1Who we are
WesDx Limited ("we", "us") runs this website and sells WhatSprite. We are a company registered in England and Wales, company number 12524165, registered office 71-75 Shelton Street, London WC2H 9JQ. We are the controller of the personal data described here.
Contact us about privacy at whatsprite@wesdx.com.
2Buying a licence
Payment is taken by Stripe. From Stripe we receive the name or business name you give at checkout, your billing address, email address and tax ID (if you enter one), and the identifiers of the payment. We never see your card details.
We use them to issue your licence and email it to you, which is necessary for our contract with you. Your name, address and email are written into the licence file, so WhatSprite can show who it is licensed to: anyone you give the file to can read them. We keep a record of every licence (those details, its term and dates, and the Stripe identifiers) to meet our tax and accounting obligations, to answer questions about your licence, and to start a renewal when your current licence ends.
Stripe processes your payment as a separate controller, under Stripe's privacy policy.
3Requesting a demo licence
When you request a demo licence we receive your name, job title, organisation, country and work email, your organisation's address and your phone number if you give them, what you'll mainly use WhatSprite for, and when you agreed to the terms.
We use them:
- to confirm your email address and issue and email the demo licence, at your request. Your organisation's name and address and your email are written into the licence file;
- to issue one demo licence per email address, and to stop the form being misused, in our legitimate interest in offering free demos fairly; and
- to contact you about your trial, in our legitimate interest in selling WhatSprite to organisations. You can tell us to stop at any time.
4Contacting us
When you send the contact form we receive your name, email address and message, what it's about, and your organisation and phone number if you give them. If you email us, we receive what you send.
We use them to answer you, and to keep a record of what we've discussed, in our legitimate interest in supporting our customers and prospective customers. Please don't send us case material or other people's personal data.
5Using WhatSprite
WhatSprite doesn't contact us. It doesn't check your licence online, and it sends us no usage data, telemetry, crash reports or case content. Cases stay on your computers, encrypted under your passphrase, which we never have. When you acquire an account, WhatSprite talks only to WhatsApp's servers.
For the data you acquire with WhatSprite, you are the controller and we are not your processor.
6This website
The site sets no cookies and has no advertising or cross-site tracking. We use Cloudflare Web Analytics to see aggregated statistics, such as which pages are visited and where visitors came from. It sets no cookies, doesn't identify you, and we never see details of individual visits. We rely on our legitimate interest in understanding how the site is used. We don't keep logs of your visits. When you send the demo or contact form, we use your internet address to limit how many requests can come from one place, storing it only as a one-way hash for up to two days.
7Who handles your data
- Amazon Web Services hosts the site, the licence records, the demo requests and contact form messages, and sends our emails (Amazon SES). It acts on our instructions, as our processor.
- Stripe takes payments, as a separate controller.
- Cloudflare provides the site's analytics. It receives your internet address and browser details when the page loads, as Cloudflare's privacy policy describes.
We don't sell your personal data or share it with anyone else, unless the law requires us to.
8Transfers outside the UK
This website and our licence service run in the United States, so your data is stored there. We rely on the UK-US data bridge where the recipient is certified under it, and otherwise on the International Data Transfer Addendum issued by the Information Commissioner. Stripe may also process data in the United States, as its privacy policy describes.
9How long we keep it
| Licences bought | 6 years after the licence ends, for tax and accounting, then deleted automatically. |
|---|---|
| Demo requests never confirmed | Expire after 24 hours and are then deleted automatically, usually within a few days. |
| Demo licences, with your request details | 2 years after the demo licence ends, then deleted automatically. |
| Contact form messages | 2 years after we receive them, then deleted automatically. |
| Form misuse counters | Up to 2 days, as one-way hashes. |
| Service logs | 2 years. They hold licence and payment identifiers, not names or email addresses. |
Deleted records can remain in our database backups for up to 35 days.
10Your rights
You can ask us for a copy of your personal data, and ask us to correct it, delete it, restrict how we use it, or send it to you or someone else in a portable form. You can object to our using it on the basis of our legitimate interests, including for contacting you about your trial. Email whatsprite@wesdx.com. We'll reply within a month.
A licence file we've issued can't be changed: if your details change, we can issue a replacement.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd welcome the chance to put it right first.
11Changes to this notice
We'll update this page if how we handle personal data changes, and change the date at the top.