Cookie and User Data Policy – WhizzC
Updated Date: March 31, 2026
Introduction
This Cookie and User Data Policy explains how Whizzc ("we", "us", or "our") collects, uses, stores, and protects information through its website, application, cookies and similar technologies.
WhizzC is a compliance management platform used by organizations and their authorized users. Depending on how you interact with WhizzC, we may collect information relating to website visitors, customers, users and other authorized individuals.
This policy explains:
What information we collect
How we use cookies and similar technologies
How user and customer information is handled
How information is retained and protected
How you can manage cookies and withdraw consent
How we handle children's data
How applicable privacy requirements are addressed
This policy should be read together with WhizzC's Privacy Policy, Data Processing Addendum (DPA), Terms and Conditions, and other applicable policies.
1. Scope
This policy applies to individuals who visit or use the WhizzC website or application, including:
Website visitors
Customers
Authorized users
Administrators
Auditors
Customer representatives
Other authorized users
It covers information collected through the WhizzC website, application, user accounts, website forms, cookies, and similar technologies.
Where WhizzC processes customer information on behalf of a customer, the applicable customer agreement and DPA will also apply.
2. Information We Collect
The information we collect depends on how you interact with WhizzC.
2.1 Website Visitor Information
When you visit our website, we may collect information such as:
IP address
Browser and device information
Operating system
Pages visited and website interactions
Date and time of access
Referring website or source, where applicable
Technical and performance information
nformation submitted through contact, enquiry, or demo forms
We use this information to operate and secure the website, understand website usage, identify technical issues, monitor performance, and improve our website and services.
2.2 User and Account Information
When you create or use a WhizzC account, we may collect:
Name
Business email address
Contact information
Organization or company information
Account details
User role and access permissions
Authentication and login information
Information provided during onboarding
This information is used to create and manage accounts, provide access, manage permissions, communicate with users, provide support, and maintain platform security.
2.3 Customer Information
Customers may enter, upload, or maintain information within the WhizzC platform, including:
Organization and authorized personnel information
Compliance and risk records
Audit and assessment information
Evidence and supporting documents
User and access information
Other information entered or uploaded by the customer
The information processed depends on how the customer uses the WhizzC platform.
Where WhizzC processes customer information on behalf of a customer, it does so in accordance with the applicable agreement and DPA.
2.4 Technical and Usage Information
WhizzC may automatically collect technical information when you access the website or application, such as:
IP address
Browser and device information
Login and session information
Application usage
Security and system activity
Error and performance information
This information helps us maintain security, troubleshoot issues, monitor performance, prevent misuse, and improve our services.
3. Cookies and Similar Technologies
Cookies are small text files stored on your device when you visit a website or use an application.
WhizzC may also use similar technologies such as local storage, session storage, authentication technologies, and application identifiers.
These technologies help us:
Maintain secure sessions
Support authentication
Protect our website and application
Understand website and application usage
Monitor performance
Improve functionality
Remember your cookie choices
Where cookie-related information is considered personal information, it will be handled in accordance with this policy and applicable privacy requirements.
4. How We Use Cookies
WhizzC uses cookies primarily for two purposes:
Necessary Cookies
Necessary cookies support the secure and proper functioning of the website and application, including authentication, session management, access control, and security.
Analytics Cookies
Analytics cookies help us understand how visitors and users interact with the website and application. This helps us monitor performance, identify issues, understand usage trends, and improve our services and user experience.
WhizzC does not use cookies for advertising purposes or knowingly use cookies to sell personal information or conduct cross-context behavioral advertising.
5. Cookie Categories
5.1 Necessary Cookies – Always Active
Necessary cookies are essential for the secure and proper functioning of WhizzC.
They may support:
Authentication
Session management
Access control
Security protection
Essential application functionality
Security against unauthorized activity
Maintaining cookie consent choices
These cookies may be used without separate consent where they are strictly necessary for the requested service, security, or functionality.
Cookie | Purpose | Duration |
|---|---|---|
| Maintains the active user session | Session |
| Supports secure authentication and access control | Session / Persistent |
| Helps protect against CSRF attacks | Session |
| Records the user's cookie choice | 12 months |
5.2 Analytics Cookies – Optional
Analytics cookies help WhizzC understand how visitors and users use the website and application.
They may provide information about:
Pages visited
Website interactions
Feature usage
Performance
Usage trends
Technical issues
Analytics information is used to improve the website, application, content, functionality, and user experience.
Analytics cookies are optional and will only be used after obtaining consent where required by applicable law.
Cookie | Purpose | Duration |
| Supports analytics and reporting | 24 months |
| Supports analytics and website interaction reporting | 24 hours |
Note: The cookie names and durations should be reviewed against the actual cookies deployed on the WhizzC website before this policy is published.
5.3 - Functional cookies - optional
Functional cookies help remember user preferences and settings to provide a more personalized and consistent experience when using the WhizzC website or application.
6. Third-Party Cookies and Services
WhizzC provides users with control over optional cookies.
Where consent is required, optional analytics cookies will not be used before consent is obtained.
You may:
Accept optional cookies
Reject optional cookies
Manage your cookie choices
Change or withdraw your consent at any time
Right to Withdraw Consent
You have the right to withdraw your consent at any time by contacting us at privacy@whizzc.com.
