Last updated: October 2025

1. Introduction

This Privacy Policy (“Policy”) explains how Whalegistic (“we”, “us”, “our”) collects, uses, discloses, and protects your personal information when you access or use our website, applications, or software-as-a-service platform (collectively, the “Platform”). This Policy applies to all users of the Platform, including registered business users and visitors to our website.

We are committed to transparency and to complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where applicable. Personal data is handled in accordance with GDPR principles such as lawfulness, fairness, transparency, purpose limitation, and data minimization.

Whalegistic is the controller of your personal data. You may contact our data protection team regarding privacy matters by email at info@whalegistic.com.

2. Data We Collect

We collect and process only the personal information necessary to operate and improve our Platform. This may include:

• Account and identity information, such as your name, email address, business name, and login credentials (stored securely and hashed).
• Usage and technical data, including IP address, device type, operating system, browser type, pages visited, timestamps, and other diagnostic data generated through your use of the Platform.
• Analytics and tracking data, collected through Google Analytics and Facebook Pixel, such as page views, navigation paths, conversion events, and interactions with our content.
• Cookies and session data, used to maintain your login session, remember preferences, and analyze Platform performance.
• Communications data, such as support requests, feedback, or any correspondence you send us.

We do not intentionally collect sensitive categories of data (e.g., relating to health, political opinions, religious beliefs, or ethnicity).

3. Legal Bases for Processing

We process personal data under one or more of the following lawful bases:

• Performance of a contract, to provide and manage your access to the Platform and its features.
• Legitimate interests, such as improving services, maintaining security, and preventing fraud.
• Consent, when you agree to optional tracking, analytics, or marketing activities. Consent can be withdrawn at any time for optional activities.
• Legal obligations, when necessary to comply with applicable law or lawful government requests.

4. Purposes for Processing

We use the data we collect to:

1. Create and maintain your account, authenticate users, and deliver requested services.
2. Communicate with you, including sending technical notices, support messages, and administrative updates.
3. Improve and optimize our Platform's performance, usability, and security.
4. Conduct usage analysis to better understand how users interact with our Platform and to guide product improvements.
5. Send marketing or promotional communications only when you have given consent.
6. Detect, investigate, and prevent fraudulent or unauthorized activity.
7. Comply with legal, regulatory, and tax obligations.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Platform.

• Essential cookies keep you logged in and ensure platform functionality.
• Analytical cookies, such as those from Google Analytics, help us measure usage patterns and performance.
• Marketing cookies, such as the Facebook Pixel, allow us to assess the effectiveness of our advertising campaigns.

You may control or delete cookies through your browser settings, and you can opt out of non-essential cookies using our cookie banner or consent tool where available. Disabling certain cookies may affect your experience on the Platform.

6. Sharing of Personal Data

We may share your personal information with trusted third parties who assist us in operating our business and delivering the Platform. These include:

• Service providers and processors such as hosting partners, analytics providers, email service providers, and payment gateways. These entities are bound by contractual obligations to keep your data secure and to process it only under our instructions.
• Legal authorities when required by law, court order, or governmental request.
• Professional advisors, such as auditors or legal consultants, under confidentiality obligations.
• Business successors, in the event of a merger, acquisition, or sale of Whalegistic's assets, provided that the receiving party agrees to continue to protect your data as described in this Policy.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

7. International Data Transfers

Your data may be processed in countries outside your own, including outside the European Economic Area (EEA). When we transfer data internationally, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other legally recognized mechanisms to protect your privacy rights.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy. Account information is kept for as long as your account is active and for a limited period afterward to comply with legal obligations or resolve disputes. Usage logs and analytics data are typically retained for a period not exceeding two years. Communications and support interactions may be stored for up to three years. After these periods, data is securely deleted or anonymized so that it can no longer identify you.

9. Your Rights

Depending on your jurisdiction, you may have the right to request access to the personal data we hold about you, request correction or updating of inaccurate or incomplete information, request deletion of your data subject to legal limitations, restrict or object to processing in specific circumstances, receive your data in a portable format, withdraw your consent at any time where processing is based on consent, and lodge a complaint with your local data protection authority if you believe your rights have been violated. You can exercise these rights by contacting us at info@whalegistic.com. We will respond within the timeframe required by applicable law.

10. Data Security

We employ a range of technical and organizational measures to protect your information. These include encrypted data transmission via HTTPS, secure server storage, limited access for authorized staff only, regular security assessments, and robust internal policies to prevent unauthorized access or disclosure. In the unlikely event of a data breach that may affect your rights, we will notify you and any relevant authority in accordance with applicable legal requirements.

11. Children's Privacy

Our Platform is not directed toward individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify users via email or by posting a prominent notice on our website before the changes take effect. Your continued use of the Platform after such updates constitutes acceptance of the revised Policy.