Privacy policy

PRIVACY POLICY - WASAL LLC

Effective Date: June 24, 2026

Governing Jurisdiction: McLean, Virginia, United States

Document Version: 1.0  |  Last Updated: June 24, 2026

SECTION 1: INTRODUCTION

Wasal LLC ("Wasal," "we," "us," or "our") is a B2B product sourcing and vendor-enablement platform incorporated and headquartered in McLean, Virginia, United States. This Privacy Policy explains how we collect, use, disclose, and protect personal data from vendors, buyers, and website visitors who interact with our platform at wasal.us and related services (collectively, the "Platform").

Wasal LLC acts as a data controller for personal data collected through the Platform. Wasal LLC does not manufacture products and operates internationally, connecting vendors who register and list products with buyers who submit inquiries for sourcing purposes.

We are committed to compliance with applicable privacy laws, including:

• Virginia Consumer Data Protection Act (VCDPA) Va. Code Ann. § 59.1-571 et seq. (our primary governing state law)
• California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)
• General Data Protection Regulation (GDPR) EU Regulation 2016/679
• UK General Data Protection Regulation (UK GDPR)
• Other applicable US state and federal privacy laws and international data protection regulations

By accessing or using the Wasal Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

SECTION 2: INFORMATION WE COLLECT

We collect personal data directly from users, automatically through their use of the Platform, and, where applicable, from third-party sources. The categories of personal data we collect are described below.

2.1 Vendor Account Data

When vendors register on the Platform, we collect the following information:

• Business name and legal entity type
• Contact person name and job title
• Work email address and business phone number
• Company registered address and country of operation
• Product categories offered and relevant industry information
• Documents uploaded for verification purposes (e.g., trade licenses, certifications, and other compliance documents)

2.2 Buyer Data

When buyers submit inquiries through the Platform, we collect:

• Full name and company name
• Business email address and phone number
• Inquiry details, product specifications, and sourcing requirements submitted through the Platform

2.3 Usage and Technical Data

We automatically collect the following technical data when you access or use the Platform:

• Internet Protocol (IP) addresses
• Browser type and version; device identifiers and operating system
• Pages visited, features accessed, and navigation paths
• Session duration and interaction timestamps
• Referral URLs and search terms used to reach the Platform
• Server log files and error reports

2.4 Communication Data

We collect emails, platform messages, support tickets, and other communications exchanged via the Platform between users and Wasal LLC or facilitated through the Platform's messaging features.

2.5 Cookies and Tracking Data

We collect data through cookies and similar tracking technologies as described in Section 6 (Cookies and Tracking Technologies) of this Policy.

SECTION 3: HOW WE USE YOUR INFORMATION

We process personal data only for specified, explicit, and legitimate purposes. The table below sets out each processing purpose and its corresponding legal basis under applicable privacy law.

 

Processing Purpose	Legal Basis
Operating and providing the Platform and its features	Contract performance
Processing vendor registrations and product listings	Contract performance
Facilitating buyer–vendor connections and routing inquiries	Legitimate interest / Contract performance
Sending transactional and service communications	Contract performance
Sending marketing and promotional communications	Consent (with opt-out available at any time)
Analytics, platform improvement, and product development	Legitimate interest
Fraud prevention, platform security, and abuse detection	Legitimate interest / Legal obligation
Complying with legal, regulatory, or judicial obligations	Legal obligation

 

Where processing is based on consent, you may withdraw your consent at any time by contacting us at support@wasal.us. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

SECTION 4: VENDOR ACCOUNTS

Vendor profile information including business name, product categories, and designated contact details is displayed on the Wasal Platform to facilitate buyer–vendor matchmaking. By registering as a vendor, you acknowledge and agree that such information will be visible to registered buyers and, where applicable, to general visitors of the Platform.

Vendors are solely responsible for ensuring that all information submitted to the Platform is accurate, current, complete, and does not infringe upon the rights of any third party.

Product listing information such as product names, descriptions, and technical specifications that does not constitute personal data is publicly visible on the Platform and may be indexed by third-party search engines. Wasal LLC is not responsible for the caching or retention of such information by third-party search engines following removal from the Platform.

Upon account termination, Wasal LLC will retain vendor personal data for the period specified in Section 10 (Data Retention), after which it will be securely deleted or anonymized, except where continued retention is required by law, regulation, or a valid legal hold.

