Privacy policy. How we handle your data.

Summary

• We collect what you choose to send us (a note, a call booking or an email) and, only if you accept, analytics about how the site is used.
• We use it to reply to you, to arrange and do the work you ask about, and to improve the site. We don't sell it, and we don't add you to newsletters.
• No analytics cookies load until you click Accept. You can change your mind at any time with “Cookie settings” at the bottom of every page, or on our cookie policy.
• You can ask for a copy of your data, a correction or deletion at any time: abdullah@wanile.ai.

Who we are

This website, wanile.com, is run by Wanile Technologies, a product and AI engineering company based in Lahore, Pakistan (“Wanile”, “we”, “us”). We are the controller of the personal data described in this policy, which means we decide why and how it is used.

Our founder, Muhammad Abdullah, is responsible for privacy at Wanile and answers every privacy request himself. You can reach him at abdullah@wanile.ai.

This policy covers the website and the ways you can contact us through it. When we work with a client, the written agreement for that work (including any data processing terms) covers the data we handle as part of it.

What we collect

When you send us a note

The note form on the Contact page asks for:

• what you need help with, your message, and optionally a link, your timeline and the way of working you prefer;
• your name and work email;
• optionally your company, your role and how you heard about us.

With the note we also record your time zone (read from your browser, so we can suggest call times that suit you), the page that sent you to the form if it was an engineer profile or a case study, and a reference number for your note. So we know which channels bring enquiries, the note also carries the page you sent it from, the site that linked you there and any campaign tags in that link, your device type (phone, tablet or computer), your browser's language and your approximate country (worked out from your IP address). If you accepted analytics cookies, it also carries the visit record kept in your browser: how you first found the site and how many visits and pages you've had (see “What we keep in your browser” below).

When you press send, the note goes to our server, which saves it in our enquiry database and alerts our founder on WhatsApp, so he sees it quickly. We then add our own notes as we follow up (for example when we replied and what we agreed). To stop spam, the server stores your IP address only in scrambled (hashed) form, which can't be turned back into the address, and briefly remembers the address itself in memory (about 10 minutes). If sending fails, your own email app opens with the note filled in, addressed to abdullah@wanile.ai; nothing is sent until you send that email yourself.

While you write, the form keeps a draft in your browser so you don't lose it if you leave the page. That draft stays on your device and is not sent to us until you send the note. It is deleted when you do.

When you book a call

The “Book a free call” tab on the Contact page shows a scheduler from Calendly. It loads only when you open that tab. Calendly collects what you enter there (usually your name, email, the time you pick and any notes) and sends you a confirmation; the booking is added to our calendar. If you have already typed your name, email or message into the note form, we pass them to Calendly to fill in its form for you.

When the booking is made, Calendly tells our page that it happened (with the booking's ID, not your details). We record the booking in our enquiry database, together with your note if you sent one, and alert our founder. We may also fetch the booking's details from Calendly (your name, email, time zone, the time you picked and your answers) to keep that record complete.

When you email or message us

If you email us, we receive your email address, the content of your email and anything you attach. The floating “Message the founder” button and some other links take you to our founder's LinkedIn profile; messages you send on LinkedIn are handled by LinkedIn under its own privacy policy, and we see them in our LinkedIn account.

When you browse the site

Like every website, ours is delivered by a server that records basic technical details of each request: your IP address, browser and device type, the page requested, the referring page and the time. Our hosting provider, Vercel, keeps these logs for a short time to run the site and protect it from abuse.

Only if you click Accept on the cookie banner, we also use analytics tools to understand how the site is used: Google Analytics 4 and Microsoft Clarity, and possibly Hotjar and the LinkedIn Insight Tag. Our cookie policy shows which of these are switched on. They record things like:

• the pages you visit, how long you stay and how far you scroll;
• how you arrived (a search engine, a link or a campaign tag in the link);
• your device, browser, screen size and approximate location (country or city, worked out from your IP address);
• a few actions on the site: sending a note, booking or choosing a call time, clicking a link to the Contact page or an email link, and opening a client video.

Clarity and Hotjar can also make recordings and heatmaps of how pages are used (mouse movements, clicks and scrolling). Both are set to hide what you type into form fields. We keep Google's advertising features switched off. If we use the LinkedIn Insight Tag, LinkedIn can connect your visit to your LinkedIn account if you are signed in, to measure our LinkedIn ads and build audiences for them; we only see totals, never who you are.

