Privacy Policy

WhizzIQ Privacy Policy

Effective Date: October 2025 
Last Updated: October 2025

This Privacy Policy describes how WhizzOnBy Ltd. (“WhizzOnBy,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with your use of WhizzIQ (“the Platform” or “the Service”), a proprietary business management and analytics platform.

WhizzOnBy Ltd. is incorporated in England and Wales under Company Number 16559681, with its registered office at 124 City Road, London, EC1V 2NX, United Kingdom.

By using WhizzIQ, you agree to this Privacy Policy and to our Terms and Conditions.

1. Scope

This Policy applies to all users of the WhizzIQ Platform, including visitors, registered users, and organizations accessing WhizzIQ through authorized interfaces (web or mobile). It governs all features provided under the Platform, including CRM, analytics, invoicing, scheduling, marketing, and productivity tools.

This Policy does not apply to information collected by third-party services or integrations that you choose to connect to WhizzIQ (e.g., QuickBooks, Stripe, Zoom, Meta Ads). Please review the privacy policies of those services separately.

2. Information We Collect

We collect information necessary to provide, maintain, and improve WhizzIQ.

2.1 Information You Provide Directly

• Account Data: Name, email address, business name, phone number, password, and other registration details.

• Business Content: Files, invoices, transactions, customer data, or other content you upload or generate within WhizzIQ.

• Billing Information: Subscription payments, billing address, and tax identification details, processed through secure third-party payment providers.

• Communications: Messages sent to our support channels or feedback submitted through the Platform.

2.2 Information Collected Automatically

• Device & Log Information: IP address, browser type, operating system, and timestamps of access.

• Usage Analytics: Interactions with dashboards, modules, and in-app actions to help improve usability and performance.

• Cookies and Similar Technologies: Used to authenticate sessions and measure feature usage (see Section 8).

3. How We Use Information

We use the information collected for the following purposes:

1. To provide and operate the WhizzIQ Platform and related services.

2. To maintain account integrity, verify access, and prevent unauthorized use.

3. To deliver analytics, automation, and reporting features tailored to user activity.

4. To communicate with users about product updates, feature releases, or support inquiries.

5. To improve system performance, user experience, and platform reliability.

6. To comply with legal obligations and enforce our agreements.

We do not sell or rent personal information to advertisers or unrelated third parties.

4. Data Storage and Security

4.1 Cloud Hosting Environment

WhizzIQ data is hosted securely on Amazon Web Services (AWS), a leading cloud infrastructure provider.
This means:

• All WhizzIQ data is stored within AWS’s geographically restricted data centers, currently located in regions that comply with UK GDPR and ISO 27001 / SOC 2 Type II standards.

• Each tenant’s data is logically isolated through AWS account-level and database-level separation to ensure privacy and integrity.

• AWS provides physical and network-level security, including 24/7 monitoring, multi-layered firewalls, and redundancy across multiple availability zones.

• WhizzOnBy Ltd. remains the data controller, and AWS acts solely as a sub-processor under a binding Data Processing Addendum (DPA) consistent with GDPR and the UK Data Protection Act (2018).

4.2 Encryption and Access Control

All data in transit is encrypted using TLS 1.3, and all data at rest is encrypted using AES-256.
Administrative access is strictly limited to authorized WhizzOnBy engineers under confidentiality and security obligations. Passwords and credentials are hashed and cannot be viewed or retrieved in plain text.

4.3 Backups and Redundancy

Automated backups are performed regularly and stored within AWS’s secure storage system (such as Amazon S3 or RDS snapshots).
Backup data remains within the same regional boundary unless otherwise required for disaster recovery.

5. Data Ownership and Responsibility

You retain full ownership and control over all data uploaded, imported, or created within WhizzIQ (“User Data”). 
WhizzOnBy acts solely as the data processor or data intermediary, handling User Data on your behalf to deliver the contracted services.

We will not access, use, or share your business content except:

• To resolve technical issues or security incidents;

• To comply with lawful requests; or

• When expressly authorized by you in writing.

6. Data Retention and Deletion

• Your data is retained for as long as your account remains active or as required by law.

• You may request deletion of your account and all associated data at any time by contacting hello@whizziq.com.

• Upon verified request, all personal and business data will be permanently deleted within 30 days, except where retention is legally required.

• Backup copies may persist for an additional limited period solely for disaster recovery purposes.

7. Information Sharing

WhizzOnBy may share information only under the following controlled circumstances:

WhizzOnBy does not share data for marketing, advertising, or resale purposes.

8. Cookies and Tracking Technologies

WhizzIQ uses cookies and local storage for:

• Session Management: Keeping you logged in securely.

• Feature Optimization: Remembering preferences and improving navigation.

• Analytics: Measuring system performance in aggregate form (non-identifiable).

You may disable cookies in your browser settings, though certain features may be limited.

9. International Data Transfers

WhizzIQ may process data in jurisdictions where WhizzOnBy or its technical partners operate. 
All transfers are governed by:

• UK GDPR and Data Protection Act (2018),

• Standard Contractual Clauses (SCCs) for international transfers, and

• Equivalent safeguards ensuring adequate protection and user consent.

10. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data.

• Request correction of inaccurate information.

• Request deletion of your account or business data.

• Restrict or object to data processing.

• Request export (portability) of your data.

All such requests can be made by contacting hello@whizziq.com. We may require identity verification before fulfilling certain requests

11. Data Breach Notification

In the unlikely event of a data breach or unauthorized access:

• We will notify affected users within 72 hours of detection (where required by law).

• We will provide a detailed incident summary and corrective measures.

• Impacted data will be restored from secure backups as quickly as possible.

12. Children’s Privacy

WhizzIQ is intended for users aged 18 years and older. We do not knowingly collect or store personal data from minors. If such data is identified, it will be deleted promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect product improvements or legal changes. 
When updates occur:

• A new “Last Updated” date will be posted;

• Material updates will be communicated via in-app notification or email.

Continued use of WhizzIQ after changes take effect constitutes acceptance of the revised Policy.

14. Contact Us

For questions, data requests, or privacy concerns, please contact:

WhizzOnBy Ltd. 
Registered Office: 124 City Road, London, EC1V 2NX, United Kingdom 
Email: hello@whizziq.com 
Website: https://whizziq.com