Privacy Notice

1. Who we are

WaveGo is a product of NEBULA TECH CONSULTING LTD, a company registered in England and Wales under number 16637894, with its registered office at 54 Aintree Estate, London, England, SW6 7QU, United Kingdom. For anything related to privacy, write to [email protected].

As the company is registered in the United Kingdom, this processing is governed by the UK GDPR and the Data Protection Act 2018.

2. What this notice covers

This notice covers this website, wavego.app, and nothing else.

The WaveGo application, where customers manage fleets, drivers, schedules and onboarding, is a separate service with its own agreement. Data you enter there, including data about your drivers, is not described here. If you are a WaveGo customer and need to know how we handle data inside the application, ask us for the applicable agreement.

3. What we collect and why

• Account and enquiry requests: when you ask for an account or a demo we collect your name, work email, company name, phone number, delivery partner and fleet size. We use this to answer you, set up your account and prepare a quote.
• Usage statistics: pages visited, the page that referred you, country, browser, operating system and device type, in aggregate form. We use this to understand which pages are useful.
• Technical logs: IP address, browser identification and request timestamps, retained by our hosting and content delivery providers for security, abuse detection and fault diagnosis.

4. Lawful basis

• Steps taken at your request before entering into a contract, when you ask us for an account, a demo or a quote.
• Legitimate interests, to answer business enquiries, keep the site available and prevent abuse. We have weighed this against your rights and it does not override them.
• Consent, for any marketing email you opt in to. You can withdraw it at any time without affecting what came before.
• Legal obligation, where tax or accounting law requires us to keep records.

5. Cookies and browser storage

This site sets no advertising cookies and no cross-site tracking cookies, and does not share your browsing behaviour with ad networks.

Usage statistics are collected by Umami, a cookieless tool that builds no individual profiles and does not follow visitors between different sites. That is why you are not asked to accept cookies here: there are none to accept.

6. Who we share it with

We do not sell personal data and we do not pass it to third parties for their own marketing. We rely on the following providers, who process data on our behalf and under contract:

• Umami: aggregate website usage statistics.
• Cloudflare: content delivery, certificates and protection against attacks.
• DigitalOcean: hosting of the servers that serve this site.
• Google: the site's typefaces are loaded from Google Fonts servers, which gives Google access to your IP address at the moment the page loads.

7. International transfers

Some of these providers process data outside the United Kingdom. Where that happens, the transfer relies on a UK adequacy decision, or on the UK International Data Transfer Agreement, whichever applies to the provider in question.

8. How long we keep it

• Enquiries that do not lead to a commercial relationship: 24 months from the last contact.
• Customer records with tax or accounting relevance: 6 years, as required by UK law.
• Server technical logs: 90 days.
• Aggregate statistics: kept indefinitely, as they no longer identify anyone.

9. Your rights

Under the UK GDPR you have the right to:

• Know what data of yours we process, and receive a copy of it.
• Have inaccurate or incomplete data corrected.
• Ask us to erase your data, where it is no longer needed for the purpose that justified collecting it.
• Ask us to restrict processing, or object to it, including to any marketing communication.
• Receive the data you gave us in a structured, commonly used format, and ask us to send it to another organisation.
• Withdraw any consent you have given, at any time.

10. How to exercise your rights and how to complain

Write to [email protected]. We reply within one month at the latest and we do not charge for the request. We may ask for additional information solely to confirm your identity, and we use it only for that.

If you believe we have not handled the matter properly, you can complain to the UK data protection authority, the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

11. Changes to this notice

If we change this notice we publish the new version on this page and update the date at the top. Changes that materially affect how we handle your data are communicated actively, wherever we have a means of doing so.