Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

• Company: W&D Corp - Fzco
• Address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
• Email: [email protected]
• Phone / WhatsApp: +1 (406) 518-6196
• Website: wdagency.net

W&D Corp - Fzco is incorporated as a Free Zone Company (Fzco) under the laws of the Dubai Silicon Oasis Authority, Dubai, United Arab Emirates.

2. Information We Collect

We collect only the information necessary to provide our reputation management services. This includes:

Information you provide directly

• Contact form submissions: first name, last name, email address, platform involved, and a description of your case.
• Direct communications: information you share via email, phone, or WhatsApp when engaging with our team.
• Case files and documentation: any documents, screenshots, or evidence you submit as part of your case.

Information collected automatically

We do not use cookies, tracking pixels, analytics scripts, or any third-party monitoring tools on this website. No browsing data, session data, or device identifiers are collected during your visit to wdagency.net.

Information from third parties

In the course of providing our services, we may receive information about you from third-party platforms (e.g., social media networks) solely for the purpose of executing your requested service.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To assess, manage, and execute your content removal, account recovery, verification, or reputation monitoring case.
• To communicate with you regarding your case status, updates, and results.
• To provide and improve our services, including RepRadar platform access where applicable.
• To comply with applicable legal obligations, including UAE law and, where applicable, EU General Data Protection Regulation (GDPR) requirements.
• To respond to legal requests from competent authorities when required by law.
• To enforce our Terms of Service and protect our legal rights.

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

For individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases as defined in Article 6 of the GDPR:

• Contractual necessity (Art. 6(1)(b)): Processing is necessary to perform the service you have requested or to take pre-contractual steps at your request.
• Legitimate interests (Art. 6(1)(f)): We process data to operate our business, protect our legal rights, and detect or prevent fraud, where this does not override your fundamental rights.
• Legal obligation (Art. 6(1)(c)): We may process data to comply with applicable laws and regulatory requirements.
• Consent (Art. 6(1)(a)): Where required, we will seek your explicit consent before processing certain categories of data, which you may withdraw at any time.

For sensitive data (special categories under Art. 9 GDPR), we will only process such data with your explicit consent or where permitted by applicable law.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law.

• Active cases: Data is retained for the duration of the service engagement and for a period of 2 years after case closure, for legal and contractual purposes.
• Enquiries without engagement: Contact form data is retained for up to 12 months if no service is initiated.
• Legal and regulatory obligations: Certain records may be retained for longer periods as required by UAE law or other applicable regulations.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised.

6. Data Security & Confidentiality

We take data security extremely seriously. All information you submit is protected by the following measures:

• AES-256 encryption for data at rest and TLS encryption for all data in transit.
• Non-Disclosure Agreements (NDAs) are required for all team members who handle client data.
• Access to case files is restricted on a strict need-to-know basis.
• Secure servers located in the United Arab Emirates.
• Regular internal security reviews and access audits.

While we implement robust security measures, no method of transmission over the internet is 100% secure. We encourage you to contact us through our secure channels and to avoid sending sensitive information via unencrypted email.

7. Cookies & Tracking Technologies

Our website does not use cookies, tracking pixels, browser fingerprinting, analytics software (including Google Analytics), advertising networks, or any other form of behavioural tracking.

No information about your browsing behaviour, device, IP address, or session is collected or stored when you visit wdagency.net.

8. International Data Transfers

W&D Corp - Fzco is based in the United Arab Emirates. If you are located in the EEA, UK, or another jurisdiction with data protection laws, your personal data will be transferred to and processed in the UAE.

The UAE has its own data protection framework (Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data — "UAE PDPL"). Where required by the GDPR or equivalent legislation, we rely on appropriate safeguards for such transfers, including:

• Standard Contractual Clauses (SCCs) as approved by the European Commission.
• Derogations under Art. 49 GDPR where applicable (e.g., the transfer is necessary for the performance of a contract requested by you).

For questions about international transfers, please contact us at [email protected].

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Rights under UAE PDPL (for all users)

• Right to be informed about how your data is processed.
• Right to access your personal data held by us.
• Right to correct inaccurate or incomplete data.
• Right to request deletion of your data (subject to legal retention obligations).
• Right to withdraw consent at any time where processing is based on consent.

Additional rights under GDPR (for EEA / UK residents)

• Right of access (Art. 15): Request a copy of your personal data.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion ("right to be forgotten"), subject to legal obligations.
• Right to restriction (Art. 18): Request that we limit the processing of your data.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interests.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18 without verifiable parental consent, we will take immediate steps to delete that information.

If you believe we may have inadvertently collected information from a minor, please contact us immediately at [email protected].

11. Third-Party Links

Our website may contain links to third-party platforms (such as social media networks) for informational purposes. These third-party websites operate under their own privacy policies, and we have no control over their data practices. We encourage you to review the privacy policy of any third-party site you visit.

We are not responsible for the privacy practices or content of any third-party websites.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of our website or services following the posting of changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

• Company: W&D Corp - Fzco
• Address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
• Email: [email protected]
• Phone / WhatsApp: +1 (406) 518-6196

We are committed to working with you to resolve any concerns about the use of your personal data.