Privacy,clearly stated.
How WipeProof handles data across our website, platform and services.
Last updated: 24 August 2026
01Who we are
This Privacy Policy explains how WipeProof ("we", "us", "our") collects, uses and protects personal information when people visit our website, interact with us or use our services.
WipeProof is a product and service operated by Data Scale Business Group LLC, a Wyoming limited liability company. For the purposes described in this Privacy Policy, WipeProof is operated by Data Scale Business Group LLC, and the controller for personal data collected through this website is Data Scale Business Group LLC.
02Information we collect
We collect information that is necessary to operate, support, improve and protect WipeProof.
Website data
Information generated when you visit our website.
- Device and browser information
- IP address and approximate location derived from it
- Pages viewed and interactions
- Analytics identifiers, only if you accept analytics
Account & contact data
Information you provide when you contact us.
- Name and work email address
- Company and country
- Expected monthly device volume
- The content of your message and our correspondence
Service & evidence data
Operational data generated when using WipeProof.
- Asset, media and job identifiers
- Erasure outcome, method and report reference
- Evidence record status
- Certificate metadata and timestamps
WipeProof is not designed to require special-category personal data as part of its standard evidence workflow. Customers should avoid submitting unnecessary personal information.
03How we use information
We use information to:
OPERATE THE SERVICE
Provide, operate and maintain WipeProof.
PROCESS EVIDENCE WORKFLOWS
Process operational records, source evidence and certificate workflows.
COMMUNICATE
Respond to enquiries and communicate about the service.
IMPROVE
Understand use of the service and improve reliability and usability, where analytics are used.
PROTECT
Detect, investigate and respond to misuse, faults and security incidents.
WipeProof is built primarily for business and ITAD operations rather than consumer use.
04Legal bases
Where the GDPR or similar data-protection law applies, our processing of personal data relies on an appropriate legal basis depending on the context. Not every basis applies to every processing activity.
| Contract | Where processing is necessary to provide requested services or manage a customer relationship. |
|---|---|
| Legitimate interests | Where necessary for proportionate business purposes such as operating, securing and improving the service. |
| Legal obligation | Where processing is required to comply with applicable law or lawful requests. |
| Consent | Where consent is required, for example for optional analytics or certain communications. |
05Service & evidence data
WipeProof records operational identity around jobs, assets and media. Source erasure evidence can be received from a third-party erasure engine, which performs the sanitisation and produces the original result.
WipeProof connects that evidence to the relevant media, asset and job, and certificate and evidence metadata can then be generated from the matched record. WipeProof is not the certified erasure engine; the engine and WipeProof remain distinct.
Operational data is not automatically personal data. It may contain personal information where information supplied by a customer can identify an individual. Customers remain responsible for the data they submit to WipeProof.
For personal data collected through this website and through direct enquiries, Data Scale Business Group LLC acts as the controller.
06Subprocessors and service providers
We use a small number of third-party providers where they are necessary to operate the service. Providers currently used for this website are:
| Website hosting | Application hosting and delivery, deployed to a Frankfurt region. |
|---|---|
| Email delivery | Transactional delivery of enquiry and sample-certificate emails. |
| Product analytics | Optional analytics on an EU-hosted endpoint, used only after opt-in. |
| Error monitoring | Server-side error reporting, configured not to send personal data by default. |
A consolidated subprocessor list will be published as the service moves into wider deployment.
07International transfers
Where personal data is transferred across borders, we use applicable legal mechanisms and safeguards where required by data-protection law.
This website is deployed to a Frankfurt hosting region and our analytics endpoint is EU-hosted. Data Scale Business Group LLC is established in the United States, and we do not claim that every provider processes data exclusively within the European Economic Area.
08Retention
We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining required business records, resolving disputes and complying with applicable legal or contractual obligations.
Operational evidence records may be retained for longer where a customer agreement or an evidence-record requirement applies. Enquiries submitted through this website are delivered to us by email and are not stored in a WipeProof database.
09Security
We use technical and organisational measures designed to protect information against unauthorised access, alteration, disclosure or loss.
In practice this includes limiting what the website collects, keeping API credentials server-side only, not initialising browser error reporting, and configuring error monitoring not to send personal data by default.
10Your rights
Depending on applicable law and the circumstances, you may have the right to:
- Access the personal data we hold about you
- Have inaccurate personal data corrected
- Request deletion of personal data
- Request restriction of processing
- Object to processing based on legitimate interests
- Receive your personal data in a portable format
- Withdraw consent where processing relies on it
- Lodge a complaint with a competent supervisory authority
These rights depend on applicable law and the circumstances of the processing. To make a request, use the contact details in section 13.
12Changes to this policy
We may update this Privacy Policy as WipeProof, our services or applicable requirements evolve. When we make material changes, we will update the effective date and provide additional notice where appropriate.
13Contact
For privacy questions or to make a request about your personal data, contact Data Scale Business Group LLC using the email address below.
Please include enough detail for us to identify the information your request concerns.