Privacy Policy

1. Data Controller

The data controller responsible for your Personal Data is:

As a UK-based company, we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For users in the European Economic Area, we also comply with the EU GDPR.

2. Personal Data We Collect

We collect personal data relating to you ("Personal Data") in the following ways:

2.1 Information You Provide to Us

Account Information

When you create an account, we collect your name, email address, password, organisation name, job title, and billing information (including payment card details and transaction history).

User Content and Queries

We collect the content you provide when using our Services, including queries submitted to WorkAlly Insights, search parameters, intelligence requests, uploaded documents, feedback, and any other input you provide to our AI-powered systems.

Communication Information

When you contact us for support or other inquiries, we collect your name, contact details, and the content of your communications.

Social Media Information

If you interact with our social media pages (LinkedIn, X/Twitter, or other platforms), we may collect information you provide, such as contact details and comments.

Verification Information

For enterprise clients and regulated industries, we may collect additional verification information to establish identity, organisational affiliation, and compliance requirements.

2.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain technical information:

Log Data

Your IP address, browser type and version, operating system, device identifiers, access times, pages viewed, referring URLs, and interactions with our Services.

Usage Data

Information about how you use our Services, including features accessed, queries made, reports generated, time spent on different sections, and usage patterns within WorkAlly Insights.

Device Information

Device name, model, operating system, unique device identifiers, and mobile network information.

Cookies and Similar Technologies

We use cookies, web beacons, and similar tracking technologies to operate our Services, remember your preferences, analyse usage, and improve your experience. You can manage cookie preferences through your browser settings.

2.3 Information from Third-Party Sources

We may receive information from publicly available sources to provide and improve our business intelligence services. This includes market data, company information, news sources, and other publicly accessible information relevant to our intelligence and insights offerings. We also receive information from security partners to protect against fraud and abuse, and from marketing partners regarding potential business customers.

3. How We Use Your Personal Data

We use your Personal Data for the following purposes:

3.1 Providing and Maintaining Our Services

• Operating and delivering WorkAlly AI and WorkAlly Insights
• Processing your queries and generating market intelligence, news, and insights
• Managing your account and providing customer support
• Processing payments and billing

3.2 Improving and Developing Our Services

• Analysing usage patterns to improve user experience
• Developing new features and capabilities
• Training and improving our AI models and algorithms
• Conducting research and analysis

3.3 Communications

• Sending service-related announcements and updates
• Responding to your inquiries and support requests
• Sending marketing communications (with your consent where required)

3.4 Security and Protection

• Preventing fraud, abuse, and unauthorised access
• Protecting the security and integrity of our Services
• Enforcing our terms of service and policies

3.5 Legal Compliance

• Complying with applicable laws and regulations
• Responding to legal requests and government inquiries
• Protecting our rights and the rights of third parties

3.6 Aggregated and De-Identified Data

We may aggregate or de-identify Personal Data so that it can no longer be used to identify you. We use this information to analyse service effectiveness, conduct research, and generate industry insights. We will maintain and use de-identified information in anonymous form and will not attempt to re-identify such information unless required by law.

4. Disclosure of Personal Data

We may disclose your Personal Data in the following circumstances:

4.1 Service Providers and Vendors

We engage trusted third-party service providers to assist with our business operations, including cloud hosting, payment processing, customer support, analytics, email delivery, and security services. These providers access Personal Data only as necessary to perform their functions and are contractually obligated to protect your information.

4.2 Business Transfers

If we are involved in a merger, acquisition, reorganisation, sale of assets, or bankruptcy, your Personal Data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.3 Legal Requirements and Protection

We may disclose your Personal Data to government authorities, law enforcement, or other third parties when required by law, to comply with legal process, to protect our rights and property, to detect and prevent fraud, or to protect the safety of our users or the public.

4.4 Affiliates

We may share Personal Data with our corporate affiliates (entities that control, are controlled by, or are under common control with Weventures LTD). Such affiliates will use your information in accordance with this Privacy Policy.

