This Privacy Policy explains how Whatsoza ("Whatsoza", "we", "us" or "our"), a brand operated by Ozavion Limited, collects, uses, shares and protects personal information when you visit whatsoza.com (the "Website"), contact us, or engage us for our WhatsApp Business API, automation and related services (the "Services"). It also sets out your rights and how to exercise them.
Whatsoza is a brand operated by Ozavion Limited, a company registered in England and Wales (company no. 16814450), registered office 86-90 Paul Street, London, EC2A 4NE, United Kingdom ("the Company", "we", "us"). Ozavion Limited is registered with the UK Information Commissioner's Office (ICO) as a data controller, registration reference ZC055758. For questions about this policy or your data, contact us at privacy@whatsoza.com # privacy / legal / cookies / DPA contact.
1. Our role: controller and processor
For personal information about visitors to our Website and people who contact us or receive our marketing, Whatsoza is the data controller — this policy governs that processing.
When we deliver Services to a business client, we typically process personal data (including data about the client's own customers and end-users who message on WhatsApp) on that client's behalf and instructions. In that context the client is the controller and Whatsoza is a processor; that processing is governed by our agreement with the client and our Data Processing Addendum, not by this policy.
2. Information we collect
Information you give us
- Enquiry & booking details — when you request a demo or consultation, use a contact or lead form, or message us on WhatsApp: your name, email address, phone number, company, role, country and the content of your message.
- Correspondence — records of your communications with us (email, WhatsApp, calls and meeting notes).
Information we collect automatically
- Usage & device data — IP address, browser and device type, pages viewed, referring pages, and interactions, collected via cookies and similar technologies only where you have consented to analytics/marketing. See our Cookie Policy.
- Server logs — limited technical logs kept for security and to operate the Website.
Information from third parties
We may receive limited information from analytics and advertising platforms (e.g. Google, Meta) and from business sources such as our CRM or referrals, consistent with those parties' terms and your choices.
3. How we use your information and our legal bases
Where the EU/UK GDPR or similar laws apply, we rely on the following legal bases:
- To respond to enquiries and provide the Services — performance of a contract, or steps at your request before entering one.
- To operate, secure and improve the Website — our legitimate interests in running a safe, effective site (and your consent for non-essential analytics cookies).
- Marketing — your consent (e.g. advertising cookies/pixels), and/or our legitimate interest in business-to-business marketing where permitted. You can opt out at any time.
- Legal & compliance — compliance with legal obligations and establishing, exercising or defending legal claims.
4. Cookies, analytics & advertising
We use cookies and similar technologies for essential functionality and, with your consent, for analytics (Google Analytics 4) and marketing (including the Meta/Facebook pixel and Google Ads). Non-essential cookies load only after you accept on our cookie banner, and you can change or withdraw consent any time via the "Cookie settings" link in the footer. Full details are in our Cookie Policy.
5. WhatsApp and the Meta platform
If you contact us on WhatsApp, your messages are processed through the WhatsApp Business Platform operated by Meta Platforms, Inc. and its affiliates, subject to Meta's and WhatsApp's own terms and privacy policies. We use WhatsApp to communicate with you and, for our clients, to operate their messaging — always in line with the WhatsApp Business Messaging Policy and applicable law. Whatsoza is a Meta Verified Tech Provider.
6. Sharing your information
We do not sell your personal information. We share it only with:
- Service providers / sub-processors that help us run our business — for example hosting, email/SMTP, CRM, analytics and advertising providers, and the WhatsApp/Meta platform — under appropriate contracts. Key providers currently include Meta Platforms and Google; see our sub-processor list.
- Professional advisers (e.g. legal, accounting) where necessary.
- Authorities or other parties where required by law, or to protect our rights, users or the public.
- Successors in connection with a merger, acquisition or reorganisation, subject to this policy.
7. International transfers
Some providers may process data outside your country, including outside the EEA/UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or an adequacy decision. Contact us for more information about the safeguards we use.
8. How long we keep it
We keep personal information only as long as necessary for the purposes above — for example, to respond to and follow up on your enquiry, to provide and administer the Services, and to meet legal, tax and accounting requirements — after which we delete or anonymise it. Specific retention periods depend on the type of data and the applicable obligation.
9. How we protect it
We apply appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss or misuse, and we work only with reputable providers. No method of transmission or storage is completely secure, but we work to protect your data and to respond appropriately to any incident. See our Security & Compliance page.
10. Your rights
Depending on where you live, you may have the right to: access the personal data we hold about you; have it corrected or deleted; restrict or object to certain processing; data portability; and withdraw consent at any time (without affecting prior processing). Residents of the EEA/UK may lodge a complaint with their data-protection authority — in the UK, the Information Commissioner's Office (ICO), ico.org.uk; California and certain other U.S. residents have rights to know, delete, correct and opt out of "sale"/"sharing" of personal information (we do not sell personal information).
To exercise any right, email privacy@whatsoza.com # privacy / legal / cookies / DPA contact. We will verify your request and respond within the timeframe required by law.
11. Children
The Website and Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children.
12. Third-party links
Our Website may link to third-party sites and platforms we do not control. This policy does not apply to them; please review their privacy notices.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date; material changes may be notified by additional means where appropriate.
14. Contact us
Ozavion Limited — registered in England and Wales, company no. 16814450
Registered office: 86-90 Paul Street, London, EC2A 4NE, United Kingdom
Email: privacy@whatsoza.com # privacy / legal / cookies / DPA contact · Tel: +44 20 3769 0969
If you are in the EEA and an EU representative is required, their details will be added here.