Privacy Policy

**Interim notice — pending legal review.**

This notice explains what Wisecsite collects, why, and what you can do about
it. It covers wisec.site and the client dashboard. Each storefront built on
Wisecsite publishes its own privacy notice for its own customers.

## Who is responsible

Wisecsite operates this platform and decides how data described here is used.
Where we host a storefront for a client, that client decides what happens to
their own customers' data and we act on their instructions.

## What we collect and why

- **Account and billing details** — to provide the service and invoice you.
- **Support messages** — to answer you and to keep a record of the exchange.
- **Server and security logs**, including IP address — to keep the service
running and to detect abuse. These are kept whether or not you accept
cookies, because the service cannot run safely without them.
- **Usage analytics** — only if you accept analytics cookies. See the Cookie
Policy.

We ask for the minimum needed for each purpose. Where a field is optional, it
is marked optional.

## Legal basis

Performance of our contract with you (account, billing, support); our
legitimate interest in a secure and working service (security logs); and your
consent (analytics and marketing cookies, marketing email). You can withdraw
consent at any time without affecting the service itself.

## Who else sees it

- Payment providers, to take payment. We hold a client's gateway credentials
and call the provider on their behalf; funds settle to the client's own
account, not ours.
- Infrastructure and email providers acting on our instructions.
- Analytics and advertising providers, only where you have consented.

We do not sell personal data.

## Where it is held

Our servers are located in the European Union.

## How long we keep it

Account records for as long as the account is open and for a limited period
afterwards for accounting and dispute purposes. Security logs for a short
rolling window. Analytics data for no longer than needed to produce the
reporting it exists for. Exact retention periods are being finalised with
counsel and will be stated here.

## Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to
processing, ask us to restrict it, or ask for it in a portable form. You can
also complain to your national data protection authority.

## Children

The platform is not intended for children, and we do not knowingly collect
data from anyone under 16. If you believe a child has given us data, contact
us and we will delete it.

## Contact

Use the contact form on this site. A named data protection contact will be
published here.