PRIVACY POLICY

Last updated: 10th October 2023

The purpose of this document (“Privacy Policy”) is to let you – as one of our users – know about how your data is being handled by us when you visit or use our sites, so that you can feel confident using our services.

We reserve the right to change its Privacy Policy at any time without notice. We advise that you occasionally review the current version.

If you have any questions about this Privacy Policy please contact us by email at hello@whatloo.com or by using the contact form on the whatloo.com website.

Who we are

Depth Collective LTD, (together “Whatloo.com/we/us/our”) are a company incorporated in England & Wales with a registered office at Parkhill Studio, Walton Road, Wetherby, United Kingdom, LS22 5DZ. The registered company number for Depth Collective Limited is 14184842.

Our brands

We operate under a number of different brands, including: Whatloo.com.

Your data rights

Did you know that, by law, you have certain rights in relation to your data? These include the right to revoke your consent and the right to object to direct marketing at any time. You may exercise any of these rights by contacting us via hello@whatloo.com or by using the contact form on the whatloo.com website.

 

1. Our Services

Requests for quotes or information – We strive to connect our customers with appropriate suppliers (“Suppliers”) of a product or service (“Product”) they are interested in. This request might involve obtaining a quote, seeking more information, or scheduling an initial consultation or appointment.

 

2. How our website & platform works

Our goal is to assist customers in making purchasing decisions effortlessly and connecting them with suitable Suppliers with just a click. Our services are free from any obligations.

Typically, our services depend on customers providing information through a webform. Should you opt to submit a webform with us, we will make every effort to connect you with one or more suitable Suppliers as outlined below:

  • Requests for quotes or information – Once you fill out and submit our webforms, the information you provide will be shared with appropriate Suppliers. We will let them know who you are and your product requirements (as per the details you’ve given us). Depending on your request, the Suppliers will subsequently contact you directly via phone, email, or SMS message. For specific products, prior to connecting you with the relevant Suppliers, we might contact you to verify your details or requirements. If you have requested an appointment, we might call you to schedule it. Additionally, our websites may offer the option to directly visit a Supplier’s website or call them directly.

 

3. The information we collect and how we use it

If you visit our sites and use our services, we may collect certain information about you. We want you to understand:

  • What information we collect and how we collect it
  • Why we collect your information (i.e. what do we use it for and who we may share it with)
  • What lawful basis we rely on to collect your information

The tables below explain this in more detail.

1. Contact details (e.g. name, email address, telephone number, postal code) and Product requirements

How we collect it

Why we collect it

Lawful Basis

  • When you submit information via our webforms
  • When you provide your details through a pop-up box on our sites
  • If we contact you following your submission

Products & Offers

  • To connect you with suitable Suppliers
  • To verify your information or needs
  • To schedule an appointment
  • To send you additional information via email or SMS about the Products you have expressed interest in

Consent – On our webforms, you will notice a clear consent statement detailing the Suppliers who will contact you.

You have the option to withdraw your consent at any time.

Similar Products & Offers

To email or SMS message you about similar Products

Consent – You may revoke your consent at any time. You also have the right to object to direct marketing.

Automated decision-making

Prior to forwarding your request to Suppliers, our service might incorporate automated decision-making. Our technology platform could autonomously evaluate your needs and direct your request to Suppliers interested in receiving requests at the moment your request is submitted.

Legitimate interests –

You have the right to object to processing based on legitimate interests.

Verification

To confirm the authenticity of your submission, ensuring it comes from a real person, we might collaborate with third parties such as Data8 for verification purposes.

Legitimate interests –

You have the right to object to processing based on legitimate interests.

Customer Services

For customer service needs, including:
• Seeking feedback on your interactions with our websites, services, and the Suppliers we connected you with

• Addressing other inquiries or requests directed to us

Legitimate interests –

You have the right to object to processing based on legitimate interests.

Marketing

  • To create custom or look alike audiences.
  • To analyse customer patterns, helping us gain insights into which of our customers are actively engaging with our services.

Legitimate interests –

You have the right to object to processing based on legitimate interests.

Data Enhancement

  • To deepen our comprehension of your service needs, we might align specific business-related data you provide with corresponding information held by third parties.
  • These third parties may share additional data with us to enhance our interactions with you and refine our customer segmentation processes.

Legitimate interests –

You have the right to object to processing based on legitimate interests.

If you partially fill out our webform but do not complete and submit it

Products & Offers
To send you an email to check if you are still interested in the product or offer.