SECTION 5: BUYER INQUIRIES

Buyer inquiry data including contact details and product specifications is routed to relevant vendors on the Platform to facilitate sourcing connections. By submitting an inquiry, buyers explicitly acknowledge and agree that their inquiry details, including their contact information and sourcing requirements, will be shared with one or more matched vendors on the Platform.

Wasal LLC retains records of buyer inquiries for platform integrity, audit trail, and dispute resolution purposes, in accordance with the retention periods specified in Section 10.

Buyer inquiry data is not sold to unrelated third parties and is not used for purposes other than those described in this Privacy Policy.

SECTION 6: COOKIES AND TRACKING TECHNOLOGIES

Wasal LLC uses cookies and similar tracking technologies to operate, maintain, and improve the Platform. We deploy the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session management, authentication, and security cookies.
• Functional Cookies: These cookies enable enhanced functionality such as language preferences, session persistence, and user interface customization.
• Analytics Cookies: These cookies collect aggregated usage data to help us understand how users interact with the Platform and to improve its performance (e.g., Google Analytics).
• Marketing Cookies: These cookies are used to deliver relevant content and to track marketing campaign effectiveness. They are deployed only with express user consent.

Users may manage cookie preferences through our cookie consent banner presented upon first visit, or through browser-level settings. Most browsers allow you to refuse or delete cookies; however, disabling certain cookies may impair the functionality of the Platform.

We use third-party analytics tools including Google Analytics. Google may process usage data collected through its services in accordance with its own privacy policy, available at https://policies.google.com/privacy. Users may opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on.

We currently do not alter our data practices in response to browser Do Not Track (DNT) signals. However, we will honor opt-out requests submitted through our cookie preference center or through the privacy request mechanism described in Section 11.

SECTION 7: SHARING YOUR INFORMATION

Wasal LLC does not sell, rent, or trade personal data. We share personal data only in the limited circumstances described below:

• With Vendors: Buyer inquiry data is shared with matched vendors to facilitate sourcing connections, as described in Section 5. Buyers are notified of this sharing at the time of inquiry submission.
• With Buyers: Vendor profile and designated contact data is made available to buyers for sourcing and evaluation purposes within the Platform.
• With Service Providers / Data Processors: We engage trusted third-party service providers for Platform hosting, email delivery, analytics, customer relationship management (CRM), and technical support. All third-party processors are bound by Data Processing Agreements (DPAs) requiring them to protect personal data in accordance with applicable law and to process data only on Wasal LLC's documented instructions.
• For Legal Compliance: We may disclose personal data in response to lawful requests from law enforcement agencies, regulatory authorities, or pursuant to valid court orders, subpoenas, or other legal process, where we are legally required or permitted to do so.
• In Business Transfers: In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of Wasal LLC's assets, personal data may be transferred to the successor entity. Affected users will be notified in advance where required by applicable law, and the successor entity will be required to honor the terms of this Privacy Policy or provide advance notice of any material changes.
• We do not sell personal data to any third party for advertising, profiling, or any other commercial purpose.

SECTION 8: DATA SECURITY

Wasal LLC implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• Encryption in transit: All data transmitted to and from the Platform is protected using Transport Layer Security (TLS) encryption protocols.
• Access controls: Role-based access permissions are enforced to limit data access to authorized personnel on a need-to-know basis.
• Regular security assessments: We conduct periodic security reviews, vulnerability assessments, and penetration testing of our systems and infrastructure.

While Wasal LLC implements industry-standard security measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of personal data. Users are responsible for maintaining the confidentiality of their account credentials and for promptly notifying Wasal LLC of any suspected unauthorized access to their account.

Data Breach Notification: In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, Wasal LLC will notify affected users and relevant supervisory authorities as required by applicable law including within 72 hours of becoming aware of the breach under GDPR (Article 33), and within the timeframes required under the VCDPA, CCPA/CPRA, and other applicable state notification laws.

SECTION 9 — INTERNATIONAL DATA TRANSFERS

Wasal LLC is incorporated and headquartered in McLean, Virginia, United States. Personal data collected through the Platform is primarily stored and processed on US-based servers. As an international B2B platform, we may transfer personal data across international borders during Platform operations.

