Privacy Policy

Information We Collect

Personal Information You Provide

When you interact with Websloop, we may collect the following personal information:

• Contact Information: Name, email address, phone number, company name
• Project Details: Service requirements, budget, timeline, project specifications
• Payment Information: Billing address, payment method details (processed securely via third-party payment processors)
• Communication Data: Email correspondence, chat messages, form submissions
• Technical Support: Support tickets, feedback, bug reports

Automatically Collected Information

• Device Information: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent, click patterns, referral source
• Location Data: Approximate geographic location based on IP address
• Cookies: Session cookies, analytics cookies, preference cookies

How We Use Your Data

We use your personal information for the following purposes:

Data Retention Period

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Active Client Data: Duration of project + 2 years for support and warranty
• Contact Form Submissions: 2 years from submission date
• Email Communications: 3 years for business records
• Payment Records: 7 years (legal/tax compliance)
• Analytics Data: 26 months (Google Analytics default)
• Marketing Consent: Until you withdraw consent

After the retention period, we securely delete or anonymize your personal data.

Third-Party Services

We use trusted third-party services to operate our business. These providers have access to limited personal data:

Service Providers We Use:

• Email Services: Google Workspace (G Suite) - for business email
• Payment Processing: Worldremit, xoom By Paypal , taptap Pay, Payoneer, and Upwork - for secure payment handling
• Analytics: Google Analytics - for website usage statistics
• Hosting: Siteground, Cloudflare - for website hosting and CDN
• CRM: HubSpot/Salesforce - for customer relationship management
• Communication: Zoom, Slack - for project communication

All third-party processors are:

• GDPR compliant and have signed Data Processing Agreements (DPAs)
• Required to protect your data with industry-standard security measures
• Prohibited from using your data for their own purposes

Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience on our website.

Types of Cookies We Use:

Managing Cookies: You can control cookies through your browser settings or use our cookie consent banner to opt-in/opt-out.

Your Rights Under GDPR

If you're in the EU/UK, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing for marketing or legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your data protection authority

Data Security Measures

We implement industry-standard security measures to protect your personal data:

• Encryption: SSL/TLS encryption for all data transmission (HTTPS)
• Secure Storage: Encrypted databases with restricted access
• Access Controls: Role-based access, multi-factor authentication
• Regular Audits: Security assessments and vulnerability scans
• Employee Training: Staff trained on data protection best practices
• Backup Systems: Regular encrypted backups with disaster recovery
• Incident Response: 72-hour breach notification protocol (GDPR requirement)

No system is 100% secure. While we implement robust security measures, we cannot guarantee absolute security. We encourage you to use strong passwords and keep your login credentials confidential.

International Data Transfers

Websloop operates globally and may transfer your data to countries outside your residence, including:

• United States: Cloud hosting and analytics services
• European Union: GDPR-compliant data centers
• United Arab Emirates: Regional office operations
• Pakistan: Headquarters and development team

Safeguards for EU Data:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for transfers to approved countries
• Binding Corporate Rules for intra-company transfers

Children's Privacy

Websloop's services are not directed to individuals under 18 years old. We do not knowingly collect personal data from children.

If you're a parent or guardian and believe we've collected data from a minor, please contact us immediately at hello@websloop.com. We will promptly delete such information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our business practices
• New legal or regulatory requirements
• Improvements to our data protection measures
• Feedback from users and stakeholders

Notification: We'll notify you of significant changes via:

• Email (to registered users)
• Prominent notice on our website
• Updated "Last Modified" date at the top of this page

Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests related to this Privacy Policy, contact us:

Legal Compliance

This Privacy Policy complies with:

• GDPR (EU General Data Protection Regulation) - EU/UK users
• CCPA (California Consumer Privacy Act) - California residents
• PIPEDA (Personal Information Protection) - Canadian users
• UAE Data Protection Law - UAE residents
• Pakistan Data Protection Act - Pakistani citizens

Supervisory Authority (EU/UK): You have the right to lodge a complaint with your local data protection authority if you believe we've violated your privacy rights.