Data processing statement
What we do with data, in plain language. This statement complements the privacy policy. It is not legal advice and should be reviewed by your lawyer.
Our role
For visitors, customers and newsletter subscribers, WMA Hub is the controller of the personal data described in the privacy policy. For client projects, WMA Hub acts as a processor on your instructions: you stay the controller of your data.
Client data in consulting and training
- We work remotely inside your environment and on your accounts. Data does not leave your tenant
- Access is least-privilege, tied to named people and removed at the end of the project
- We do not copy client data to our own systems, templates, training material or public content
- Work is covered by an NDA, signed before we look at anything
- We tell you without undue delay if we become aware of a personal-data incident affecting your data
Website data
- Analytics and marketing measurement run only after you accept them in the cookie banner, and respect Global Privacy Control and Do Not Track
- Newsletter subscriptions need your consent (double opt-in where enabled); every email has an unsubscribe link
- We keep order and invoice records for the legal retention period; other data is removed on request
- You can download your data or delete your account from your account page
Service providers (sub-processors)
We use providers for hosting, email delivery and card payments. The current list is available on request and is updated here when it changes: [[LIST OF SUB-PROCESSORS AND COUNTRIES]].
Your rights and contact
Under the UAE PDPL and the GDPR you may ask for access, correction, deletion or restriction of your personal data. Write to [[DATA PROTECTION CONTACT EMAIL]] or use the contact page.