Withdrawal of consent will not affect the lawfulness of any processing carried out based on your consent before the withdrawal. Where consent is withdrawn, WhizzC will stop the relevant processing where required by applicable law and where no other lawful basis permits continued processing.
7. Cookie Retention
Cookies may be either session-based or persistent.
Session cookies generally expire when you end your session or close your browser.
Persistent cookies remain on your device for a defined period or until they expire or are deleted.
Cookie retention periods are determined based on the purpose of each cookie and are reviewed periodically.
Cookie retention is separate from the retention period applicable to user and customer information.
8. User and Customer Data Retention
WhizzC retains user and customer information for as long as necessary to provide services, maintain business and security records, meet contractual requirements, resolve disputes, and comply with applicable legal obligations.
WhizzC currently maintains applicable user and customer information for a retention period of 10 years.
This may include:
User account information
Customer-related information
Account and access records
Compliance and audit information
Service and security records
Other information maintained as part of the customer relationship
Where a specific legal, regulatory, contractual, or customer requirement requires a different retention period, that requirement may determine the applicable retention period.
When information is no longer required, WhizzC will securely delete, anonymize, or otherwise dispose of it where appropriate and technically feasible.
9. Third-Party Services
WhizzC may use trusted third-party providers for services such as:
Website and application hosting
Analytics
Security
Performance monitoring
Technical support
Other operational services
Where third parties process information on behalf of WhizzC, appropriate contractual, confidentiality, and security measures are maintained.
Third-party providers are expected to process information only for defined purposes and in accordance with applicable contractual and data protection requirements.
Third-party cookies and similar technologies are reviewed periodically.
10. Children's Data
The WhizzC website and application are designed primarily for businesses, organizations, and professional users.
WhizzC does not knowingly collect or intentionally process personal information belonging to children through its website, application, cookies, or similar technologies.
Our services are not directed toward children.
If we become aware that a child's information has been collected unintentionally, we will take reasonable steps to address the information in accordance with applicable law, which may include deletion where appropriate.
Parents or legal guardians who believe that a child's information has been provided to WhizzC may contact:
WhizzC will review the request and take appropriate action in accordance with applicable requirements.
11. Managing Cookies
Most browsers allow you to manage or delete cookies through their settings.
You may be able to:
Delete existing cookies
Block new cookies
Restrict certain types of cookies
Manage website-specific cookie settings
Disabling necessary cookies may affect the availability, security, or functionality of the WhizzC website or application.
Where available, users should use the WhizzC cookie settings mechanism to manage consent for optional cookies.
12. Privacy and Data Protection Rights
Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:
Access your personal information
Correct inaccurate information
Request deletion where applicable
Withdraw consent where processing is based on consent
Obtain information about how your information is processed
Exercise other applicable privacy or consumer rights
Privacy requests can be submitted to:
Where WhizzC processes customer information on behalf of an organization, certain requests may need to be directed to the relevant customer in accordance with the applicable agreement and DPA.
13. Privacy and Regulatory Compliance
WhizzC is committed to handling personal information in accordance with applicable privacy and data protection requirements.
GDPR
Where GDPR applies, WhizzC considers requirements relating to transparency, lawful processing, purpose limitation, data minimization, security, retention, and individual rights.
Where consent is required for non-essential cookies, WhizzC obtains consent before using such cookies and provides appropriate control over cookie choices.
Digital Personal Data Protection Act, 2023
Where the DPDPA applies, WhizzC handles personal data in accordance with applicable requirements relating to notice, lawful processing, consent where applicable, purpose limitation, security, retention, and applicable rights.
CCPA / CPRA
Where CCPA/CPRA applies, WhizzC supports applicable consumer rights relating to transparency, access, correction, deletion, and other applicable privacy rights.
WhizzC does not knowingly use cookies to sell or share personal information for cross-context behavioral advertising.
14. Data Security
WhizzC applies appropriate technical and organizational measures to protect personal, user, customer, and cookie-related information against unauthorized access, loss, misuse, alteration, or disclosure.
Depending on the nature of the information, security measures may include:
Access controls
Authentication
Encryption
Monitoring
Security testing
Vulnerability management
Other appropriate security controls
Access to information is limited to authorized personnel and service providers who require it for legitimate business or service-related purposes.
15. Cookie and Data Review
WhizzC periodically reviews its cookies, similar technologies, and data processing activities.
Reviews may consider:
Cookie name and purpose
Cookie category
Provider
Duration
Information collected
Whether consent is required
Third-party involvement
WhizzC also reviews its user and customer data practices to ensure that information collected and retained remains appropriate for its stated purposes.
16. Updates to This Policy
WhizzC may update this policy to reflect changes in technology, services, data processing activities, legal requirements, or business practices.
The latest version will be made available through the WhizzC website and/or application.
The Updated Date will be revised when material changes are made.
Where a change requires renewed consent, WhizzC will obtain the required consent through the applicable mechanism.
17. Contact Us
If you have questions, concerns, or requests regarding cookies, website information, user information, customer information, children's data, or privacy practices, please contact:
Email: privacy@whizzc.com
You may contact us regarding:
Information collected through the website or application
Cookies and similar technologies
Cookie consent or withdrawal
Data retention
Children's data
Privacy rights
Other privacy-related concerns
WhizzC will review and respond to privacy requests in accordance with applicable requirements.
For additional information, please refer to WhizzC's Privacy Policy, DPA, and Terms & Conditions.