Last updated: August 1, 2025
1. Introduction
Walkmaze, Inc. (“Walkmaze,” “we,” “us,” or “our”) operates walkmaze.com (the “Site”) and provides a cloud-based workflow and form platform (the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our Site or use the Service.
If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we process your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
2.1 Information You Provide
Account Information: Name, email address, company name, billing address, and payment details.
User Content: Data and files submitted through the Service (e.g., form responses, uploaded documents).
Technical Data: IP address, browser type/version, device identifiers, and operating system.
Usage Data: Pages visited, features used, timestamps, and error logs.
Cookies & Similar Technologies: Unique identifiers used to recognize your browser or device.
3. Legal Basis for Processing (GDPR)
If you are in the EEA, UK, or Switzerland, we process your personal data only when we have a valid legal basis, such as:
Performance of a Contract: To provide the requested Service.
Consent: For specific purposes such as marketing or analytics.
Legal Obligation: To comply with applicable laws.
Legitimate Interests: For service improvement, fraud prevention, and security—provided such interests are not overridden by your rights.
4. How We Use Your Information
We use your information to:
Provide, operate, and maintain the Site and Service;
Process payments and manage subscriptions;
Communicate with you (e.g., service updates, security alerts);
Personalize your experience and deliver tailored content;
Analyze usage and trends to improve functionality and performance;
Enforce our Terms of Service and comply with legal obligations.
5.1 Information You Provide
We may share your data with third-party service providers (e.g., payment processors, hosting services, analytics tools) who process data on our behalf. These providers are bound by data protection agreements, including Article 28 GDPR requirements.
5.2 Legal Requirements
We may disclose personal information as required by law, legal proceedings, court orders, or regulatory authorities, or to protect our rights, property, or safety.
5.3 Business Transfers
In the event of a merger, acquisition, asset sale, or financing, your data may be transferred. We will provide notice before any material change in data ownership or privacy practices.
5.4 With Your Consent
Any additional sharing of your information will be done only with your explicit consent.
6. International Transfers (GDPR Articles 44–49)
When transferring your personal data outside the EEA, UK, or Switzerland (e.g., to the U.S.), we ensure adequate protection via:
Transfers to countries with an adequacy decision from the European Commission;
Use of Standard Contractual Clauses (SCCs) or other approved mechanisms;
Your explicit consent, where legally required.
7. Data Security
We implement appropriate administrative, technical, and physical safeguards to protect your personal data from unauthorized access, use, or disclosure. These include:
Encryption in transit (TLS);
Access control measures;
Regular vulnerability assessments;
SOC 2–compliant operational procedures.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including to:
Provide and support our Service;
Comply with legal obligations;
Resolve disputes;
Enforce agreements.
9. Cookies & Tracking Technologies
We use cookies and similar technologies (e.g., web beacons) to recognize returning users, enhance user experience, and analyze performance.
If you are located in the EEA/UK, we will obtain your consent before setting non-essential cookies. You can manage preferences via our cookie banner or browser settings.
10. Third-Party Links and Services
Our Site or Service may contain links to third-party websites or integrations (e.g., payment processors, analytics platforms). These third parties operate independently and have their own privacy policies. We are not responsible for their data practices.
11. Children’s Privacy
Our Service is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child under 16 has submitted information to us, please contact us to request its deletion.
12. Your Privacy Rights
For EEA/UK Residents (GDPR)
You have the following rights, subject to certain conditions:
Right of Access - Request access to your personal data.
Right to Rectification - Request correction of inaccurate or incomplete data.
Right to Erasure - Request deletion of your data (“right to be forgotten”).
Right to Restrict Processing - Request limited processing of your data.
Right to Data Portability - Receive your data in a structured, machine-readable format.
Right to Object - Object to processing based on legitimate interests or direct marketing.
Rights Related to Automated Decision-Making - Object to decisions based solely on automated processing.
Right to Withdraw Consent - Withdraw your consent at any time.
Right to Lodge a Complaint - Contact your local data protection authority or the UK Information Commissioner’s Office (ICO).
You may have the following rights under applicable U.S. state privacy laws:
Right to Know/Access - Request details about how we collect and use your personal data..
Right to Delete - Request deletion of personal data, with some legal exceptions.
Right to Opt-Out - Opt-out of the sale or sharing of personal data.
Right to Non-Discrimination - Not be discriminated against for exercising your privacy rights.
Right to Correct - Request correction of inaccurate personal data.
We apply the same general privacy principles globally. Please contact us for region-specific rights.
To exercise any of these rights, email us at: privacy@walkmaze.com. We may verify your identity before processing your request.
Walkmaze complies with applicable U.S. privacy laws and frameworks, including:
California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
Health Insurance Portability and Accountability Act (HIPAA), where applicable
Children’s Online Privacy Protection Act (COPPA)
Fair Information Practice Principles (FIPPs)
We may update this Privacy Policy periodically. If we make material changes, we will notify you by posting the revised version at [URL] and updating the “Last updated” date above.
Luis Gomez
Data Protection Officer / EU Representative Paseo Marqués de Corvera, 3, Murcia, Región de Murcia 30002, Spain
Email: luis@walkmaze.com
Jessie Stephens
3rd Floor, Chancery House, St. Nicholas Way Sutton, Surrey SM1 1JB, United Kingdom
Email: jessie@walkmaze.com
16. How to Contact Us
To exercise your privacy rights or for any questions about this Privacy Policy, please contact:
Email: privacy@walkmaze.com
We may require identity verification to process your request and will respond within the timelines required by applicable law.
