WapadeskWapadesk Privacy Notice (wapadesk.com and the dashboard)
Status: first draft, 12 October 2026, for the owner's approval. Covers the data Wapadesk holds as a controller: website visitors, people who sign up, and clinic staff. Patient data collected through a clinic's widget is covered by that clinic's privacy notice and the Wapadesk DPA, not by this notice.
Who we are. Ege Digital Ltd, trading as Wapadesk, company number 15137795, registered office 24-26 Arcadia Avenue Fin009, London, United Kingdom, N3 2JU. Contact: hello@wapadesk.com.
What we collect and why
| Data | Purpose | Lawful basis | Kept for |
|---|---|---|---|
| Visitor data on wapadesk.com: pages viewed, device type, referrer (no cookies set without your choice) | Running and improving the site | Legitimate interests | 14 months (aggregated statistics kept longer) |
| Enquiry through the chat on our site: name, phone, email, business name, website, your answers | Replying to you on WhatsApp and following up your enquiry | Legitimate interests (business enquiry); consent for marketing updates if you tick that box | 24 months after the enquiry, or until you ask us to delete it |
| Account data: name, email, phone, business name, role, sign-in metadata | Providing the dashboard, security, support | Contract | Account life plus 12 months |
| Billing data: card handled by Stripe (we never see the full number), invoices, VAT details | Taking payment, accounting | Contract; legal obligation (tax records) | 6 years after the tax year |
| Support records: emails, WhatsApp messages with us, support session logs | Helping you, keeping an audit trail | Contract; legitimate interests | 24 months |
| Service emails (welcome, renewal, payment, licence, lead notifications) | Running your subscription and alerting your team | Contract | Delivery logs 12 months |
Who we share it with. Google Cloud (hosting, UK region for product data; staff sign-in data in the United States under the UK International Data Transfer Addendum), Cloudflare (network and security), Brevo (email, EU), Stripe (payments). We do not sell data and do not use it for advertising.
Cookies and similar storage. wapadesk.com sets no advertising cookies. If we add site statistics, they will run under the PECR statistical-purposes exception introduced by the Data (Use and Access) Act 2025, with a clear description and a simple way to opt out on the site. The dashboard uses strictly necessary storage to keep you signed in.
Your rights. You can ask for access, correction, deletion, restriction, portability or object to processing by emailing hello@wapadesk.com; we respond within one month. You can complain to the Information Commissioner's Office (ico.org.uk).
Changes. We will publish changes here and email account owners about material changes.