1. Scope of this policy
This Privacy Policy explains how WPPBX (“we”, “our”, “us”) handles personal information collected through the WPPBX Partner Network, including this website at partners.wppbx.com.
It applies to individuals who browse our site, submit an application to become a partner, or contact a listed partner. Personal information processed on behalf of our customers (e.g. end-user call data in the WPPBX engine) is covered by the relevant customer contract and the Non-User Privacy Policy.
2. Personal information we collect
We collect the following categories of personal information:
- Application data — name, email, phone, company, country, city, website, message and any other fields you submit on the “Become a Partner” form;
- Contact-form data — name, email, phone (optional), company (optional) and message when you contact a listed partner;
- Technical data — IP address, user-agent, browser language and approximate geolocation derived from IP, logged for security and anti-abuse purposes;
- Anti-abuse signals — the result of any Cloudflare Turnstile challenge associated with your submission.
3. How we use personal information
We use personal information to:
- Review and respond to partner applications;
- Forward contact-form enquiries to the partner you have selected, and acknowledge the submission to you;
- Operate, secure and improve the site and detect abuse;
- Comply with legal obligations including record-keeping and lawful requests from authorities.
4. Legal basis for processing
Where the GDPR applies, we rely on the following legal bases:
- Contract — processing necessary to take steps at your request before entering a contract (e.g. evaluating a partner application);
- Legitimate interests — operating and securing the site, preventing abuse and fraud, and connecting prospective customers with partners;
- Consent — for any optional categories of data that require consent under local law;
- Legal obligation — where retention or disclosure is required by law.
Where POPIA (South Africa) applies, we rely on corresponding lawful processing grounds.
6. International transfers
Our hosting is located in the European Union (AWS Frankfurt, eu-central-1). If you access the site from outside the EU your information will be transferred to and processed there. Where required we put appropriate safeguards in place, such as the European Commission’s Standard Contractual Clauses for cross-border transfers.
7. Retention
We keep personal information only as long as necessary:
- Partner applications — for the life of the partner relationship, or 24 months if the application is declined;
- Contact-form submissions — for up to 24 months to support the partner in responding and for fraud/abuse investigation;
- Technical and anti-abuse logs — typically 90 days, longer where required for investigations.
8. Security
We take reasonable technical and organisational measures to protect personal information, including TLS in transit, encryption at rest where applicable, role-based access control, rate limiting, anti-bot controls and audit logging. No system is perfectly secure; please notify us if you suspect unauthorised use of your data.
9. Your rights
Subject to your local law you may have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate data;
- Request deletion (“right to be forgotten”) where applicable;
- Object to or restrict processing in certain cases;
- Receive a copy of your data in a portable format;
- Withdraw consent, without affecting the lawfulness of prior processing.
To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with your local supervisory authority — in South Africa, the Information Regulator; in the EU, the Data Protection Authority in your country.
10. Children
The site is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has submitted data to us, please contact [email protected] so we can remove it.
12. Contact us
Privacy questions, rights requests and complaints can be directed to [email protected].