Legitimate interests –

You have the right to object to processing based on legitimate interests.

When you create an account

Managing your account

To create and manage your account

Legitimate interests –

You have the right to object to processing based on legitimate interests.

When you join our mailing lists to receive newsletters, guides, whitepapers, e-books etc. as advertised on our sites

Mailing Lists

  • To deliver this content to you.
  • If you have agreed to receive emails from specific third parties, we will share your email address with them for direct communication.
  • We might also send you emails acting on behalf of these third parties.

Consent – You may revoke your consent at any time.

When you post reviews or comments on our sites

Reviews & Comments

To post or reply to reviews and comments submitted on our website.

Legitimate interests –

You have the right to object to processing based on legitimate interests.

2. IP address (a distinctive number linked to a computer or device, allowing it to connect with other devices and computers via the Internet), along with other online identifiers, geolocation, and device specifications.

How we collect it

Why we collect it

Lawful Basis

  • When you engage with our advertisements (for instance, on platforms like Google, Facebook, TikTok, etc.).
  • When you interact with our websites by clicking on any hyperlinks.
  • When you choose to submit a webform by clicking.
  • When you click on links provided in emails or SMS messages sent by us.

Verification

  • To prevent undesired website traffic, such as spam and fraudulent visitors.
  • To confirm with our Suppliers that a request has indeed been made by you and not by another individual.
  • To confirm with our Suppliers that you have granted permission for us and them to contact you.
  • To confirm the origin of your request, specifying a particular country, state, or region.
  • To detect duplicate requests submitted by you.
  • To verify the source of your request, confirming it originated from our websites.

Marketing

  • Personalising advertisements specifically for you according to your location. We might enlist the help of a third party to determine the location parameters based on your IP address.

Legitimate interests –

You have the right to object to processing based on legitimate interests

3. Event Data (such as user agent, IP address, country, language, and browser/app used) – We might utilise third-party tools for device data collection and similar tracking technologies (located behind our advertisements and websites) to gather this information.

How we collect it

Why we collect it

Lawful Basis

If you engage with our advertisements on platforms belonging to our advertising partners (such as Facebook, TikTok, and LinkedIn)

If you access our website.

  • For marketing attribution reasons (to enhance our understanding of your interactions with our content and assess the effectiveness of our marketing efforts based on your interests)
  • For evaluating and reporting the effectiveness of our advertising campaigns
  • For targeted advertising (unless you have chosen to opt out)

Legitimate interests –

You have the right to object to processing based on legitimate interests

4. Recorded phone calls (Please note that sensitive personal information may be recorded if you voluntarily share details with us over the phone)

How we collect it

Why we collect it

Lawful Basis

  • If we give you a call after your submission to verify your details and Product preferences.
  • If we reach out to you after you’ve used our service to request feedback on the service provided.
  • We monitor and/or document conversations between us and you for quality assurance and staff training purposes.
  • Occasionally, we might need to grant Suppliers limited access to these recordings to resolve disputes.

Legitimate interests –

You have the right to object to processing based on legitimate interests

5. Outcome data (indicating whether you have made a purchase of a Product or subscribed to an Offer with one of our Suppliers).

How we collect it

Why we collect it

Lawful Basis

Suppliers may send data back to us

  • To address a Supplier’s inquiry regarding a request or an inquiry we’ve forwarded to them, aiding us in resolving the query efficiently.

Legitimate interests – You have the right to object to processing based on legitimate interests

  • To help us enhance our marketing efforts.
  • To identify customer trends and gain a better understanding of which of our customers are engaging with our services.

Legitimate interests – You have the right to object to processing based on legitimate interests

  • To create custom/lookalike audiences

Legitimate interests – You have the right to object to processing based on legitimate interests

4. Sharing your data

In delivering our services and ensuring a positive customer experience, we may share your data with third parties.

We collaborate with the following categories of third parties:

  • Suppliers – These are the Suppliers we connect you with, who then contact you regarding the Products or Offers. As explained earlier, if you submit our webform, we pass your request to one or more relevant Suppliers.
  • Review Platforms: We collaborate with review platforms to collect feedback from our customers. If you write a review about us on a platform by clicking through the link on our pages, we share your name and email address with the review platforms. This enables them to set up an account for you to post the review and verify its authenticity.
  • Advertising platforms – We partner with various companies, such as social media platforms and search engines, for our marketing campaigns to reach potential customers. In fact, this might be one of the ways you discovered our site! We may share data with these companies to monitor our campaign performance or target new audiences who could benefit from our services (please see our explanation of ‘customer and lookalike audiences’ below).
  • Service providers who process data on our behalf – Some companies assist us by providing essential services for our business operations (e.g., cloud storage providers, email service providers, and cloud telephony providers) or offering analytics and consultancy services. We share data with these companies to provide our services to you effectively.

