Home/Trust & legal/Privacy policy
Privacy

What we collect, why, and what you can ask us to dowith it.

This policy covers workwox.com and the forms on it. It is written for GDPR and UK GDPR; it applies to every visitor wherever they are.

Last updated 18 September 2026GDPR · UK GDPRNo advertising cookiesData controller: Workwox Private Limited
Three sources of dataContact form, AI audit form, analytics
Kept for 24 monthsEnquiries; analytics 14 months
Never soldNo advertising, no brokers
One address for requestscontact@workwox.com

01Who we are

Workwox Private Limited (“Workwox”, “we”) is the data controller for this website. Engineering office: House 29C, Street 1, Hameedullah Mokal Colony, Sahiwal 57000, Pakistan. Registered office: Fenix Väg 6-12, 134 44 Stockholm, Sweden.

Contact for privacy matters: contact@workwox.com.

02What we collect

Contact form

Name, work email, company, budget band, your message, page and campaign source

AI audit form

Business type, channels, systems, tools named, name, email, company, website

Analytics

Pages viewed, approximate location, device, referrer — only after you accept analytics cookies

We do not collect payment card data on this site and we do not use advertising cookies or pixels.

03Why we use it and on what basis

PurposeDataLegal basis
Reply to your enquiry and scope workContact formPre-contract steps at your request (Art. 6(1)(b))
Write and send your AI audit reportAI audit formPre-contract steps at your request (Art. 6(1)(b))
Understand which pages helpAnalyticsConsent (Art. 6(1)(a)) — the cookie notice
Keep records of correspondenceContact dataLegitimate interest (Art. 6(1)(f))

04Where it is stored and for how long

  • Form submissions: PostgreSQL on Neon (EU region) and email delivery via Resend; kept 24 months after the last contact, then deleted
  • Analytics: Google Analytics 4 with IP anonymisation; retention 14 months
  • Hosting: Vercel (edge network; data at rest in the EU/US per Vercel’s DPA)

Transfers outside the EEA/UK rely on the EU Standard Contractual Clauses and the UK Addendum in our processors’ terms.

05Who we share it with

Only processors that run the site and our replies: Vercel (hosting), Neon (database), Resend (email), Google (analytics, with consent). We do not sell data and we do not share it with advertisers or brokers.

If your project involves your customers’ data, that is governed by the Data Processing Agreement, not this policy.

06Your rights

Access

A copy of what we hold

Rectification

Correct what is wrong

Erasure

Delete unless we must keep it

Restriction & objection

Pause or stop a use

Portability

Your data in a usable format

Complain

To your supervisory authority (IMY in Sweden, ICO in the UK)

Email contact@workwox.com. We answer within 30 days and never charge for a first request.

07Changes

We date every version at the top of this page. Material changes are announced on this page for 30 days.

Questions about this document: contact@workwox.com. Workwox Private Limited — House 29C, Street 1, Hameedullah Mokal Colony, Sahiwal 57000, Pakistan · Fenix Väg 6-12, 134 44 Stockholm, Sweden.

Questions before
you sign?

An engineer, not a sales team, answers within one business day. NDA first if you prefer.

Write to us