WISMOlabs - post purchase experience solution and ecommerce returns
Free Trial
Free Trial

SaaS Privacy Policy

5WISMO Inc. (“WISMO” or “we”) offers various services to online retailers to improve their customer’s post-purchase experience, including order tracking, delivery notifications, and product return management. Collectively, we refer to these services as our “Services”.

To be clear, WISMO is a business-to-business (“B2B”) company and provides software services for it’s Client’s, who are online retailers. The relationship between our Client’s and its customers are governed by the agreed terms between our Client’s and it’s customers. WISMO acts as a “service provider” or “processor” under applicable data protection laws, and is bound by the terms of service directly between WISMO and our Client.

However, Wismo Inc. (“WISMO”) is committed to protecting privacy and complying with applicable data protection laws. This publicly available SaaS Privacy Policy outlines how WISMO collects, uses, discloses, and safeguards personal information with respect to the Services WISMO provides. Any reference to “you” or “your” refer to our Client’s customers. You may also refer to our Data Processing Addendum available by request here for more information about how we process personal information.

If you are merely visiting wismolabs.com and are not a Client of WISMO, nor a customer of one of our Clients, please refer to the WISMO Website Cookie & Privacy Policy.

This Privacy Policy was updated and is effective on October 20, 2020.

What information do we collect?

Our software has been designed from the ground up to minimize the transfer and storage of personal information. If we don’t need it, we don’t keep it. And if there is personal information we need to provide the Services, we delete it after we’re done with it.

Depending on the services we provide our Clients, we may collect the following pieces of information:

  • First Name
  • Telephone number
  • Email
  • Postal / Zip Code

In the event that any of the above personal information is collected, the data is either deleted immediately after a service has been provided (e.g. a package has been delivered), or within three months of the service having been completed (e.g. a package has been delivered, but information is retained in case the customer wishes to return the goods).

We may also collect general information to enable us to provide better Services, such as:

  • IP address
  • Browser information
  • Device information
  • Usage data

Children’s Information

The Services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If you learn that your child has provided us with personal information without your consent, you may contact us as set forth below. If we learn that we have collected a child’s personal information in violation of applicable law, we will promptly take steps to delete such information and terminate the child’s account.

How do we use your information?

How WISMO uses or processes personal information obtained from its Clients depends on the specific Services engaged with each Client. WISMO’s processing of your personal information is supported in law as the performance of a contract (with our Clients), consent (where you provide specific consent to the use of personal information), for the compliance with legal obligations, or for our legitimate interests (so long as your fundamental rights do not override those interests).

The following are the main examples of how WISMO processes Personal Information:

Order Tracking

When a customer of one of our Client’s places an order on our Client’s websites, they will provide a link to a page that is generated by WISMO to provide order status and tracking. In these cases, WISMO uses the customers first name and postal/zip code, combined with information obtained by third party carriers and WISMO’s proprietary machine learning algorithms to accurately predict when an order will arrive at the customer’s destination.

Alerts and Notifications

If the end customer of our Client has selected to receive SMS or email notifications and updates of their order, WISMO will use the customer’s phone number and/or email address to send notifications.

How long do we retain your information?

WISMO does not always collect personal information to provide the Services to its Clients. The collection of personal information is based on the specific Services on a Client-by-Client basis.

If WISMO requires personal information from its Clients to provide the Services, then WISMO deletes the personal information after the Service has been completed. This may mean that personal information is deleted immediately after a customer has received a package, or sometimes, within three months of delivery. Again, the time is based on the specific Service being provided to our Client.

WISMO does not sell personal information. WISMO’s only use of personal information is strictly to provide the Services to its Clients.

Who has access to your information?

WISMO does not rent or sell your information. We restrict access to your information to authorized employees and we do not share your information with third parties except in the circumstances explained below.
During the provision of Services, personal information passes through our service providers. Service providers are third-party companies we engage such as hosting servers, SMS notification services, and email notification services.
The third-party service providers we use to help us deliver the Services and which process your Content are referred to as “sub-processors” and are listed in our Data Protection Addendum.

What international data transfers occur at WISMO?

Under the General Data Protection Regulation (GDPR) and other data protection laws, information about you may only be transferred from your region to other regions if certain requirements are met. For instance, under the GDPR, information about you may be transferred from the European Economic Area (EEA) to outside the EEA if adequate data protections are in place. Our Services are managed by WISMO’s headquarters in Canada. As the European Commission considers Canada to be a country which provides adequate data protection, information about you may be transferred from the EEA to Canada.

As explained above, WISMO also uses third-party service providers, such as managed hosting providers, networking infrastructure and other services required to operate the Services. These third-party providers may process or store personal data on servers anywhere in the world. We endeavour to safeguard your personal information by engaging reputable third-party service providers that meet industry standards.

How long do we retain personal information?

WISMO maintains industry-standard security safeguards to protect your information. Access controls are in place to limit access to your information to those who need it to perform their jobs. We encrypt data where appropriate to ensure that your information is kept private.

How do we safeguard your information?

We store the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

Your Privacy Rights

In accordance with applicable law, you may have the right to: (i) request confirmation of whether we are processing your personal information; (ii) obtain access to or a copy of your personal information; (iii) receive an electronic copy of personal information that you have provided to us, or ask us to send that information to another company (the “right of data portability”); (iv) restrict or object to our uses of your personal information; (v) seek correction or amendment of inaccurate, untrue, incomplete, outdated or improperly processed personal information; (vi) withdraw your consent (Note: if you withdraw your consent to processing, some features of the service may not be available); (vii) request erasure, anonymization, or blocking of personal information held about you by us; (viii) be informed about third parties with which your personal information has been shared; and (ix) request the review of decisions taken exclusively based on automated processing if that could affect data subject rights, subject to certain exceptions prescribed by law. If you would like to exercise any of these rights, please contact us as set forth below.

We will process such requests in accordance with applicable laws. To protect your privacy, we will take steps to verify your identity before fulfilling your request. We may choose to delete personal information by de-identifying and/or aggregating it.

‍Please note that WISMO is not able to fulfill requests it receives from individuals about personal information that is processed via the Services. If you have a request related to personal information processed via the Services, please contact our Client – being the online store from which you purchased your goods.

Your California Privacy Rights

If you are a consumer as defined in the California Consumer Privacy Act (CCPA), the following provisions apply to you.

Under the CCPA, you may have the following specific rights:

  • The right to know about the personal information collected about you, which we have set out under “Information about your Personal Information”
  • The right to have your personal information deleted.
  • The right not to be discriminated against for exercising consumer rights under the CCPA.

You may exercise your rights by emailing our privacy offer at privacy [at] wismolabs.com.

While we disclose personal information to service providers for the purpose of fulfilling our contractual obligation to provide the Services, we do not sell your personal information.

Changes to this Privacy Policy

We may make changes to this privacy policy at any time to reflect updates to our Services, applicable laws, and other factors. We will include a prominent notice on this website and/or our Services if we make any material changes, but we encourage you to stay informed by reviewing this policy periodically.

How to contact us

If you have any questions, concerns or feedback, please email our Data Protection Officer at: privacy [at] wismolabs.com

Or send a letter to:
WISMO Inc.
2 King Street West, Ste #7/200
Hamilton, Ontario
L8P4S0 Canada

If we are unable to resolve your concerns, you also have the right to contact your local data protection authority.