Custom and lookalike audiences

We collaborate with platforms such as Facebook, Google, TikTok, and others to display adverts for additional products that might align with your interests. Additionally, we use these platforms to connect with individuals who could find our service valuable.

We implement this through two methods. In both cases, your information, along with other data, is used to establish a custom audience and/or a lookalike audience. When sharing an audience with a Platform, the data undergoes hashing and pseudonymisation. This means any data that could identify a person within the audience is replaced with an artificial identifier, ensuring the process’s security. Moreover, we only share the necessary data required to create the audience, and nothing beyond that.

  • Custom audience – A custom audience is a list comprised of our existing customers. Periodically, we share this audience with Platforms. As detailed earlier, the data undergoes hashing and pseudonymisation before sharing. The Platform utilises this audience to display our customers advertisements for other products that might pique their interest.
  • Lookalike audience – A lookalike audience is generated by the Platform. Occasionally, we provide Platforms with a customer list. The Platform utilises this list to identify and form lookalikes—meaning other Platform users who share similar traits with our customers—to whom it displays our advertisements. Once again, as previously described, the data undergoes hashing and pseudonymisation before being used.

5. Cookies & Event Tracking

Cookies

A cookie is a compact text file that a website you visit stores on your computer. These files are commonly used to enable websites to function efficiently and provide information to the site owners. Most web browsers allow you to manage cookies through their settings, and you can clear them whenever you choose.

Cookies are employed on our websites to enhance functionality and user experience.

 We use the following cookies on our website:

Cookie

Domain

Description

Duration

Type

_vwo_uuid_v2

.whatloo.com

This cookie is set by Visual Website Optimiser and calculates unique traffic on a website.

1 year

Analytics

_gcl_au

.whatloo.com

Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.

3 months

Analytics

test_cookie

.doubleclick.net

doubleclick.net sets this cookie to determine if the user’s browser supports cookies.

15 minutes

Advertisement

_ga_*

.whatloo.com

Google Analytics sets this cookie to store and count page views.

1 year 1 month 4 days

Analytics

_ga

.whatloo.com

Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.

1 year 1 month 4 days

Analytics

Event Tracking

We may employ click identifiers (random unique sequences of letters and numbers) or hashing techniques for marketing attribution, identifying new and returning visitors on our sites, or tracking other events. 

Unlike cookies, these methods don’t store data on your device. They rely on information voluntarily provided or supported by your browser, such as user agent strings or IP addresses. It’s crucial to note that we will never attempt to bypass your browser’s settings or request excessive data about your device using these techniques.

 

6. Storing your data

We will retain your information only for the duration necessary to fulfil the purposes for which it was initially collected, as outlined in this Policy. Specifically:

  • The data we gather from you will be retained for no more than 4 years following your webform submission. This duration allows us to address any disputes or inquiries from Suppliers and complies with the recommendations or requirements stated in applicable data protection laws.
  • If you have not chosen to opt out of receiving marketing communications from us, we will keep your details and continue sending you emails until a point when you no longer engage with our emails for a duration that we consider them no longer relevant to send.

7. Your data rights

Under the General Data Protection Regulation and depending on specific criteria, you possess the following rights:

  1. You can ask for a copy of the personal data we hold about you (known as a subject access request or SAR).
  2. You can request corrections to any inaccuracies in your personal information.
  3. Under certain circumstances, you can ask for your personal information to be deleted.
  4. You have the right to object to the processing of your personal information if you have concerns about the content of the information we hold or how it is being processed.
  5. You can request a restriction on the processing of your personal information.
  6. To exercise any of these rights, please contact us via hello@whatloo.com

8. Transferring your data

There may be instances where we need to transfer your information outside the UK. Some of our partners and providers may be located within or outside the UK or EEA (e.g. in the United-States). Where your personal data is passed on to countries outside of the European Union, we take steps to make sure that your privacy is protected in an appropriate manner.

 

9. Securing your information

We have put in place security measures to prevent your personal data from being accidentally lost, altered, disclosed, used or accessed in an unauthorised way. Only recipients with a need-to-know (according to the above-mentioned purposes) may access your data and are subject to confidentiality undertakings.