This policy explains what Wave Group does with personal information collected through its websites: wavegroup.ai, advisory.wavegroup.ai, tech.wavegroup.ai. It covers all three, because they are run by the same company on the same infrastructure.
It is written to be read. Where a section could be said in one sentence, it is one sentence.
01Who is responsible
Wave Group, of Masdar City, Abu Dhabi, United Arab Emirates, licence No. MC 14223, is responsible for the information described here. The group works from Abu Dhabi, United Arab Emirates and Skopje, North Macedonia.
For anything in this policy, including a request to see, correct or delete your information, write to office@wavegroup.ai. Enquiries are read by the team rather than a call centre, so a reply comes from somebody who can act on it.
02What we collect
There are two kinds, and they are very different in scale.
Information you send us. If you complete an enquiry form or email us, we receive what you chose to put in it. The forms ask for a name, an email address, an organisation, an optional website, and a description of what you are working on. Nothing on these sites asks for payment details, identity documents or any special category of personal data, and none should ever be sent through them.
Information the servers record. Like any website, the hosting receives a request log: an IP address, the page asked for, a timestamp, and the browser's own user-agent string. This is a by-product of serving a page rather than something we set out to gather, and it is not used to build a profile of you.
03What we do not collect
These sites carry no analytics, no advertising tags, no social media pixels and no third-party tracking of any kind. There is no cookie banner because there is nothing to consent to. See the cookie policy for the whole of it.
04Why we use it
An enquiry is used to answer the enquiry: to understand what you are asking for, to reply, and to carry on the conversation if it becomes one. If it becomes an engagement, the same details are used to run it.
Server logs are used to keep the sites available and secure, and to investigate a fault or abuse when there is one.
We do not sell personal information, and we do not send marketing to people who have not asked for it. If we ever start a mailing list it will be one you have to join.
05Our lawful basis
Where data protection law requires a basis for using personal information, ours is one of the following:
- Your request. Answering an enquiry you sent is what you asked us to do, and is a step towards a contract where one follows.
- Our legitimate interests. Running secure websites, keeping a record of who we have spoken to, and defending a legal claim are ordinary interests of any business, weighed against your rights.
- A legal obligation, where one applies to us.
06Who else sees it
A short list, and it does not grow quietly:
- Amazon Web Services, which hosts the three sites and delivers the enquiry emails through Amazon SES.
- Our own email provider, because an enquiry arrives as an email and stays in the mailbox it arrived in.
- Professional advisers, or an authority, where we are required to disclose something by law.
Each of these is a processor acting on our instructions, not a party we share information with for its own purposes.
07Where it goes
The group works from Abu Dhabi, United Arab Emirates and Skopje, North Macedonia, and its hosting runs in Amazon Web Services regions outside both. Personal information is therefore transferred internationally, and is protected in transit and at rest by the provider's own safeguards and by the contractual terms we hold with it.
08How long we keep it
An enquiry that goes nowhere is kept while it is still plausibly live and then deleted. Correspondence connected to an engagement is kept for as long as the engagement runs, and after it for as long as we may need it for a legal or accounting reason. Server logs are kept for a short operational period and then rotate out.
Nothing is kept because it might be useful one day. If you ask us to delete something and no obligation requires us to keep it, we delete it.
09Your rights
Subject to the law that applies to you, you can ask us to:
- Tell you what personal information we hold about you, and give you a copy.
- Correct it, if it is wrong.
- Delete it.
- Stop or limit a particular use of it.
- Provide it in a portable form, where that right applies.
- Object to a use we have based on our legitimate interests.
Write to office@wavegroup.ai. We do not charge for this, and we will answer within the period the applicable law allows. If you are not satisfied with the answer, you may complain to the data protection authority in your country.
10Children
These sites are addressed to organisations and the people who work in them. They are not directed at children, and we do not knowingly collect information from them.
11Links out
The sites link to other organisations, including LinkedIn and the sites of clients and partners. Those are not ours, this policy does not reach them, and what they do with your information is set out in their own.
12Changes
This policy is dated, and the date at the head of the page is the one that counts. If it changes in a way that materially affects you, we will say so here rather than restamping it quietly.