PRIVACY POLICY
Last updated: 10th October 2023
The purpose of this document (“Privacy Policy”) is to let you – as one of our users – know about how your data is being handled by us when you visit or use our sites, so that you can feel confident using our services.
We reserve the right to change its Privacy Policy at any time without notice. We advise that you occasionally review the current version.
If you have any questions about this Privacy Policy please contact us by email at hello@whatloo.com or by using the contact form on the whatloo.com website.
Who we are
Depth Collective LTD, (together “Whatloo.com/we/us/our”) are a company incorporated in England & Wales with a registered office at Parkhill Studio, Walton Road, Wetherby, United Kingdom, LS22 5DZ. The registered company number for Depth Collective Limited is 14184842.
Our brands
We operate under a number of different brands, including: Whatloo.com.
Your data rights
Did you know that, by law, you have certain rights in relation to your data? These include the right to revoke your consent and the right to object to direct marketing at any time. You may exercise any of these rights by contacting us via hello@whatloo.com or by using the contact form on the whatloo.com website.
1. Our Services
Requests for quotes or information – We strive to connect our customers with appropriate suppliers (“Suppliers”) of a product or service (“Product”) they are interested in. This request might involve obtaining a quote, seeking more information, or scheduling an initial consultation or appointment.
2. How our website & platform works
Our goal is to assist customers in making purchasing decisions effortlessly and connecting them with suitable Suppliers with just a click. Our services are free from any obligations.
Typically, our services depend on customers providing information through a webform. Should you opt to submit a webform with us, we will make every effort to connect you with one or more suitable Suppliers as outlined below:
- Requests for quotes or information – Once you fill out and submit our webforms, the information you provide will be shared with appropriate Suppliers. We will let them know who you are and your product requirements (as per the details you’ve given us). Depending on your request, the Suppliers will subsequently contact you directly via phone, email, or SMS message. For specific products, prior to connecting you with the relevant Suppliers, we might contact you to verify your details or requirements. If you have requested an appointment, we might call you to schedule it. Additionally, our websites may offer the option to directly visit a Supplier’s website or call them directly.
3. The information we collect and how we use it
If you visit our sites and use our services, we may collect certain information about you. We want you to understand:
- What information we collect and how we collect it
- Why we collect your information (i.e. what do we use it for and who we may share it with)
- What lawful basis we rely on to collect your information
The tables below explain this in more detail.
1. Contact details (e.g. name, email address, telephone number, postal code) and Product requirements
How we collect it |
Why we collect it |
Lawful Basis |
|
Products & Offers
|
Consent – On our webforms, you will notice a clear consent statement detailing the Suppliers who will contact you. You have the option to withdraw your consent at any time. |
Similar Products & Offers To email or SMS message you about similar Products |
Consent – You may revoke your consent at any time. You also have the right to object to direct marketing. |
|
Automated decision-making Prior to forwarding your request to Suppliers, our service might incorporate automated decision-making. Our technology platform could autonomously evaluate your needs and direct your request to Suppliers interested in receiving requests at the moment your request is submitted. |
Legitimate interests – You have the right to object to processing based on legitimate interests. |
|
Verification To confirm the authenticity of your submission, ensuring it comes from a real person, we might collaborate with third parties such as Data8 for verification purposes. |
Legitimate interests – You have the right to object to processing based on legitimate interests. |
|
Customer Services For customer service needs, including: • Addressing other inquiries or requests directed to us |
Legitimate interests – You have the right to object to processing based on legitimate interests. |
|
Marketing
|
Legitimate interests – You have the right to object to processing based on legitimate interests. |
|
Data Enhancement
|
Legitimate interests – You have the right to object to processing based on legitimate interests. |
|
If you partially fill out our webform but do not complete and submit it |
Products & Offers |
Legitimate interests – You have the right to object to processing based on legitimate interests. |
When you create an account |
Managing your account To create and manage your account |
Legitimate interests – You have the right to object to processing based on legitimate interests. |
When you join our mailing lists to receive newsletters, guides, whitepapers, e-books etc. as advertised on our sites |
Mailing Lists
|
Consent – You may revoke your consent at any time. |
When you post reviews or comments on our sites |
Reviews & Comments To post or reply to reviews and comments submitted on our website. |
Legitimate interests – You have the right to object to processing based on legitimate interests. |
2. IP address (a distinctive number linked to a computer or device, allowing it to connect with other devices and computers via the Internet), along with other online identifiers, geolocation, and device specifications.
How we collect it |
Why we collect it |
Lawful Basis |
|
Verification
Marketing
|
Legitimate interests – You have the right to object to processing based on legitimate interests |
3. Event Data (such as user agent, IP address, country, language, and browser/app used) – We might utilise third-party tools for device data collection and similar tracking technologies (located behind our advertisements and websites) to gather this information.
How we collect it |
Why we collect it |
Lawful Basis |
If you engage with our advertisements on platforms belonging to our advertising partners (such as Facebook, TikTok, and LinkedIn) If you access our website. |
|
Legitimate interests – You have the right to object to processing based on legitimate interests |
4. Recorded phone calls (Please note that sensitive personal information may be recorded if you voluntarily share details with us over the phone)
How we collect it |
Why we collect it |
Lawful Basis |
|
|
Legitimate interests – You have the right to object to processing based on legitimate interests |
5. Outcome data (indicating whether you have made a purchase of a Product or subscribed to an Offer with one of our Suppliers).
