Privacy Notice

1. Who we are

Wizarm is provided by Wilson Mendes, trading as arminghall, Old Stoke Road, Arminghall, Norwich, Norfolk, NR14 8SQ, United Kingdom. Arminghall Ltd is being set up to take over the service; when it is, we'll update this notice.

For anything about your data, email [email protected].

2. Our two roles

We are the controller for data about the people who use Wizarm and visit our websites: account details, sign-in activity, and messages you send us.

We are the processor for the call data that organisations bring into Wizarm from Webex Calling. This includes caller phone numbers and staff names and activity. The organisation that uses Wizarm is the controller and decides how that data is used. If you called a business that uses Wizarm and have a question about your data, please contact that business. We'll help them answer you. Our commitments as a processor are in section 7 of our Terms of Service.

3. What we collect

When you sign up and use your account

• Your name, work email and organisation name.
• Your password, stored only as a secure hash that can't be turned back into the password.
• If you choose Google sign-in: your Google account's name, email address and profile picture.
• Your role in the workspace, and the queues and features you've been given access to.
• Settings and things you create, such as wallboards, saved views and reports.

Automatically, to keep the service working and secure

• Your IP address and browser details when you sign in or use sign-up and password forms. We use these to stop abuse, such as too many attempts.
• Server logs of requests and errors.
• For TV screens paired to Wizarm: the screen's name, the type of device and browser, and when it was last online.

Call data, on behalf of the organisation (as processor)

• From Webex Calling, for the queues and people the organisation chooses to monitor: call records (times, durations, outcomes, the queue and agent involved, and the caller's or dialled phone number), agent names and live availability, and queue details.
• We don't record or store call audio or transcripts.

When you contact us

• Your email and what you tell us.

4. Why we use it, and our legal basis

We don't send marketing emails without your consent, we don't sell personal data, and we don't use it for advertising or to make automated decisions about you.

5. Who we share it with

We use a small number of trusted suppliers (sub-processors) to run Wizarm. Each one only gets what it needs, under a written agreement:

We'll also share data if the law requires it, or to protect people's rights and safety. If Wizarm is sold or transferred, for example to Arminghall Ltd, the data goes with it under the same protections, and we'll tell you.

6. Where it's stored

Your account and call data are stored on servers in the United Kingdom. Some suppliers above may handle limited data outside the UK. When they do, we rely on UK adequacy regulations (such as the UK–US Data Bridge) or the UK International Data Transfer Addendum to keep it protected.

7. How long we keep it

• Account and call data: while your organisation uses Wizarm. When an account closes, the organisation keeps read-only access for 90 days to export its data, then we delete it. Any copies in backups are removed within a further 30 days.
• Free trials that don't continue: deleted 30 days after the trial ends.
• Sign-ups that are never confirmed: deleted within a day of the link expiring.
• Sign-in and password links: they work once and expire within 24 hours (1 hour for password resets). Old ones are removed daily.
• Security records and server logs: kept only as long as we need them to protect the service, then deleted.
• Business and tax records: kept for as long as the law requires, usually six years.

8. How we protect it

Every connection to Wizarm is encrypted with HTTPS. Passwords are stored as one-way hashes. Webex connection tokens are encrypted before they're stored. Each person only sees the queues and features their workspace gives them. Changing a password signs you out everywhere. No system is perfectly secure; if a breach affects you, we'll tell you and the people we must, as the law requires.

9. Cookies

We only use cookies that Wizarm needs to work. We don't use advertising, tracking or analytics cookies, so we don't ask you to accept any.

• Sign-in session: keeps you signed in to app.wizarm.com.
• Sign-up check: proves the browser that signed up is the one confirming the email. It lasts 24 hours.
• Paired screen: lets a TV that's been paired keep showing its wallboard.
• Wizarm also remembers your light or dark theme in your browser's local storage.

10. Your rights

You can ask us for a copy of your personal data, or ask us to correct it or delete it. You can also ask us to limit how we use it, object to how we use it, or move it to another service. Email [email protected]. We'll reply within one month. For call data held for an organisation, we'll pass your request to that organisation and help them respond.

If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Changes to this notice

We'll update this notice when how we handle data changes. If a change matters, we'll tell account owners by email before it takes effect. The date at the top shows when it last changed.