How we approach data protection and security, including where EU GDPR, UK GDPR, and other laws apply.
Where the EU General Data Protection Regulation applies, we design our processing to support compliance and to help you exercise applicable privacy rights.
WHIKS Ltd is incorporated in England and Wales. Where the UK GDPR and the Data Protection Act 2018 apply, we process personal data in line with those requirements. You may lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your rights have been infringed.
Where the California Consumer Privacy Act and CPRA apply, we provide mechanisms to exercise applicable consumer rights as described in our Privacy Policy.
We maintain a roadmap toward SOC 2 Type II attestation to demonstrate our commitment to security, availability, confidentiality, and integrity.
Timeline depends on scope and auditor engagement; we will update this page as our assurance programme progresses.
Protection against unauthorized access
System availability and performance
Protection of confidential information
Data accuracy and completeness
We follow widely recognised security practices and implement layered controls designed to protect customer data.
We use strong encryption for data in transit (TLS) and protect stored data with industry-standard encryption and key management practices.
Role-based access controls and multi-factor authentication for administrative access
Continuous monitoring of our systems for security threats and vulnerabilities
Regular automated backups with secure offsite storage and disaster recovery procedures
We are progressing toward independent assurance (such as SOC 2 Type II) and continue to evaluate ISO 27001 alignment as our security programme matures.
We aim to align our practices with applicable data protection laws in the Middle East where our services are used:
Where relevant, we take into account the UAE Personal Data Protection Law (Federal Law No. 45 of 2021), which governs the processing of personal data in the United Arab Emirates.
UAE residents have rights including access, correction, deletion, and objection to processing of their personal data.
For UAE-specific data protection inquiries, contact us at privacy@whiks.com
Where relevant, we take into account the Saudi Arabia Personal Data Protection Law (Royal Decree No. M/19 of 2022), which regulates personal data processing in the Kingdom of Saudi Arabia.
Saudi residents have rights including access, correction, deletion, and restriction of processing of their personal data.
For Saudi-specific data protection inquiries, contact us at privacy@whiks.com
We monitor developments in regional data protection law and adapt our practices as regulations evolve.
Our services are localized for Arabic-speaking users with proper RTL support and cultural considerations.
For compliance-related inquiries or to exercise your rights:
Email: compliance@whiks.com
Address:
WHIKS Ltd
128 City Road
לונדון, EC1V 2NX
הממלכה המאוחדת
רשומה באנגליה ובוויילס · מספר חברה 17189817
טל: +44 7988580234