4.5 Enterprise Account Administrators

If you use our Services through an enterprise or organisational account, the administrators of that account may access and manage your account and content. If you create an account using an email address belonging to your employer or organisation, we may share certain account information with that organisation.

4.6 With Your Consent

We may disclose your Personal Data for other purposes with your explicit consent.

5. Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on several factors:

• The nature and purpose of the processing
• The amount, nature, and sensitivity of the data
• The potential risk of harm from unauthorised use or disclosure
• Applicable legal requirements
• Your account settings and preferences

When you delete your account, we will delete or anonymise your Personal Data within a reasonable timeframe, except where retention is required for legal compliance, dispute resolution, or fraud prevention.

6. Your Rights

Under applicable data protection laws, including the UK GDPR and EU GDPR, you have the following rights regarding your Personal Data:

6.1 Right of Access

You have the right to request a copy of the Personal Data we hold about you and information about how we process it.

6.2 Right to Rectification

You have the right to request correction of inaccurate Personal Data or completion of incomplete Personal Data.

6.3 Right to Erasure

You have the right to request deletion of your Personal Data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

6.4 Right to Restriction of Processing

You have the right to request restriction of processing of your Personal Data in certain circumstances, such as when you contest the accuracy of the data.

6.5 Right to Data Portability

You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

6.6 Right to Object

You have the right to object to processing of your Personal Data where we rely on legitimate interests as the legal basis, and to object to direct marketing at any time.

6.7 Right to Withdraw Consent

Where we rely on your consent to process Personal Data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

6.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). For users in the EEA, you may contact your local data protection authority.

6.9 Exercising Your Rights

To exercise any of these rights, please contact us at hello@workally.ai. We will respond to your request within one month, or inform you if an extension is required. We may need to verify your identity before processing your request.

7. Legal Bases for Processing

We process your Personal Data on the following legal bases:

7.1 Performance of Contract

Processing necessary to provide our Services to you, including processing your queries, managing your account, and delivering intelligence and insights.

7.2 Legitimate Interests

Processing necessary for our legitimate interests or those of third parties, provided these are not overridden by your rights. This includes improving our Services, developing new features, conducting research, preventing fraud, and protecting security.

7.3 Consent

Processing based on your explicit consent, such as for certain marketing communications. You may withdraw consent at any time.

7.4 Legal Obligation

Processing necessary to comply with our legal obligations, such as record-keeping requirements, responding to legal requests, and fraud prevention.

8. International Data Transfers

We are based in the United Kingdom and process data primarily within the UK. However, to provide our Services, we may transfer your Personal Data to countries outside the UK and the European Economic Area (EEA), including to service providers and partners in various jurisdictions.

When we transfer Personal Data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable law. These safeguards may include:

• Transfers to countries deemed to have adequate data protection by the UK or EU
• Standard Contractual Clauses approved by the UK or European Commission
• Binding Corporate Rules
• Other legally approved transfer mechanisms

You may request additional information about international transfers and the safeguards we use by contacting us at hello@workally.ai.

9. Data Security

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security assessments and testing
• Employee training on data protection
• Incident response procedures

While we strive to protect your Personal Data, no method of transmission or storage is completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

10. Children's Privacy

Our Services are not directed to, or intended for, children under the age of 16. We do not knowingly collect Personal Data from children under 16. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us at hello@workally.ai, and we will take steps to delete such information.

Users between the ages of 16 and 18 may use our Services only with the involvement and consent of a parent or legal guardian.

11. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

WorkAlly Insights may display content from or integrate with third-party data sources and services to provide market intelligence and news. Your use of such third-party services is subject to their respective terms and privacy policies.

12. Accuracy of Personal Information

If you notice that our Services have generated factually inaccurate information about you and would like to request a correction or removal, please contact us at hello@workally.ai with details of the inaccuracy. We will review your request and take appropriate action based on applicable law and technical capabilities.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website with a new effective date, and where appropriate, we will notify you by email or through our Services.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection matters specifically, you may also reach our Data Protection team at hello@workally.ai with "Data Protection" in the subject line.

We aim to respond to all inquiries within 30 days.