If you click Decline, or your browser sends a Global Privacy Control signal, none of these tools load.

When you watch a video

Client videos are YouTube videos in Google's privacy-enhanced mode (youtube-nocookie.com). Nothing loads from YouTube until you press play. Once a video plays, YouTube receives your IP address and may store identifiers in your browser to run the player and count views.

What we keep in your browser

The site stores a few small items in your browser's local or session storage: your cookie choice, the unsent draft of your note, and two markers for the page transition and the homepage intro. They stay on your device and are not sent to us. Only if you accept analytics cookies, it also keeps a visit record: the page you first landed on, the latest page you arrived on from another site, that site's name, any campaign tags in the link, and your visit and page counts. It reaches us only with a note or a booking, and is deleted if you decline or withdraw consent. The cookie policy lists each item.

We don't ask for, and please don't send us, sensitive information such as health data or government ID numbers, or confidential code and credentials. We sign an NDA before we see anything confidential.

How we use it, and why we're allowed to

UK and EU data protection law (the UK GDPR and the EU GDPR) require a legal reason, called a lawful basis, for each use of personal data. These are ours:

Where we rely on legitimate interests, we have weighed them against your rights: you contacted us about work, and we use your details only for that. We don't sell personal data, we don't use it for automated decisions that affect you, and we don't send newsletters or marketing emails. We write to you only about your enquiry or our work together.

Who we share it with

Inside Wanile, your note is read by our founder and, when it helps answer you, shared with the engineers we propose for your work. Outside Wanile, we use these service providers. They handle data for us, under their own security and privacy terms.

We may also share personal data with our professional advisers (such as lawyers and accountants) under a duty of confidentiality, with authorities when the law requires it, or with a buyer if Wanile or its business is ever sold, who would then have to treat it as this policy says.

International transfers

We are based in Pakistan, and several of our providers are based in the United States or store data there. So if you are in the UK or the European Economic Area, your data is transferred outside it.

• To us in Pakistan. Pakistan does not have a UK or EU “adequacy” decision. When you send us a note, book a call or email us, the transfer is necessary to answer you and to take the steps you asked for, which the UK GDPR and EU GDPR allow (Article 49(1)(b)). For clients, our agreement covers the transfer.
• To our providers. Where a provider is in the United States, we rely on its certification under the EU-US Data Privacy Framework and its UK Extension, where it has one, or on the standard contractual clauses approved by the European Commission and the UK, which are part of the provider's data processing terms.

You can ask us for more information about these safeguards at abdullah@wanile.ai.

How long we keep it

If you ask us to delete your data sooner, we will, unless the law requires us to keep it.

Your rights

Under the UK GDPR and the EU GDPR, you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data;
• ask us to limit how we use your data, or object to our using it, including where we rely on legitimate interests;
• ask for the data you gave us in a format you can take to someone else;
• withdraw your consent to analytics at any time, with “Cookie settings” at the bottom of every page. This doesn't affect what was collected before.

To use any of these rights, email abdullah@wanile.ai. It's free. We may ask you to confirm your identity, and we answer within one month (if a request is complex, we may need up to two more months, and we'll tell you why). Wherever you live, we'll handle a reasonable request about your data in the same way.

If you're unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to a data protection authority: in the UK, the Information Commissioner's Office; in the EU, the authority in the country where you live or work (list of EU authorities).

How we protect it

The whole site is served over an encrypted connection (HTTPS). Notes and bookings are seen only by our founder and the people who need them to answer you. The accounts that hold your data are protected with strong passwords and two-step verification, and we remove access when someone no longer needs it. No system is perfectly secure, so if we ever learn of a breach that puts your data at risk, we will tell you and, where the law requires, the relevant authority.

Children

This website and our services are for businesses. They are not meant for children, and we don't knowingly collect data from anyone under 16. If you think a child has sent us personal data, email abdullah@wanile.ai and we will delete it.

Changes to this policy

We update this policy when what we collect or the tools we use change. The date at the top shows when it last changed. If a change is significant, we will say so clearly on this page, and tell our clients directly.

Contact us

Wanile Technologies, Lahore, Pakistan. Email abdullah@wanile.ai. See also our cookie policy and terms of use.