Privacy Policy

Table of Contents

• •Information We Collect
• •How We Use Your Information
• •Data Sharing
• •Data Retention
• •Your Rights
• •User Responsibility
• •Children's Privacy
• •Security of Your Data
• •Changes to This Privacy Policy
• •Legal Bases for Processing (GDPR Compliance)
• •Cookies and Tracking
• •International Data Transfers
• •Automated Decision-Making
• •User Rights Under CCPA
• •Data Controller Information
• •Contact Information

1. Information We Collect

Personal Information: We collect personal details such as your name, email address, phone number, and payment information.

User-Generated Content: This includes reviews, messages, and any content you provide. This may include sensitive personal data such as health-related information shared through messages, file uploads, or other communication tools.

Usage Information: We collect data such as your IP address, device information, and browsing patterns.

Cookies: We use cookies to enhance your user experience. For more information, refer to our Cookie Policy. Cookies may collect limited technical data such as IP address, device type, and usage information necessary for the functioning and security of the platform.

Payment Information: Payment details are processed securely by third-party providers and are not stored by Whisdr.

Special Category Data (Health Data): Due to the nature of the platform, you may choose to share sensitive personal data, including health-related information, through messages, file uploads (such as medical reports, test results, and images), or video communications. We process such data only with your explicit consent and solely for the purpose of facilitating connections with Service Providers and enabling the provision of services.

2. How We Use Your Information

We use your information to:

• Facilitate bookings and communication between Guests and Service Providers.
Improve and personalize your experience on the platform.
• Ensure the safety and security of the platform.
• Comply with legal obligations.

Where you provide health-related data, we process such data based on your explicit consent and only to the extent necessary to provide the requested services.

We may send you transactional or reminder emails related to the services or transactions you have made with us. These emails are strictly informational and are not used for marketing purposes.

You may withdraw your consent to the processing of health data at any time. This will not affect the lawfulness of processing carried out prior to withdrawal.

3. Data Sharing

We may share your information with:

• Service Providers and Guests to facilitate bookings.

This may include sharing health-related data with selected Service Providers where necessary for the provision of services.

• Third-Party Service Providers who assist us in operating the platform.

These may include payment processors, cloud storage providers, and communication service providers.

• Legal Authorities if required by law.

Service Providers act as independent data controllers with respect to the personal data they receive and process. Whisdr is not responsible for how Service Providers handle personal data outside the platform.

4. Data Retention

We retain personal data in accordance with the following principles:

• Account data: Retained for the duration of the account and, following account deletion, for up to 6 years where necessary to comply with legal, tax, or accounting obligations. Such data will be restricted and not used for operational purposes.
• Communication data (including messages) and health-related data:
  • where no booking is completed, retained only for a short period and deleted when no longer necessary;
  • where a booking is completed, retained for up to 12 months for operational, support, and dispute resolution purposes, and may be deleted earlier where no longer required. This applies to both uploaded content and information shared via messaging. Users may request deletion of their data at any time, subject to any legal obligations or the need to retain such data for the establishment, exercise, or defence of legal claims.
• Health-related data: Retained only as long as necessary to facilitate services and comply with legal obligations
• Financial data: Retained in accordance with applicable tax and accounting laws (typically up to 6 years in the United Kingdom).

Where possible, data may be anonymised rather than deleted, in which case it will no longer be identifiable as personal data.

5. Your Rights

Under the EU General Data Protection Regulation (EU GDPR) and the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:

• Right of access - You can request access to the personal data we hold about you.
• Right to rectification - You can ask us to correct inaccurate or incomplete personal data.
• Right to erasure - You can request the deletion of your personal data.
• Please note that even if your account is deleted, your reviews and ratings may remain publicly visible.
• Right to data portability - You can request to receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller.
• Right to object - You can object to the processing of your personal data in certain circumstances, including when we rely on legitimate interests.
• Right to restriction of processing - You can request the limitation of how your data is processed under certain conditions.

We may display your first name and the initial of your surname alongside any public comments or reviews you submit, unless you choose to anonymize your profile. This is based on our legitimate interest in promoting trust and transparency within the Whisdr community. If you wish to anonymize your profile, you can do so through your user settings or by contacting us.

You also have the right to withdraw your consent at any time where processing is based on consent, particularly in relation to health data.

To exercise any of these rights, please contact us at info@whisdr.com.

6. User Responsibility

You are responsible for the personal data you choose to share on the platform, including any sensitive health data.

You should only share information that is necessary for the requested service.

7. Children's Privacy

Our platform is not intended for individuals under 18. We do not knowingly collect data from minors. If we become aware of such a collection, we will take steps to delete it.

8. Security of Your Data

We implement measures to protect your data from unauthorised access. These measures include appropriate technical and organisational safeguards such as encryption, access controls, and secure data storage.

However, no data transmission method is entirely secure, and we cannot guarantee full security.

9. Changes to This Privacy Policy

We may update this policy. Material changes will be communicated via email or through the platform.

10. Legal Bases for Processing (GDPR Compliance)

For users in the European Economic Area (EEA) and the UK, we process your personal data based on the following legal bases:

• Consent: When you have provided your explicit consent (e.g., to receive marketing communications) and for processing health-related data (Article 9 GDPR).
• Contractual Obligation: To fulfill our contract with you, such as processing bookings and providing customer support.
• Legal Obligation: To comply with applicable legal requirements.
• Legitimate Interests: To improve our platform, prevent fraud, and enhance security, unless overridden by your data protection rights

11. Cookies and Tracking

We use cookies and similar technologies that are necessary for the operation, security, and performance of the platform. These may include limited technical data such as IP address and device information. These cookies do not collect personal data or track your behavior. For more information, refer to our Cookie Policy

12. International Data Transfers

If your personal data is transferred to countries outside your region (e.g., from the EEA or UK to the United States), we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission.
• Transfers to countries deemed by the European Commission to provide adequate protection.

Your personal data may also be shared with Service Providers located in different countries, including outside the UK or EEA, where necessary to facilitate services.

You can request more information about these safeguards by contacting us at info@whisdr.com.

13. Automated Decision-Making

We do not engage in automated decision-making that significantly affects your rights.

14. User Rights Under CCPA

California residents have specific rights under the California Consumer Privacy Act (CCPA). You can request access to, deletion of, or opt-out from the sale of your personal data by contacting us.

15. Data Controller Information

Whisdr acts as a data controller for personal data processed through the platform. Service Providers act as independent data controllers for any personal data, including health data, processed in connection with the services they provide.

Each party is independently responsible for complying with applicable data protection laws.

16. Contact Information

For questions regarding this policy or to exercise your rights, please contact us at info@whisdr.com.