Privacy policy

1. Who we are

WonderIT ("WonderIT", "we", "us" or "our") is a software studio that designs and builds web platforms, mobile apps, SaaS products and AI automation. We are the controller of the personal data described in this policy.

2. Information we collect

We collect only what we need to respond to you and to deliver our services.

Information you give us

• Contact form: your name, email address, phone number and the message you send.
• Email, calls and meetings: the details you share when you write to us, call us, or book a call with us.
• Business details: your company name, role and project information when we discuss or deliver work together.

Information collected automatically

• Technical data: IP address, browser type, device type and operating system.
• Usage data: pages you visit and how you move through the site.
• Cookie data: your cookie consent choices and any cookies you allow. See Cookies.

3. How we use your information

• To reply to your enquiries and schedule calls.
• To prepare proposals and deliver the services you engage us for.
• To run, secure and improve our website.
• To meet our legal, accounting and tax obligations.
• To protect our rights and prevent fraud or misuse.

We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

4. Legal bases for processing

We process personal data under the Law on Personal Data Protection of North Macedonia and, where it applies, the EU General Data Protection Regulation (GDPR). We rely on:

• Contract: when processing is needed to prepare or perform a contract with you.
• Legitimate interests: to answer enquiries, run our business and keep our website secure.
• Consent: for non-essential cookies. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or disclose information.

5. Cookies

We use cookies and similar technologies to make the website work and, with your consent, to understand how it is used. When you first visit, our cookie banner lets you accept, reject or customise non-essential cookies. You can change your choice at any time from the cookie settings on the site.

Details of the cookies we use are in our Cookie policy.

6. Third-party services

Some features of our website are provided by third parties, who may receive technical data such as your IP address when the feature loads:

• Web hosting provider: stores and serves our website.
• Google Maps: displays our office location.
• Google Fonts: loads the typefaces used on the site.
• Calendly: if you book a call with us, Calendly processes the booking details you enter.
• LinkedIn, Instagram and Facebook: only when you follow a link to our profiles.

Each of these providers handles data under its own privacy policy.

7. Sharing your information

We share personal data only when necessary:

• With service providers who act on our behalf, under contracts that require them to protect your data.
• With professional advisers such as accountants and lawyers.
• With authorities, when the law requires it.
• As part of a merger, acquisition or sale of our business, subject to this policy.

8. International transfers

Some of our service providers may process data outside North Macedonia or the European Economic Area. When that happens, we use appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision, to protect your information.

9. How long we keep data

• Enquiries: up to 24 months after our last contact, unless we start working together.
• Client and contract records: for the duration of the engagement and as long as accounting and tax law requires afterwards.
• Cookie data: for the periods listed in our Cookie policy.

When data is no longer needed, we delete or anonymise it.

10. Security

We protect personal data with technical and organisational measures, including encrypted connections (HTTPS), access controls, and keeping our systems up to date. No method of transmission or storage is completely secure, but we work to protect your information and to respond quickly if something goes wrong.

11. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Ask us to delete your data.
• Restrict or object to our processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting earlier processing.

To use any of these rights, email contact@wonderit.io. We will reply within 30 days. You can also complain to the Personal Data Protection Agency of North Macedonia, or to the data protection authority in your own country.

12. Client project data

When we build or operate software for a client, we may process personal data on that client's behalf, for example data about their users. In those cases the client is the controller, and we process the data only on their documented instructions under our agreement with them. Questions about that data should go to the client first.

13. Children

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as our services or the law change. We will post the new version on this page and update the "Last updated" date at the top.

15. Contact us

If you have questions about this policy or how we handle your data, get in touch: