Information We Collect
We collect the following categories of personal information depending on how you interact with us:
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, email, phone, company | Contact form, engagement onboarding |
| Commercial Information | Service interest, RFP responses, contract data | Direct from you |
| Internet Activity | IP address, browser, pages visited, referrer, source attribution | Server logs, analytics tools |
| Geolocation | Approximate location derived from IP | Analytics tools |
| Professional Information | Job title, employer, infrastructure details disclosed during engagement | Direct from you under NDA |
We do not collect special category data (race, religion, health, biometric, etc.) and request that you not include such data in form submissions.
How We Use Information
- Service delivery: Responding to inquiries, scoping engagements, delivering contracted services
- Operations: Account management, billing, support, security monitoring
- Marketing: Sending requested whitepapers, event invitations, and engagement-related communications (with opt-out at any time)
- Compliance: Meeting legal obligations including tax, audit, anti-fraud, and applicable export controls
- Improvement: Aggregated, de-identified analytics on Site usage to improve content and UX
Disclosure to Third Parties
We share personal information only with subprocessors who help us operate, deliver, and secure the Services:
| Subprocessor | Purpose | Location |
|---|---|---|
| Google Analytics | Aggregated Site analytics | United States |
| Email service provider | Transactional + marketing email | United States |
| Hosting provider | Site hosting + backups | United States (AWS) |
| CRM | Customer record management | United States |
We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising (as defined under CPRA).
Your Rights — GDPR (EU/UK Residents)
If you are in the European Economic Area or the United Kingdom, you have the following rights under GDPR/UK GDPR:
Access
Request a copy of personal information we hold about you.
Rectification
Correct inaccurate personal information.
Erasure
Request deletion (subject to legal retention requirements).
Restriction
Limit our processing in certain circumstances.
Portability
Receive your data in a machine-readable format.
Objection
Object to processing based on legitimate interest.
To exercise these rights, email privacy@wuctechnologies.com. We respond within 30 days.
Your Rights — CCPA/CPRA (California Residents)
If you are a California resident, the California Consumer Privacy Act (as amended by CPRA) gives you the right to:
- Know what personal information we have collected, used, disclosed, and sold (we don't sell)
- Delete personal information (subject to legal retention requirements)
- Correct inaccurate personal information
- Limit use of sensitive personal information
- Opt out of cross-context behavioral advertising (we don't engage in this)
- Non-discrimination for exercising these rights
Submit a verifiable consumer request to privacy@wuctechnologies.com.
Data Retention
We retain personal information for the period needed to fulfill the purpose for which it was collected, plus any retention period required by law:
- Contact form submissions: 24 months for sales follow-up, then archived or deleted
- Engagement records: Duration of engagement plus 7 years (audit, tax, legal)
- Server logs: 90 days, then deleted
- Analytics data: Aggregated to 14 months, then de-identified
Security Measures
We protect personal information using administrative, technical, and physical safeguards, including:
- Encryption in transit (TLS 1.3) for all Site traffic and form submissions
- Access controls with least-privilege role-based authentication
- Regular security review and patch management
- Background-screened personnel and confidentiality agreements
- Audit logging on systems handling Customer Data
No system is perfectly secure. If you believe your information has been compromised, contact security@wuctechnologies.com immediately.
Children Under 13
Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will delete it.
International Data Transfers
WUC operates in the United States. If you are located outside the United States, your information will be transferred to and processed in the U.S. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and applicable supplementary measures.
Changes & Contact
We may update this policy. The "Last Reviewed" date in the header reflects the most recent material update. Material changes will be communicated by email to active customers and prominently noted on this page for at least 30 days.
Contact us with questions or to exercise your rights:
- Email: privacy@wuctechnologies.com
- Mail: WUC Technologies LLC, Boston, Massachusetts