Privacy policy

Who is responsible

This policy is published by WAYAD CORP LIMITED, the Hong Kong entity of Wayad Corp, which runs this site. [LEGAL-TODO: confirm that WAYAD CORP LIMITED is the party responsible for the data described below, and under what legal designation]

For any privacy request, write to [LEGAL-TODO: e-mail address for privacy requests] or use the contact form.

When you browse the site

The pages are static files. They load their fonts, scripts, images and 3D assets from this site's own server, not from advertising or analytics services.

Like any web server, ours records standard technical information about each request: IP address, date and time, the page requested, and the browser and device type. It is used to run and secure the site. [LEGAL-TODO: how long these server logs are kept]

The site is served over an encrypted connection (HTTPS).

Cookies and your cookie choice

The public pages of this site set no cookies of their own.

The cookie banner stores one thing: your choice (necessary, analytics, marketing). It is kept in your browser's local storage, on your device, and is not sent to us. Clearing this site's data in your browser removes it, and the banner then appears again.

No analytics or marketing tool is loaded on this site today, whatever you choose. The choice is kept so that, if one is ever added, it stays off until you accept it.

If you pay by card, the payment page of Airwallex is not part of this site and has its own cookies and notice (see Paying an invoice).

The contact form

When you send the form we receive what you type: your name, your e-mail address, your company name if you give one, your message, and the language of the page.

This is sent by e-mail to Wayad Corp so that we can answer you, with your address as the reply address. It is not saved in the site's database and not written to the server's logs. It passes through an internal message queue to be sent, and then exists in the mailboxes that received it. [LEGAL-TODO: e-mail service provider used to send the messages, and how long contact messages are kept]

To limit abuse, the site keeps for 10 minutes a count of the messages sent from a hash of your IP address (not the address itself), and accepts at most 5 messages in 10 minutes. The application's own logs record only that hash, never the address; the web server's standard logs (see When you browse the site) still record the IP address of every request, this one included. A hidden field and a signed time stamp reject automated submissions; they hold no personal data about you.

Paying an invoice

Wayad Corp creates a payment request for the person who owes an invoice. It holds the payer's e-mail address, a description, the amount and currency (EUR or USD), a payment reference, a language, a status and dates. Each payment attempt records the method (card or bank transfer), the amounts, its state and the payment provider's reference.

By card: you leave this site for a payment page hosted by Airwallex, and you type your card details there. They never go through this site's servers and we do not store them; we receive the outcome of the payment and a reference. [LEGAL-TODO: the Airwallex entity that processes the payment, and the link to its privacy notice]

By bank transfer: we show you, and e-mail you, the bank details of the account held by WAYAD CORP LIMITED and your payment reference. When the money arrives, a Wayad Corp administrator checks it against the bank statement and records the amount and the bank's transaction reference.

We e-mail the address on the request to send the bank details, a receipt when the payment is confirmed, and, if a transfer was short, a request for the balance. A card receipt only says "Card", never a card number.

The events sent to us by the payment provider are stored with personal data removed, and every action of an administrator on a payment is recorded in an audit log. [LEGAL-TODO: how long payment records are kept]

Who receives the data

• Wayad Corp's team, who read the contact messages and manage the payment requests.
• The hosting provider, whose server holds the site and its data. [LEGAL-TODO: hosting provider's legal name]
• The e-mail service that carries the messages sent from this site.
• Airwallex, for card payments.
• The bank that holds the account receiving transfers, for bank transfers.

Where the data is kept

Wayad Corp has offices in France, Algeria, Tunisia and Hong Kong. [LEGAL-TODO: the country where the servers are, from where the data is accessed, and any safeguard for transfers between countries]

Your rights

To ask WAYAD CORP LIMITED which personal data it holds about you, or to have it corrected or deleted, write to the address given above and say which data it concerns, for example your e-mail address or a payment reference.

[LEGAL-TODO: the rights the law gives you and whether the company commits to grant them, how long we have to answer, and the authority you may complain to]

Changes

The date at the top of this page is the date of the last change. We update this page when what the site does with personal data changes.