How we collect it |
Why we collect it |
Lawful Basis |
Suppliers may send data back to us |
|
Legitimate interests – You have the right to object to processing based on legitimate interests |
|
Legitimate interests – You have the right to object to processing based on legitimate interests |
|
|
Legitimate interests – You have the right to object to processing based on legitimate interests |
4. Sharing your data
In delivering our services and ensuring a positive customer experience, we may share your data with third parties.
We collaborate with the following categories of third parties:
- Suppliers – These are the Suppliers we connect you with, who then contact you regarding the Products or Offers. As explained earlier, if you submit our webform, we pass your request to one or more relevant Suppliers.
- Review Platforms: We collaborate with review platforms to collect feedback from our customers. If you write a review about us on a platform by clicking through the link on our pages, we share your name and email address with the review platforms. This enables them to set up an account for you to post the review and verify its authenticity.
- Advertising platforms – We partner with various companies, such as social media platforms and search engines, for our marketing campaigns to reach potential customers. In fact, this might be one of the ways you discovered our site! We may share data with these companies to monitor our campaign performance or target new audiences who could benefit from our services (please see our explanation of ‘customer and lookalike audiences’ below).
- Service providers who process data on our behalf – Some companies assist us by providing essential services for our business operations (e.g., cloud storage providers, email service providers, and cloud telephony providers) or offering analytics and consultancy services. We share data with these companies to provide our services to you effectively.
Custom and lookalike audiences
We collaborate with platforms such as Facebook, Google, TikTok, and others to display adverts for additional products that might align with your interests. Additionally, we use these platforms to connect with individuals who could find our service valuable.
We implement this through two methods. In both cases, your information, along with other data, is used to establish a custom audience and/or a lookalike audience. When sharing an audience with a Platform, the data undergoes hashing and pseudonymisation. This means any data that could identify a person within the audience is replaced with an artificial identifier, ensuring the process’s security. Moreover, we only share the necessary data required to create the audience, and nothing beyond that.
- Custom audience – A custom audience is a list comprised of our existing customers. Periodically, we share this audience with Platforms. As detailed earlier, the data undergoes hashing and pseudonymisation before sharing. The Platform utilises this audience to display our customers advertisements for other products that might pique their interest.
- Lookalike audience – A lookalike audience is generated by the Platform. Occasionally, we provide Platforms with a customer list. The Platform utilises this list to identify and form lookalikes—meaning other Platform users who share similar traits with our customers—to whom it displays our advertisements. Once again, as previously described, the data undergoes hashing and pseudonymisation before being used.
5. Cookies & Event Tracking
Cookies
A cookie is a compact text file that a website you visit stores on your computer. These files are commonly used to enable websites to function efficiently and provide information to the site owners. Most web browsers allow you to manage cookies through their settings, and you can clear them whenever you choose.
Cookies are employed on our websites to enhance functionality and user experience.
We use the following cookies on our website:
Cookie |
Domain |
Description |
Duration |
Type |
_vwo_uuid_v2 |
.whatloo.com |
This cookie is set by Visual Website Optimiser and calculates unique traffic on a website. |
1 year |
Analytics |
_gcl_au |
.whatloo.com |
Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services. |
3 months |
Analytics |
test_cookie |
.doubleclick.net |
doubleclick.net sets this cookie to determine if the user’s browser supports cookies. |
15 minutes |
Advertisement |
_ga_* |
.whatloo.com |
Google Analytics sets this cookie to store and count page views. |
1 year 1 month 4 days |
Analytics |
_ga |
.whatloo.com |
Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. |
1 year 1 month 4 days |
Analytics |
Event Tracking
We may employ click identifiers (random unique sequences of letters and numbers) or hashing techniques for marketing attribution, identifying new and returning visitors on our sites, or tracking other events.
Unlike cookies, these methods don’t store data on your device. They rely on information voluntarily provided or supported by your browser, such as user agent strings or IP addresses. It’s crucial to note that we will never attempt to bypass your browser’s settings or request excessive data about your device using these techniques.
6. Storing your data
We will retain your information only for the duration necessary to fulfil the purposes for which it was initially collected, as outlined in this Policy. Specifically:
- The data we gather from you will be retained for no more than 4 years following your webform submission. This duration allows us to address any disputes or inquiries from Suppliers and complies with the recommendations or requirements stated in applicable data protection laws.
- If you have not chosen to opt out of receiving marketing communications from us, we will keep your details and continue sending you emails until a point when you no longer engage with our emails for a duration that we consider them no longer relevant to send.
7. Your data rights
Under the General Data Protection Regulation and depending on specific criteria, you possess the following rights:
- You can ask for a copy of the personal data we hold about you (known as a subject access request or SAR).
- You can request corrections to any inaccuracies in your personal information.
- Under certain circumstances, you can ask for your personal information to be deleted.
- You have the right to object to the processing of your personal information if you have concerns about the content of the information we hold or how it is being processed.
- You can request a restriction on the processing of your personal information.
- To exercise any of these rights, please contact us via hello@whatloo.com
8. Transferring your data
There may be instances where we need to transfer your information outside the UK. Some of our partners and providers may be located within or outside the UK or EEA (e.g. in the United-States). Where your personal data is passed on to countries outside of the European Union, we take steps to make sure that your privacy is protected in an appropriate manner.
9. Securing your information
We have put in place security measures to prevent your personal data from being accidentally lost, altered, disclosed, used or accessed in an unauthorised way. Only recipients with a need-to-know (according to the above-mentioned purposes) may access your data and are subject to confidentiality undertakings.