Legal
Privacy Policy
This policy explains what personal data TheWorthDesk ("we", "us") collects through this website, why, and what rights you have. We process personal data in line with the Seychelles Data Protection Act 2023 and, where it applies to visitors from the European Union or United Kingdom, the GDPR.
Who we are
TheWorthDesk, Victoria, Mahé, Seychelles · jc.seymarketing@gmail.com · WhatsApp messages: +248 2 576 781. For any privacy question or request, write to the email address above.
What we collect
When you contact us
If you use the contact form, email or WhatsApp, we receive the details you choose to give: your name, email address, WhatsApp number, business name, the service you are interested in and your message.
When you browse
Our hosting provider keeps standard server logs (IP address, browser type, pages requested, date and time) for security and to keep the site running. If you accept analytics cookies, we also collect anonymous statistics about how pages are used. See the Cookie Policy.
Why we use it
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and preparing a quotation | Your consent, and steps taken at your request before a contract |
| Delivering a project you have ordered, invoicing and support | Performance of our contract with you |
| Keeping the website secure and working | Our legitimate interest |
| Visit statistics (only if you accept analytics cookies) | Your consent |
| Keeping accounting records | Legal obligation |
We do not sell your data, and we do not use it for unrelated marketing without asking you first.
Who we share it with
Only with service providers that help us run the studio, under appropriate confidentiality terms: our web host (Hostinger), our email provider (Google), WhatsApp (Meta) when you message us there, and, if you accept analytics, Google Analytics. Some of these providers store data outside Seychelles; where they do, we rely on their contractual safeguards.
How long we keep it
- Enquiries that do not become a project: up to 12 months, then deleted.
- Client project and billing records: as long as the law requires for accounting, normally 7 years.
- Server logs: kept by our host for a short period, normally no more than 90 days.
Your rights
You can ask to access, correct or delete your personal data, to object to or restrict how we use it, to receive a copy in a portable format, and to withdraw consent at any time (this does not affect anything done before you withdrew it). Write to us at the email above and we will reply within 30 days. If you are not satisfied, you may complain to the Information Commission of Seychelles, or to your local data protection authority.
Security
The site runs over HTTPS. Access to enquiries is limited to the studio, and we use strong passwords and two-step verification on our accounts.
Children
This website is for businesses and is not directed at children under 18.
Changes
We may update this policy. The date at the top shows the latest version.