Privacy Notice
This explains what we collect when you use this website or message our WhatsApp line, why we collect it, and what you can ask us to do about it.
Who we are
WaSite is a service of Elementia India Pvt Ltd, a company registered in India and based in Bengaluru, India. For the personal data described in this notice, we are the data fiduciary under India's Digital Personal Data Protection Act, 2023 — the equivalent of a "controller" under the GDPR — except where we act on a client's instruction, which is set out under "When we handle data for a client" below.
You can reach us at corporate@wasite.in.
Who this applies to
Visitors to this website, people who message our WhatsApp business line, and people who email us. It does not cover other companies' websites we link to, including WhatsApp itself.
What we collect
There is no form anywhere on this site. We do not ask for your name, your email address or your phone number to let you use it, and there is nothing to sign up for.
What we do collect falls into three groups.
1. What you do on the page
The demo on this site records how it was used, because that is the product we sell — a demo that reports what a visitor did. What we store is:
- which step of the demo you reached
- which option you tapped where the page asks a question — for example whether you sell a product, a service or training
- which buttons you pressed, including the call-to-action buttons
- which currency you chose, if you switched it
- the campaign parameters in the link you arrived on (utm_source and similar), so we can tell which campaign a visit came from
- a random identifier for your browsing session, so a single visit reads as one path rather than a dozen unrelated events
That session identifier is random, is not linked to your name or any account, and is discarded when you close the tab. These records are stored in our own systems. They contain no name, no email address and no phone number, because the site never asks you for one.
2. Where you are, for pricing only
We show prices in rupees to visitors in India and in dollars elsewhere. To do that, our server reads the country your request appears to come from and your browser's language setting. We use the answer to pick a currency and nothing else. We do not store your IP address for this, and the country is not written to our records.
3. What you send us
If you tap a call-to-action, WhatsApp opens with a message already written. Nothing is sent until you send it. If you do send it, we receive and store your WhatsApp number, the message, and our replies, so we can carry on the conversation and keep a record of it. The same applies to email.
The WhatsApp app and the delivery of your message are handled by WhatsApp under Meta's own terms and privacy policy, not ours. Once you leave this site for WhatsApp, what Meta does with that interaction is governed by Meta's policies.
Why we use it, and on what basis
| What | Why | Basis |
|---|---|---|
| Demo interaction records | To see which parts of the demo work and to improve it | Our legitimate interest in improving our own product; for visitors in India, this is processing for a specified lawful purpose you were told about |
| Currency detection | To show you a price in a currency you use | Our legitimate interest in showing a price that makes sense |
| WhatsApp and email conversations | To answer you, run the audit if you ask for it, and keep a record of what was agreed | Taking steps at your request, and our legitimate interest in keeping business records |
Who else sees it
We do not sell personal data and we do not share it for anyone else's advertising. We use a small number of service providers who process data on our instruction:
- our hosting provider, which runs this website and its servers
- our database provider, which stores the records described above
- WhatsApp, operated by Meta, which carries messages to and from our business line
We will also disclose data where the law requires it. If our business is ever transferred, data may transfer with it, and we would tell you.
Data leaving India
Some of our service providers operate outside India, so your data may be stored or processed abroad. Where that happens we rely on the provider's contractual protections, including the standard clauses used for transfers out of the European Economic Area where they apply. You can ask us where a particular record is held.
When we handle data for a client
We build and operate demos, stores and websites for clients. Where we do that, the personal data of that client's own customers belongs to the client, not to us.
In those engagements the client is the data fiduciary, or controller, and we act only as a processor on their documented instruction. We do not use their customers' data for our own purposes, we do not sell it, and we return or delete it at the end of the engagement or when the client asks. If you are a customer of one of our clients and want to exercise a right over your data, the client is the right place to start — and if you reach us instead, we will pass your request to them.
How long we keep it
| What | How long |
|---|---|
| Demo interaction records | 24 months, then deleted |
| WhatsApp and email conversations | 36 months from our last contact with you |
| Records we need for tax, accounting or legal reasons | As long as the relevant law requires |
| Data we process for a client | For as long as the client instructs, and no longer |
We delete earlier if you ask and we have no legal reason to keep it.
Your rights
You can ask us to:
- tell you what we hold about you and why
- correct anything that is wrong or out of date
- delete what we hold, where we have no legal reason to keep it
- stop using it for a particular purpose
- give you a copy in a portable form
- nominate someone to exercise these rights if you cannot
Write to corporate@wasite.in and we will respond within 30 days. There is no charge. If you are unhappy with our answer you can complain to the Data Protection Board of India, or to your local supervisory authority if you are in the European Economic Area or the United Kingdom.
How we protect it
Traffic to this site is encrypted. The database that holds the records described above is not reachable from the browser: it is locked down at the row level and only our server-side credentials can read or write it. Access is limited to the people who need it to run the service.
We hold no security certification — no ISO 27001, no SOC 2, and no equivalent — and we do not claim one. What is described here is what we actually operate. If you need a certified processor for a particular engagement, tell us before you engage us and we will say plainly whether we are a fit.
Children
This is a service sold to businesses and it is not intended for children. Under the DPDP Act a child is anyone under 18, and we do not knowingly collect the personal data of anyone under 18. If you believe a child's data has reached us, write to us and we will delete it.
Contact and complaints
We have not appointed a Data Protection Officer, because we are not required to. Questions and complaints about personal data go to our Grievance Officer:
- Grievance Officer, Elementia India Pvt Ltd
- corporate@wasite.in
- Bengaluru, India
We acknowledge every complaint and respond within 30 days.
Changes
If we change how we handle personal data we will update this page and change the review date at the foot of it. If a change is significant we will say so here rather than leave you to spot it.
Governing law
This notice and any dispute about it are governed by the laws of India, and the courts at Bengaluru, India have jurisdiction. Where the GDPR applies to you, it applies alongside this notice and nothing here removes a right you have under it.