructure is hosted entirely with Google Cloud and our servers are located in Europe. For more information about how Google processes your Personal Data, please visit here. For information about Google’s GDPR provisions please look here: https://cloud.google.com/security/gdpr.

International Transfers

If and when we transfer your data outside the UK or EU to a country deemed to have a lower standard of data protection in place, for example to a third party processor based in the US, we will ensure that your data is appropriately protected by meeting the obligations on us under GDPR and ensuring there is a transfer safeguard in place with the recipient, for example the Standard Contractual Clauses issued by the European Commission. Right now we do not share any information other than the scope of this Privacy Policy.

Retention

In general, we retain data for as long as is necessary for the purpose(s) for which we originally collected it. We may also retain information as required by law.

Third Party Links

Our website or platform may contain links to other websites or applications which are not controlled by Wisard. Wisard are not responsible for the privacy practices or content of such other websites or applications. As such, visiting these other websites or applications is at your own risk.

Cookies are small files stored on your computer by your browser when you visit a website.

They can be used for many reasons, but we use cookies for three purposes only:

Functional Cookies: these cookies are needed to make the site function correctly and to store your preferences with respect to other cookies.
Analytics Cookies: these cookies are optional and are used to improve our site traffic and performance, and to improve our user experience.
Advertising Cookies: these cookies are optional and are used to help us monitor the performance of our advertising campaigns. An important point is that while we do use adverts to publicise our site, we never advertise on our site - so there are no cookies for that purpose.

Non-essential cookies (Analytics and Advertising cookies) are deployed only on the basis of user consent. You can adjust your cookie preferences at any time by clearing the cookie cache in your web browser, which will present you with the cookie consent options when you revisit the Wisard website.

Your Rights

At Wisard we strongly believe that people should be fully informed of their rights so that they can act upon them should they wish to.

Under GDPR and data protection laws, there are certain rights that may be available to you with respect to your personal data:

Right to access – You have a right to ask for the personal data that we hold about you. We will provide you with your data within 30 days. If we may take longer, we will let you know and explain the reasons for the delay. We will not charge you for such a request, unless we reasonably consider your request to be excessive or repetitive. We also reserve the right to refuse a request if we reasonably consider it unfounded, repetitive or excessive.
Right to be informed – This policy provides the information you need about how we collect and use your data.
Right to rectification – If you consider that any information we hold is inaccurate, please let us know and we will take steps to rectify it.
Right to erasure – In certain circumstances, you have the right to have personal data that we hold about you erased. We may be required by law to retain some data for a period of time.
Right to object and restrict – You can ask for the processing of your personal data to be restricted, for example for marketing purposes. Where your data is processed on the basis of consent, you may also withdraw your consent to that processing at any time. You can also object to the processing of your data entirely but this may affect the service we are able to offer.
Right to portability – You can request a copy of your personal data to be sent to another data controller or to yourself.

Please note, these rights are not absolute and may be restricted in certain circumstances. To exercise your rights or if you require any further information, please contact our data protection team at infra@withwisard.com or via post to our registered address.

If you are unsatisfied with the way we handle a request or believe we have processed your data unlawfully, you also have the right to make a complaint to the ICO https://ico.org.uk/make-a-complaint/. If you are based outside the UK, you can also contact your national data protection authority for further information.

Changes and Revisions

We may revise our Privacy Policy from time to time. The most current version of our Privacy Policy will always be on our site, and we will list the data and nature of change below. Should a change to the Privacy Policy result in a material impact to the processing of personal data, we will contact affected data subjects to inform them of these changes as required by law.

Update History

13 June, 2023 - Created Boiler plate Privacy Policy

22 June, 2023 - Added detailed sections on data collection, processing, and added a TLDR version