Your data. Clearly explained.

1. Data controller and contact details

WAIRUA GROUP OF COMPANIES Ltd. Georgiou Karaiskaki 11–13, CARISA SALONICA COURT, Flat/Office 102 7560 Pervolia / Larnaca, Republic of Cyprus Email: welcome@wairua-group.com Telephone: +49 15679 826835

2. Website access and hosting

When you access the website, technically necessary connection data is transmitted to the hosting provider. This may include your IP address, the time of access, the requested file, browser information and the page previously visited. Processing serves to provide the website and maintain its stability and security, on the basis of Article 6(1)(f) GDPR.

The website serves fonts, images, social media previews and the introductory video locally. Without stored permission, the website code does not load analytics, marketing or tracking services and does not set cookies. The external map, appointment booking and Google Analytics load only after the respective service is allowed; a stored choice may be applied automatically on later visits. Details are given in sections 5 and 6. Technical processing and logging by the hosting provider are unaffected.

3. Enquiry form, email and telephone

Form data is sent over an encrypted HTTPS connection to our contact endpoint hosted by IONOS. This includes your name, email address, selected topic, message, acknowledgement of the privacy information and, if provided, company. The module validates these details and passes them by email to the fixed Wairua contact address welcome@wairua-group.com. Acceptance for forwarding does not confirm arrival in the inbox.

To prevent abusive requests, the module processes an HMAC value derived from the IP address using a secret server key, together with request times, in an access-protected rate-limit file. Message contents are not stored there; the module does not create a separate contact or customer database. Hosting and email services may process their usual technical connection data. If you explicitly choose WhatsApp, your prepared details are passed to WhatsApp; you send the message yourself from there.

When you contact us, we process the information you provide to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual matters, and otherwise Article 6(1)(f) GDPR for responding to enquiries. Information is deleted when its purpose no longer applies, unless statutory retention obligations require otherwise.

4. WhatsApp and the WhatsApp catalogue

WhatsApp opens only when you select a corresponding link or button. When you access and use WhatsApp, the provider processes data under its own privacy terms. WhatsApp Ireland Limited is responsible for the European region. Processing and transfers outside the European Economic Area may take place in accordance with the provider's terms.

Please do not use WhatsApp for confidential financial documents, identity document details or other particularly sensitive content. You can contact us by email or telephone instead.

5. External content: profiles, maps and appointment booking

Instagram and LinkedIn are offered through locally stored preview images, titles and summaries, with ordinary external links. No original social media posts are embedded and viewing these previews does not connect to the platforms. Only clicking a profile or “Open original” link opens the respective provider. Further use is governed by their privacy information: https://privacycenter.instagram.com/policy/ and https://www.linkedin.com/legal/privacy-policy.

The embedded Google Maps map loads only after you allow Google Maps in the central privacy settings. Stored permission may allow the map to load automatically on later visits. Without permission, no connection to the map service is established through this embed. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loading transmits, in particular, your IP address and technical device and browser data to Google, which may use cookies and process further data. The legal basis is your consent under Article 6(1)(a) GDPR. Further information: https://policies.google.com/privacy.

You can withdraw permission for Google Maps at any time through privacy settings in the footer. This removes the embedded map; it does not reverse any processing that has already taken place. Directions and the Google Business Profile are additional external links. Clicking them opens Google directly, where Google’s privacy policy applies.

Google appointment booking is embedded automatically on the contact page once you allow Google Calendar. Without permission, no connection to Google is established through this embed. Loading transmits, in particular, your IP address and technical device and browser data to Google, which may use cookies. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis for loading is your consent under Article 6(1)(a) GDPR. If you then make a booking, Google also processes the details you enter there under its privacy policy: https://policies.google.com/privacy.

Withdrawing calendar permission in privacy settings removes the embed. This does not reverse any processing that has already taken place. “Open booking page separately” is an external link to Google and remains an alternative to the embed. You can contact us by email, telephone or WhatsApp instead.

Your privacy choice, including its update and expiry times, is stored in this browser’s localStorage for up to 180 days. This local storage manages your decision and is not used for tracking. On later visits, the stored choice may allow optional services without asking again. You can change or withdraw individual permissions at any time through “Privacy settings” in the footer.

6. Statistics with Google Analytics

We use Google Analytics 4 to analyse page views and use of this website statistically. The service loads only after your separate consent to “Statistics · Google Analytics”. Without this permission, this analytics integration does not connect to Google; it sets no analytics cookies and sends no cookieless statistics signals. Earlier permission for other services does not count as consent to statistics.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Once allowed, Google receives information including connection and device data, pages visited and pseudonymous cookie identifiers. Processing may also take place outside the European Economic Area, particularly in the United States. The legal basis is your consent under Article 6(1)(a) GDPR. Further information: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

Statistics may store cookies, in particular _ga and _ga_P3E3YJRXSM, on our domain. Their lifetime is configured to a maximum of 180 days without automatic renewal on each page view. Permission for statistics does not grant permission for personalised advertising.

You can withdraw your statistics consent at any time through “Privacy settings” in the footer. This stops further collection by this integration and removes the associated analytics cookies accessible to the website. Withdrawal does not reverse processing that has already taken place. You can use the website without consenting to statistics.

7. FAQ assistant, self-assessment and intro

The FAQ assistant uses prepared information within your browser. Text you enter is not sent to an AI service or to Wairua. The chat history exists only during the current page view and can be reset.

The 20-statement self-reflection processes your choices only in the memory of the current browser view. Responses are not stored permanently in the browser or automatically sent to a server. The TXT download is generated locally. The email link prepares a short summary; you can attach the full downloaded report yourself. Information is shared only when you send the message. No user account is created.

Only if you allow the “Remember the intro in this tab” convenience feature does the browser remember that the brand intro has been watched or skipped in this tab’s sessionStorage (key wairua-intro-v1). The entry contains only the number 1, no personal identifier, and is not sent to a server. It lasts for the tab’s browser session. Without convenience permission, this intro status is not stored; withdrawing permission removes any existing entry. The website remains usable without this feature.

8. Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability, subject to the applicable conditions. Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future.

You may lodge a complaint with a competent data protection supervisory authority, in particular in your place of habitual residence, place of work or the location of the suspected infringement. For the company's registered office, the Commissioner for Personal Data Protection in Cyprus can be contacted at https://www.dataprotection.gov.cy/.

9. Changes

This notice will be updated if the website or the contact channels used change. For specific privacy enquiries, please email welcome@wairua-group.com.