GDPR

1. Our role

• Controller: for website visitors, people who ask for early access, and the businesses and agencies that hold accounts, we decide how information is used.
• Processor: for the customers of a business that uses Localwise HQ, the business is the controller, and we handle information on its behalf.

2. Lawful bases

• Contract: to provide the service to account holders
• Legitimate interests: to keep the service secure, prevent abuse, and improve it
• Consent: for things like early-access updates, which you can withdraw at any time
• Legal obligation: where the law requires us to keep or share information

3. Your rights

If you're in the UK or the EU, you can ask to:

• See the personal information we hold about you
• Correct it, or delete it
• Limit or object to how we use it
• Receive a copy in a portable format
• Withdraw consent you've given

You can also complain to your data protection authority.

4. How to use your rights

Email team@localwisehq.com. We may need to confirm who you are, and we aim to reply within one month. If your information came from a business's booking page, we may pass your request to that business, because it controls the information.

5. When we act for a business

When we process information for a business, we:

• Use it only to provide the service, following the business's instructions through the product
• Limit access to people who need it and must keep it confidential
• Use the security measures described below
• Use the providers listed below, and give notice of changes on this page
• Help the business respond to requests from its customers
• Tell the business without undue delay if we become aware of a breach affecting its data

Our Data Processing Terms have the details. See also your customers' information in our Terms of Service.

6. Providers we use

7. International transfers

We operate from India, and our providers work in the United States and other countries. When UK or EU personal information goes to a country without an adequacy decision, we rely on recognized safeguards, such as the Standard Contractual Clauses and the UK addendum, where they apply.

8. Retention and deletion

We keep information only as long as needed. See how long we keep it in our Privacy Policy, including the set periods for photos, unfinished bookings, and visit records.

9. Security

We use encrypted connections and access controls, and database rules keep one customer's data separate from another's. We also limit how much can be uploaded or sent, to reduce abuse.

10. Breach notification

If a personal data breach happens, we'll act to contain it. Where we're the controller, we'll tell the relevant authority within 72 hours when the law requires it, and tell affected people when the risk is high. Where we act for a business, we'll tell that business without undue delay.

11. Data protection officer and representatives

We haven't appointed a data protection officer or a UK or EU representative. If the law requires us to appoint one, we'll do so and list them here.

12. Contact

Email team@localwisehq.com. ViralVaultNetwork (VVN), India. See also our Privacy Policy and Terms of Service.