Wado Innovations
WADOInnovations

Privacy policy

Last updated: 25 April 2026

This Privacy Policy describes how Wado Composite ("we", "us") processes personal data when you use the website https://wado-innovations.com(the "Site"). It is written to support transparency under the UK GDPR, the EU GDPR, and the French Data Protection Act (as applicable to visitors and contacts).

1. Data controller

The controller of personal data collected via the Site is:
Wado Composite
1 RUE DE CHAMPELOMOT, 44420 Piriac-sur-Mer
Email: contact@wado-innovations.com
Phone: +33 6 35 59 18 87

We do not currently appoint a Data Protection Officer (DPO). If you are in the EU/UK and your request concerns GDPR rights, contact us at the email above. If we become required to appoint a DPO, we will publish the contact details here.

2. Scope

This policy covers data processed through the Site (browsing, cookies, contact form, embedded media). It does not govern data you may share with us offline under separate contracts (e.g. manufacturing NDA) unless those processes are linked to the Site.

3. Categories of personal data we process

3.1 Browsing and technical data

When you access the Site, our hosting provider and infrastructure may process technical data such as IP address, user agent, requested URL, HTTP referrer, timestamps, and diagnostic logs. This is needed to deliver the Site securely and to troubleshoot issues.

3.2 Cookies, analytics, and local storage

We use cookies and similar technologies as described in our Cookie policy, including Google Analytics 4 (measurement ID G-MRL7K5E935) and local storage for your cookie banner preference.

3.3 Contact form

If you use the contact form, we collect the information you submit: typically name, email address, and message content. We use this solely to respond to your enquiry and manage any follow-up related to your request.

3.4 Media loaded from Cloudflare R2

The Site serves large media files (including the hero video and certain 3D demonstration assets) from Cloudflare R2 object storage. Your browser retrieves those files directly from Cloudflare endpoints. That interaction may generate connection metadata processed by Cloudflare under its own policies. We do not use R2 to build behavioural profiles about you from those downloads alone.

4. Purposes and legal bases (GDPR Article 6)

  • Operating and securing the Site — legitimate interests (Article 6(1)(f)) in running a secure website and preventing abuse; in some cases necessary for a potential contract (Article 6(1)(b)) if you request a quote.
  • Responding to contact messages — predominantly Article 6(1)(b) (steps at your request prior to contract) and/or Article 6(1)(f) (responding to business enquiries), depending on the nature of your message.
  • Analytics (GA4) — depending on configuration and applicable law, this may be based on consent (Article 6(1)(a)) and/or legitimate interests (Article 6(1)(f)) in measuring aggregate Site performance. Align your cookie banner and Consent Mode settings with your legal position.
  • Legal obligations — Article 6(1)(c) where we must retain or disclose information for tax, accounting, or lawful requests from authorities.

5. Recipients and subprocessors

We rely on service providers who process personal data on our behalf under Article 28 GDPR-style terms where applicable:

  • Vercel Inc. (United States) — website hosting, serverless functions, build and runtime logs. Privacy policy
  • Cloudflare, Inc. (United States) — R2 object storage and delivery for media assets. Privacy policy
  • Google Ireland Limited / Google LLC — Google Analytics 4. Privacy policy
  • Scaleway (Transactional Email)— when the contact form is configured, messages are relayed through Scaleway's email API (region configurable, e.g. France). Data processed includes sender name, email, subject, and message body as needed to deliver email to us. See Scaleway's Privacy Policy.

6. International transfers

Some providers are located in the United States or otherwise outside the European Economic Area (EEA) / UK. Where personal data is transferred to such countries, we rely on appropriate safeguards recognised under GDPR/UK GDPR (such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum), in addition to provider-specific measures described in their documentation.

7. Retention

  • Contact enquiries: retained for as long as needed to handle your request and any related business relationship, then deleted or archived according to our legitimate interests and legal obligations (e.g. commercial correspondence).
  • Server / security logs: typically retained for a limited period by Vercel (see their documentation); we do not use these logs for marketing.
  • Analytics: retention in GA4 is configured in our Google Analytics property settings (e.g. event retention); you can also clear cookies in your browser at any time.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration, including HTTPS transport, access control to hosting accounts, and secure handling of API keys (not exposed in client-side code).

9. Your rights

Subject to applicable law, you may have the right to: access, rectify, or erase your personal data; restrict or object to certain processing; data portability; and, where processing is based on consent, to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email contact@wado-innovations.com. We may need to verify your identity before responding. You also have the right to lodge a complaint with a supervisory authority — in France, the CNIL; in the UK, the ICO.

10. Children

The Site is intended for business and professional audiences. We do not knowingly collect personal data from children under 16 (or the age required in your jurisdiction). If you believe we have collected such data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or legal requirements. Material changes will be indicated by updating the "Last updated" date on this page.

12. Related documents

This Privacy Policy is provided for transparency. It does not constitute legal advice; have it reviewed by qualified counsel for your entity and processing activities.