WAPit

Privacy Policy

Last updated: 9 July 2026

1. Introduction

WAPit ("we", "us", or "our") is a WhatsApp messaging platform operated from United Kingdom. We are committed to protecting your personal information in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platform at wapit.co.uk(the "Service").

2. Data Protection Contact

Our designated data protection contact can be reached at:

  • Email: info@wapit.co.uk
  • Website: wapit.co.uk
  • Location: United Kingdom

3. Information We Collect

3.1 Account Information

When you register for WAPit, we collect:

  • Full name
  • Email address
  • Phone number
  • Company name
  • Password (stored in hashed format)

3.2 Messaging Data

When you use our messaging services, we process:

  • Recipient phone numbers
  • Message content (text, media URLs, templates)
  • Delivery status and timestamps
  • WhatsApp message IDs

3.3 Payment Information

Payment processing is handled by our payment provider. We do not store your credit card or banking details directly. We retain:

  • Payment transaction references
  • Payment amounts and dates
  • Subscription status and billing history

3.4 Technical Information

We automatically collect:

  • IP address
  • Browser type and version
  • Usage patterns and timestamps
  • API request logs

4. How We Use Your Information

We use your personal information to:

  • Provide and maintain the messaging service
  • Process your messages through the Meta WhatsApp Cloud API
  • Manage your account, subscriptions, and billing
  • Send service-related communications (account verification, billing notifications)
  • Monitor and enforce platform usage limits and policies
  • Prevent abuse, fraud, and spam
  • Comply with legal obligations
  • Improve our service and develop new features

5. Legal Basis for Processing

Under UK GDPR, we process your personal information based on:

  • Contract: Processing necessary to perform our service agreement with you (Article 6(1)(b))
  • Legitimate interests: For platform security, fraud prevention, and service improvement (Article 6(1)(f))
  • Legal obligation: When required by law or regulation (Article 6(1)(c))
  • Consent: Where you have provided explicit consent for specific uses (Article 6(1)(a))

6. Third-Party Data Sharing

We share your information with:

  • Meta Platforms (WhatsApp Cloud API):Recipient phone numbers and message content are transmitted to Meta to deliver your messages. Meta's privacy policy applies to their processing.
  • Google Cloud Platform:Our infrastructure is hosted on Google Cloud (region: europe-west1). Data is processed in accordance with Google's data processing terms.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

7. Cross-Border Data Transfers

Your data may be transferred to servers located outside United Kingdom (specifically within the European Union via Google Cloud Platform, and to Meta's global infrastructure for message delivery). These transfers are made in accordance with UK GDPR Chapter V, using appropriate safeguards such as Standard Contractual Clauses where required.

8. Data Retention

  • Account data: Retained while your account is active, and for 12 months after account closure.
  • Message logs: Retained for 90 days for delivery tracking and dispute resolution.
  • Payment records: Retained for 5 years in accordance with UK tax and financial regulations.
  • API logs: Retained for 30 days for security and debugging purposes.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Encryption in transit (TLS/SSL)
  • Encrypted database connections
  • Password hashing (bcrypt/scrypt)
  • Role-based access controls
  • Regular security reviews
  • API authentication via JWT tokens

10. Your Rights Under GDPR

You have the right to:

  • Access: Request confirmation of what personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Object: Object to the processing of your personal information
  • Withdraw consent: Withdraw previously given consent at any time
  • Complaint: Lodge a complaint with the ICO

To exercise any of these rights, contact us at info@wapit.co.uk. We will respond within 30 days.

11. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the operation of the Service and cannot be disabled.

12. Children's Privacy

Our Service is not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: info@wapit.co.uk
  • Website: wapit.co.uk/contact

15. ICO

If you are not satisfied with how we handle your personal information, you may lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: https://ico.org.uk
  • Helpline: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF