Privacy Policy

1. Who we are

WiseBlock is a service and commercial brand owned and operated by Facturama Limited, a company registered in England and Wales.

• Company number: 8595688
• Registered address: 16 Blanchington Road, Seaford, BN33YN, United Kingdom
• Contact: info@wiseblock.co.uk

When we refer to "WiseBlock", "we", "us" or "our" in this policy, we mean Facturama Limited.

2. What data we collect

We may collect and process the following personal data:

a) Data you provide directly

• Account information: name, email address, phone number, company name, job title
• Lead magnet downloads: name, email, company, role, portfolio size, referral source
• Contact form submissions: name, email, company, subject, message
• Platform usage: building data, fire risk assessments, inspection records, and other data you enter while using WiseBlock

b) Data collected automatically

• Technical data: IP address, browser type, operating system, device information
• Usage data: pages viewed, time on site, navigation patterns
• Cookies: see our Cookie Policy for full details

3. How we use your data

We use your personal data for the following purposes:

• Service delivery: to provide, maintain, and improve WiseBlock
• Communication: to respond to enquiries, send service updates, and deliver requested content (e.g. guides, reports)
• Marketing: to send relevant information about WiseBlock features and services (only with your consent)
• Compliance: to meet our legal obligations under UK law
• Security: to protect our platform and detect fraud or abuse

4. Legal basis for processing

We process your data under the following lawful bases (UK GDPR):

• Consent: when you submit a form, download a guide, or opt in to communications
• Contract: when processing is necessary to provide our services to you
• Legitimate interest: to improve our services, ensure security, and conduct business analytics
• Legal obligation: where we are required by law to process your data

5. Data sharing

We do not sell your personal data to third parties. We may share your data with:

• Service providers: hosting (Hetzner), email delivery (SMTP), payment processors — all bound by data processing agreements
• Google: only as described in section 10 — mail you choose to connect, and videos we publish to our own YouTube channel
• Legal requirements: when required by law, court order, or regulatory authority
• Business transfers: in connection with a merger, acquisition, or sale of assets

6. Data retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Account data: for the duration of your account, plus 12 months after deletion
• Lead data: for 24 months from collection, unless you request earlier deletion
• Contact enquiries: for 12 months
• Platform data: for the duration of the organisation's subscription, plus any legally required retention period

7. Data security

We implement appropriate technical and organisational measures to protect your data, including:

• SSL/TLS encryption for all data in transit
• Encrypted database connections
• Role-based access controls with multi-tenant data isolation
• Regular security audits and vulnerability assessments
• UK and EU-based hosting infrastructure

8. Your rights

Under UK GDPR, you have the following rights:

• Access: request a copy of your personal data
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: request restriction of processing
• Portability: request transfer of your data in a machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@wiseblock.co.uk. We will respond within 30 days.

9. International transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

10. Google user data and YouTube

WiseBlock uses Google APIs in two places. In both, our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

a) Connecting a Gmail or Google Workspace mailbox

A member of an organisation's staff can choose to connect their Gmail or Google Workspace mailbox so that their email appears in WiseBlock's shared inbox. Nobody's mailbox is connected without their own sign-in to Google.

• What we access: your email address, and your messages with read-only access. We cannot send, change or delete anything in your mailbox.
• How we use it: to show those messages inside WiseBlock to you and the colleagues in your organisation who handle that inbox, to file them against the right building or resident, and — only where your organisation has switched it on — to let our email triage assistant sort them and suggest replies. Message content may be processed by our AI provider (Anthropic) for that purpose alone.
• What we never do: we do not sell Google data, use it for advertising, use it to train AI models, or share it with anyone outside your organisation except the service providers needed to run the features above.
• Storage: the access tokens Google gives us are encrypted at rest. Messages are kept as part of your organisation's records under section 6.
• Revoking access: disconnect the mailbox in WiseBlock, which also revokes our access with Google, or remove WiseBlock at any time from your Google Account's third-party access settings. To have the mail we already hold deleted, write to info@wiseblock.co.uk.

b) Publishing our own videos to YouTube

WiseBlock uses YouTube API Services to upload videos that we make — product explainers and similar — to WiseBlock's own YouTube channel, along with their titles, descriptions and captions. Videos are uploaded as private and published by a person.

• What we access: only WiseBlock's own channel, authorised by its owner. We do not access the YouTube or Google accounts of our customers, their residents, or visitors to this website.
• Storage: the authorisation is kept encrypted in our application's credentials; we keep the identifiers of the videos we have uploaded.
• Revoking access: the channel owner can withdraw it at any time from the Google Account's third-party access settings.

By watching our videos on YouTube you are also subject to the YouTube Terms of Service and the Google Privacy Policy.

11. Cookies

We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Children's privacy

WiseBlock is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. The "last updated" date at the top of this page indicates when this policy was last revised.

14. Contact us

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

• Email: info@wiseblock.co.uk
• Post: Facturama Limited, 16 Blanchington Road, Seaford, BN33YN, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.