Privacy Policy

1. Introduction

At Workimia, WorkWave Ltd. (“Workimia”, “we” or “the Company”) respects and protects the privacy of all individuals who interact with our digital platform, accessible at www.workimia.com, and of all Users, Professionals, collaborators, and third parties associated with our services.

This Privacy Policy describes how we collect, use, store, share, and protect your personal data in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the UK Data Protection Act 2018 (UK GDPR).

Use of our platform implies full acceptance of this Policy. If you do not agree with it, we ask that you do not use our services.

2. Data Controller

Workimia, WorkWave Ltd., registered in Ireland, with registered address:

Glencoe, Carnmore West, Oranmore, Co. Galway, Eircode: H91T2RF.
Company Registration Number: 774823

Data Protection Officer (DPO):
Marcela Oliva – Email: moliva@workimia.com

Contact Phone: +353 083 414 0815

3. Personal Data We Collect

We only collect the personal data necessary to fulfil the legitimate purposes of the Platform.

Data provided by Professionals:

• Name, surname, and email address
• Account registration information (password, country, language, titles, certifications, licences, criminal records)
• Professional profile (occupation, experience, services, photos, description)
• Billing and payment information (processed only by our payment providers)
• Data included in reviews, messages, or quotes

Data provided by Users:

• Name, surname, and email address
• Account registration information (password, country, language)
• Data included in reviews, messages, or expenses

Automatically generated data:

• IP address, device type, operating system, and browser
• Platform activity (searches, clicks, lead history, credit purchases)

Third-party data:
We may receive authentication or verification information through third parties (e.g., Google, Apple, or Stripe) when registering or making payments.

We don’t request or process special categories of personal data (e.g., health data, sexual orientation, religious beliefs), except where required by law or with explicit consent.

4. How We Collect Your Data

Personal data is collected through:

• Registration or subscription forms
• Voluntary upload of professional information on the Platform
• Interactions with the website, cookies, and analytics tools
• Email or chat communications
• AML/KYC verification processes when required by law

5. Purposes of Processing

We process personal data for the following legitimate purposes:

1. To manage your account and allow access to our digital services
2. To facilitate connection between Users and Professionals
3. To process payments and issue receipts
4. To comply with legal and regulatory obligations, including AML/CFT rules
5. To ensure the security and proper functioning of the Platform
6. To send operational and support communications
7. To provide relevant information and updates, always based on consent

6. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds under Article 6 of the GDPR:

• Account registration and management
  Performance of a contract (Art. 6(1)(b) GDPR)
• AML/KYC compliance
  Legal obligation (Art. 6(1)(c) GDPR)
• Support communications
  Legitimate interest (Art. 6(1)(f) GDPR)
• Sending information or promotions
  Consent (Art. 6(1)(a) GDPR)
• Security and fraud prevention
  Legitimate interest (Art. 6(1)(f) GDPR)

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined or as required by law. General retention periods are:

• Account data: while active and up to 5 years after closure
• Financial transaction data: 7 years (tax/AML requirement)
• Support and communication data: 2 years
• Analytical data: 13 months (anonymised)
• Inactive accounts: may be automatically deleted after 24 months

8. Data Sharing and Transfers

We may share your personal data with:

1. External service providers:
   e.g., payment processors, hosting providers, KYC verification, IT security
2. Competent authorities:
   To comply with legal, regulatory, or judicial requirements (FIU, DPC, ICO, NCA, CBI, FCA)
3. Workimia affiliates or partners:
   Only when necessary to provide the contracted service

International transfers:
When your data is transferred outside the European Economic Area (EEA) or the UK, Workimia ensures the use of:

• Standard Contractual Clauses (SCCs) approved by the European Commission or ICO
• Adequacy mechanisms recognised by the European Commission or UK government

9. Data Subject Rights

Under GDPR and UK GDPR, you have the following rights:

1. Access: know what data we process and obtain a copy
2. Rectification: request correction of inaccurate data
3. Erasure (“Right to be Forgotten”): delete your data when no longer necessary
4. Restriction of processing
5. Data portability: receive data in structured format
6. Objection: opt-out of processing based on legitimate interest or direct marketing
7. Withdraw consent at any time

You may exercise these rights by contacting: support@workimia.com

If you believe your rights have not been respected, you may lodge a complaint with:

• Data Protection Commission (DPC – Ireland): www.dataprotection.ie
• Information Commissioner’s Office (ICO – UK): www.ico.org.uk

10. Information Security

Workimia implements appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, alteration, or destruction, including:

• SSL/TLS encryption
• Role-Based Access Control (RBAC)
• Encrypted backups
• Internal audits and periodic DPIAs

11. Cookies and Similar Technologies

We use only third-party cookies to enhance user experience, analyse traffic, and personalise content.
You can configure or reject cookies through the Cookie Settings Panel on the website.
More information is available in our Cookie Policy.

12. Third-Party Links

Our Platform may include links to third-party websites or services.
We are not responsible for the privacy practices of such sites, and we recommend reviewing their own policies.

13. Minors

Our services are not directed at individuals under 18 years old.
If we detect the unintentional collection of data from minors, it will be deleted immediately.

14. Policy Updates

We may update this Policy to reflect regulatory or technological changes.
The latest version will always be available at www.workimia.com/privacy.
We will notify users by email or prominent notice on the Platform in case of substantial changes.

15. Contact

For questions or concerns about this Policy or the processing of your personal data, you may contact:

Email: support@workimia.com
Phone: +353 083 414 0815

Company: WorkWave Ltd.
Company Registration Number: 774823
Registered Address: Glencoe, Carnmore West, Oranmore, Co. Galway, Eircode: H91T2RF