Privacy policy

Who we are

Wasla Link runs the platform and gives businesses a digital card, booking, enquiries and a small store. Our contact details are on the “Contact us” page.

Account holder data

When you create an account we keep your name, email address, your password hashed so it cannot be read, your interface language and when you accepted the terms.

We also keep what you add yourself: card content and photos, business details, subscription requests and the payment receipts you upload.

Card visitor data

When a visitor sends an enquiry, books an appointment or orders from a store, we keep what they wrote (name, phone, address and notes) so it reaches the business. The business is responsible for how it uses this data; Wasla Link keeps it on the business’s behalf.

We count card views and button clicks with their source (link, QR code or NFC card), without recording who the visitor is.

We also keep a customer list for the business: for each person, their name, phone, email, how many times they got in touch, and the dates of their first and last contact, so the same person is not repeated for every enquiry or booking. Being on this list is not consent to receive advertising.

A business may ask on its forms whether you want its offers and news on WhatsApp, with a box that is never ticked for you. If you tick it, we keep your consent, its date and the wording you saw. Joining a newsletter is consent to receive the business’s news by email. You can stop at any time from the stop link in a message or by asking the business; we then keep an unreadable fingerprint of your number or email so you are not counted as agreeing again unless you agree yourself.

Closed enquiries, finished bookings and completed orders are deleted automatically after a retention period set by Wasla Link (two years unless stated otherwise). An enquiry or order left open is deleted 90 days after that period. Upcoming bookings are never deleted. A person is removed from the customer list once the same period has passed since their last contact and none of their records is left, or after a longer period set by Wasla Link (three years unless stated otherwise) if they agreed to offers.

Cookies

We use no tracking or advertising cookies. We use only three necessary ones: a session cookie to keep you signed in, a language cookie that remembers your language for a year, and a cookie that opens a password-protected card for 30 days.

When it is turned on, the sign-up, booking, enquiry, order and newsletter forms may use a Cloudflare Turnstile check to stop automated messages.

Where data is kept

Data is kept on rented hosting servers that do not depend on where the user is, so the service works from inside and outside Syria. The hosting provider and its region will be named here before launch.

Connections to the site are encrypted, access to data inside Wasla Link is limited to the people who need it to run the service, and every admin action is written to an audit log.

Who we share data with

We do not sell or rent data. We use providers only to run the service: hosting, sending email and phone app notifications. Each gets only what its task needs.

WhatsApp messages from a store are sent by the visitors themselves from their own phone; Wasla Link only prepares the text.

Your rights

You can change your data at any time in your account, and download a full copy of it from the Security page.

You can ask for your account to be deleted from the Security page. It can be restored for 14 days, then it is deleted for good with its cards and data. Download your copy first if you want to keep it.

If you are a visitor and want what you sent to a business deleted, contact the business first, or us if that is not possible.

Operating logs

We keep a short technical log of requests to find faults and abuse; it is deleted after a short period (30 days unless stated otherwise).

Changes to this policy

If we make an important change to this policy, we announce it on the site or by email before it applies.