Privacy Policy

WOLKIS is operated by Primeshield Trading LLC, a company licensed in Dubai, United Arab Emirates. This policy explains what personal data we collect through wolkis.ai and related services, why we collect it, and how we protect it — in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

1. Data we collect

1.1 Information you provide

When you submit a waitlist form, request a demo, or contact us, we collect:

• Name
• Business email address
• Phone number (optional, for WhatsApp / voice follow-up)
• Company name and business type (restaurant, hotel, school, building management, etc.)
• Any free-text notes you include in the request

1.2 Information collected automatically

• IP address, device type, browser, referrer URL
• Pages viewed, time on page, basic interaction events
• Google Ads click identifiers (gclid) and UTM parameters passed through from paid campaigns, so we can attribute enquiries back to the source

1.3 Cookies and tracking

We use Google Ads conversion tracking (gtag.js, tag ID AW-18111821650) to measure whether paid traffic results in qualified enquiries. No third-party advertising cookies are set beyond what Google Ads requires for conversion attribution. We do not run retargeting on people who have not opted in.

2. Why we use your data

• To reply to your enquiry — pilot scoping, quotation, demo scheduling
• To deliver the WOLKIS service if you become a customer (compliance reports, alerts, dashboards)
• To measure marketing performance — aggregate conversion data for Google Ads
• To comply with UAE law — tax records, audit trail for B2B contracts

We do not sell your data, rent mailing lists, or share contact details with third-party marketers.

3. Legal basis

Under UAE PDPL (Article 5), we process your data on the basis of:

• Consent — when you voluntarily submit a form
• Contract — when you become a paying customer
• Legitimate interest — to operate, secure, and improve the service
• Legal obligation — UAE tax, commercial, and sector-specific record-keeping

4. Who we share data with

We share data only with processors who help us deliver the service, under contractual confidentiality:

• Cloud infrastructure: DigitalOcean (EU region)
• Email delivery: Google Workspace (primeshield.ae)
• Payments: Stripe (if you become a paying customer)
• Advertising analytics: Google Ads (aggregate conversion data only)
• Messaging: WhatsApp Business, Telegram (only if you initiate contact)

We may disclose data if compelled by a lawful request from UAE authorities.

5. Data retention

• Enquiry data (non-customers): up to 24 months, then deleted or anonymised
• Customer data: for the duration of the contract plus 5 years (UAE commercial record-keeping)
• Sensor / telemetry data: retained according to the relevant UAE compliance regulation (HACCP / Dubai Municipality / Civil Defence — typically 2–5 years)

6. Your rights

Under UAE PDPL you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion ("right to erasure"), unless we are required by law to keep it
• Withdraw consent for marketing communications at any time
• Request portability of your data in a machine-readable format
• Object to automated decision-making (we do not currently run any)

To exercise any of these rights, email [email protected] with the subject line "PDPL request". We respond within 30 days.

7. Data security

We apply reasonable technical and organisational measures: encrypted transport (TLS 1.3), encrypted storage for customer records, least-privilege access, and incident logging. No system is perfectly secure — if a breach affects your personal data, we notify you and the UAE Data Office without undue delay, in line with PDPL Article 9.

8. International transfers

Some of our processors (DigitalOcean, Google, Stripe) are based outside the UAE. Transfers occur under contractual safeguards consistent with PDPL Article 22. By using our services you consent to these transfers for the purposes described above.

9. Children

WOLKIS is a B2B service and is not directed to children under 18. We do not knowingly collect personal data from minors.

10. Changes to this policy

We may update this policy as our service and regulations evolve. The "Last updated" date above reflects the current version. Material changes will be communicated by email to existing customers.