Privacy Policy
What we collect, why we collect it, who else sees it, and what you can make us do about it.
In short
- We collect what you type into our forms, what you send us on WhatsApp, what you say to the voice demo, and anonymous traffic statistics. Nothing else.
- We never sell or share your data for anyone else's marketing. There is no ad pixel on this site.
- Eight third parties are involved, all named below, all doing one specific job.
- Email us and we will delete everything we hold on you, no questions and no charge.
1. Who we are
Wizbit ("we", "us") is an automation agency. We build workflow and AI automation systems for businesses. This policy covers wizbitofficial.com and the enquiries that come through it.
For anything in this policy, including any request to see, correct or delete your data, write to [email protected]. We are the data controller for that information.
2. What we collect
We collect four things, and only four.
2.1 What you type into a form
The contact form and the audit-booking form ask for your name, your email address, and whatever you write in the message field. Some forms also ask about your business, your lead volume or the tools you use. All of it is optional in the sense that you can choose not to send it; none of it is collected unless you press submit.
2.2 What you send us on WhatsApp
The WhatsApp buttons on this site open a chat with our business number. If you send that message, WhatsApp delivers it to us along with your phone number and WhatsApp profile name. That conversation is processed by WhatsApp under its own privacy terms before it ever reaches us, and we have no control over that part.
2.3 What you say to the voice demo
Some pages carry a voice receptionist demo. It only listens while the microphone button shows it is listening, and your browser asks your permission before it can listen at all. Nothing is recorded or transmitted until you start it.
Your speech is turned into text by your browser, not by us. On Chrome and Edge that means the audio is sent to Google's speech service to be transcribed, under Google's terms; Safari can do it on your device. We never receive the audio itself. What reaches us is the text, which we send to our own automation server to work out the reply.
We keep those transcripts, tied to a random session identifier rather than to you, so we can see what people ask and fix what the demo gets wrong. It is a demonstration against a sample clinic: no real appointment is made, and you should not type or say anything you would not want us to read - in particular, do not give it real medical information.
2.4 What your browser reports
When analytics is enabled on the production site, Google Analytics 4 records pages viewed, approximate location derived from IP address, device and browser type, and which site sent you here. It sets cookies to recognise a returning browser. We use it to see which pages produce enquiries, not to identify individuals.
Our host also keeps standard server logs, including IP addresses, for security and abuse prevention.
3. What we do not collect
We do not collect payment details on this website. We do not buy contact lists, we do not run advertising or remarketing pixels, and we do not sell, rent or trade personal data to anyone, ever. There is no account to create and no password to store.
4. Why we are allowed to hold it
Under the UK and EU GDPR, our lawful bases are:
- Contract, or steps before one. If you ask for a quote or book an audit, we need your details to answer you.
- Legitimate interests. Running and securing the site, and understanding in aggregate which pages work. We have weighed this against your interests and kept the data minimal accordingly.
- Consent. Analytics cookies, where consent is required in your jurisdiction. You can withdraw it at any time by clearing cookies or using a browser or extension that blocks them.
5. Who else sees your data
We keep the list short on purpose. These are the only third parties that touch data from this site:
| Service | What it handles | Where |
|---|---|---|
| EmailJS | Delivers contact and booking form submissions to our inbox | USA |
| WhatsApp (Meta) | Carries WhatsApp conversations you start with us | Global |
| Google / Apple speech recognition | Transcribes what you say to the voice demo. Built into your browser; we never hold the audio | USA / on device |
| Anthropic | Wording of the voice demo's replies | USA |
| Google Analytics | Aggregate traffic measurement, when enabled | USA / EU |
| Google Fonts | Serves the site typeface; your browser requests it directly | Global CDN |
| Unsplash | Serves some illustrative images on service cards | Global CDN |
| Netlify | Hosts the site and keeps server logs | Global CDN |
Google Fonts and Unsplash are loaded by your browser directly from those services, which means they receive your IP address as part of that request. This is how nearly all web fonts and CDN images work, and we mention it because a policy that omits it is incomplete.
We may also disclose information where a law, court or regulator requires it. If our business were ever sold or merged, enquiry records could transfer to the buyer, who would be bound by this policy.
6. Sending data outside your country
Some of the services above are based in the United States or run on global infrastructure, so your data may be processed outside the UK, the EEA or the UAE. Where that happens for personal data covered by UK or EU GDPR, transfers rely on the mechanisms those providers offer, typically Standard Contractual Clauses or an adequacy decision.
7. How long we keep it
- Enquiries that do not become clients: up to 24 months, then deleted. We keep them that long because automation buying cycles are slow and people come back.
- Client correspondence: for the duration of the engagement and up to 6 years afterwards, which is the ordinary window for contractual and tax records.
- Voice demo transcripts: 90 days, then deleted. They exist to improve the demo, and they are held against a random session identifier, not against your name.
- Analytics: retained on Google's default schedule.
- Server logs: a short rolling window set by our host.
Ask us to delete your data sooner and we will, unless the law says otherwise.
8. Your rights
If you are in the UK or the EEA, you have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting what came before.
Email [email protected] and we will respond within 30 days. There is no charge. If you are not satisfied with our answer, you can complain to your national data protection authority: the ICO in the UK, or your local supervisory authority in the EEA.
9. Security
The site is served over HTTPS. Form submissions are encrypted in transit. Access to enquiry data is limited to the two people who run Wizbit. No system is perfectly secure, and we will not claim otherwise; if a breach affects your data and presents a real risk to you, we will tell you and the relevant regulator within the timeframes the law requires.
10. Children
This is a business-to-business site and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.
11. Changes
If we change how we handle data, we will update this page and move the date at the top. Material changes to how we use data you have already given us will be notified by email where we hold one for you.
12. Contact
Questions, requests or complaints: [email protected]. See also our Terms of Service.