Who is responsible
Wibe Labs is a trading name. The person responsible for the details you submit here, and the one to contact about them, is:
Your full name and a working email address. Since there is no company yet, you are the controller personally, and a name has to appear for the notice to mean anything. A postal address is not required if the email is a real, monitored route.
What this does not cover
Calls the assistant answers on a clinic's phone line are a different matter entirely. There the clinic decides what happens to patient data and Wibe Labs acts on its instructions, under a separate agreement signed with that clinic. Patients should read their own clinic's privacy notice, not this one.
What we collect and why
| Name, clinic, work email | To prepare the audit and reply to you. Basis: steps taken at your request before a contract, GDPR Art. 6(1)(b). |
|---|---|
| Phone number | Optional. Only used for the callback, and only if you tick the box. Basis: your consent, Art. 6(1)(a). |
| The consent tick itself | Stored with your request as the record that permission was given. |
No advertising, no profiling, no selling or renting your details to anyone.
Will the email later be used for anything other than replying to this request, such as occasional updates? If yes, that is a separate purpose and needs a line here plus a way to unsubscribe. If no, say so and this stays as it is.
The automated callback
Leave a phone number and tick the box, and an AI assistant calls you back. It says it is an AI at the start of the call, you can ask for a person at any point, and you can hang up. Leave the field empty and everything happens over email instead; the box is then not required.
You can withdraw consent at any time by replying to any of our messages. Withdrawing does not undo anything done beforehand.
Is that callback recorded or transcribed and kept? If yes, one sentence here saying so and for how long, and the caller has to be told at the start of the call. If it is not kept, say that instead: it is a good answer.
How long we keep it
Two numbers. How long an enquiry that does not become a customer is kept before deletion, and how long the record of consent to the automated call is kept. "As long as necessary" does not satisfy Art. 13(2)(a); pick periods you can actually hold to.
Who else can see it
This website is hosted by Netlify, which also stores the form submissions. Netlify is based in the United States, so your details are held outside the EU under its standard data protection terms. Email correspondence sits with our email provider.
Both act on our instructions and may not use your details for their own purposes. Nobody else receives them.
Name the email provider, and confirm whether enquiries are copied anywhere else in practice, such as a spreadsheet or a CRM. Also confirm the country you are established in, because it decides which authority a complaint goes to.
Your rights
You can ask for a copy of what we hold about you, have it corrected, or have it deleted. You can ask us to stop using it, or to send it to you in a portable form. Where we rely on your consent, you can take it back at any time.
Write to the address above and we will answer within one month, which is the limit the GDPR sets.
If you are not satisfied with the answer, you can complain to a data protection authority in the country where you live or work.
Changes
If this notice changes, the new version appears here with a new date. Anything that materially affects how your details are used, we will tell you directly.