Overview
This page explains how WBIZ handles personal data in line with the EU General Data Protection Regulation. It applies where you or your contacts are in the European Economic Area or the UK, and it sits alongside our Privacy Policy.
GDPR Compliance
How WBIZ handles personal data in line with the EU General Data Protection Regulation.
1. Controller and processor
When you use WBIZ to message your own contacts, you are the Controller for their personal data and WBIZ is your Processor under Article 28, acting on your documented instructions. For the account data you give us at signup, WBIZ is the Controller.
2. Lawful basis and consent
You need a lawful basis to message your contacts, most often consent or legitimate interest. WBIZ gives you the tools to collect and record consent, track opt-in status per contact, and honour opt-outs. Choosing and documenting the lawful basis is your responsibility as the Controller.
3. Data subject rights
Data subjects can ask to access, rectify, erase, restrict, or port their data, and can object to processing. We support these requests end to end. To act on one, or to reach us about your own data, email support@wazy.africa.
4. Data processing terms
We process personal data only to provide the Services and only on your instructions. A Data Processing Agreement is available for customers who need one, and our sub-processors for hosting, email, error monitoring, and message delivery through Meta act under written terms.
5. International transfers
WBIZ hosts data in India, so personal data from the EEA or UK is transferred outside those regions. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. Contact us for the current transfer terms.
6. Security
We apply the technical and organisational measures Article 32 expects: encryption in transit, encryption at rest for secrets, access controls, and audit logging. There is more detail on our Security page.
7. Breach notification
If a personal data breach affects your data, we will act to contain it and, where the law requires, notify the relevant supervisory authority and affected people without undue delay.
8. Contact
For any question about data protection under the GDPR, or to request a Data Processing Agreement, email support@wazy.africa.
The EU General Data Protection Regulation, which governs personal data of people in the EU.
Yes, including data subject rights and a DPA. This page explains how.
You are the controller of your workspace content, and WBIZ is the processor.
Access, rectification, erasure, restriction and portability, among others.
Export or delete the contact data in the dashboard, or ask support.
Yes, a data processing agreement is available.
We process on your instructions as the controller, under the DPA.
On infrastructure aligned with your needs. Ask for specifics and locations.
Where transfers happen, they use appropriate safeguards. Ask for detail.
HTTPS in transit, signed webhooks, scoped keys, roles and audit logs.
No.
Available on request with the DPA.
We follow GDPR breach notification timelines.
For the life of your account, then deleted per the retention terms.
Email support@wazy.africa.