For users located in the European Union or United Kingdom, personal data may be transferred to the United States or to other countries outside the European Economic Area (EEA) or the United Kingdom. We ensure that all such transfers are subject to appropriate legal safeguards, including:

• Adequacy decisions issued by the European Commission, where applicable, recognize a third country's level of data protection as adequate.
• Standard Contractual Clauses (SCCs) as approved by the European Commission under GDPR for EU-to-third-country data transfers.
• UK International Data Transfer Agreements (IDTAs) or UK Addenda to SCCs for transfers governed by the UK GDPR.

For California residents, international transfers are further governed by the applicable provisions of the CCPA/CPRA framework described in Section 11.2.

We ensure that all international data transfers comply with the legal requirements of the applicable transferring jurisdiction. Copies of applicable transfer mechanisms may be requested by contacting support@wasal.us.

SECTION 10: DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements. The following retention periods apply:

 

Data Category	Retention Period
Vendor account data	Duration of active account plus 1 years following account closure
Buyer inquiry data	2 years from the date of submission
Usage and technical log data	12 months from the date of collection
Communication data (emails, support tickets)	10 years from the date of last communication

 

Retention periods may be extended where required by law or regulation, or where personal data is subject to a legal hold in connection with pending or anticipated litigation, regulatory investigations, or the enforcement of contractual rights.

Upon expiration of the applicable retention period, personal data will be securely deleted or rendered permanently anonymized in a manner that prevents re-identification. Users may request early deletion of their personal data, subject to the rights and limitations described in Section 11 (US Privacy Rights) and applicable legal obligations.

SECTION 11: US PRIVACY RIGHTS

11.1 Virginia Residents - Virginia Consumer Data Protection Act (VCDPA)

As a Virginia-incorporated company, Wasal LLC is subject to the Virginia Consumer Data Protection Act (VCDPA), Va. Code Ann. § 59.1-571 et seq., effective January 1, 2023.

Virginia residents have the following rights with respect to their personal data processed by Wasal LLC:

• Right to Access: Confirm whether Wasal LLC processes your personal data and, if so, obtain a copy of that personal data.
• Right to Correct: Request correction of inaccurate personal data held by Wasal LLC.
• Right to Delete: Request deletion of personal data provided by you or obtained about you, subject to applicable exceptions.
• Right to Data Portability: Obtain a copy of your personal data in a portable, readily usable format to the extent technically feasible.
• Right to Opt Out: Opt out of the processing of your personal data for purposes of: (i) targeted advertising; (ii) the sale of personal data; and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

How to Exercise VCDPA Rights: Submit a verifiable request to support@wasal.us. Wasal LLC will respond within 45 days of receipt. This period may be extended by an additional 45 days where reasonably necessary, with prior written notice provided to the requestor.

Right to Appeal: If Wasal LLC declines to act on a rights request, you will be notified of the reason and basis for the decision within the applicable response period. Virginia residents may appeal the decision by contacting support@wasal.us with the subject line "VCDPA Appeal." Wasal LLC will respond to appeals within 60 days of receipt. If your appeal is denied, you may submit a complaint to the Virginia Attorney General at https://www.oag.state.va.us.

Wasal LLC does not sell personal data as defined under the VCDPA, and does not process personal data for targeted advertising without express user consent.

11.2 California Residents - CCPA / CPRA

California residents have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected, used, disclosed, or sold about you over the preceding 12 months.
• Right to Delete: Request deletion of personal information collected from you, subject to certain legal exceptions.
• Right to Correct: Request correction of inaccurate personal information maintained by Wasal LLC.
• Right to Opt Out of Sale or Sharing: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. Note: Wasal LLC does not sell or share personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: Request that Wasal LLC limit its use and disclosure of sensitive personal information to purposes permitted under the CPRA.
• Right of No Retaliation: Wasal LLC will not discriminate against you — including by denying services, charging different prices, or providing a different quality of service for exercising any of your CCPA/CPRA rights.

How to Exercise CCPA/CPRA Rights: Submit a verifiable consumer request to support@wasal.us, or use the "Do Not Sell or Share My Personal Information" link available on the Platform footer (to be implemented). Wasal LLC will respond within 45 days, extendable by an additional 45 days with prior notice. You may submit up to two verifiable consumer requests in any 12-month period.

Authorized agent requests are accepted with appropriate written authorization and identity verification. Wasal LLC reserves the right to deny requests from agents that cannot provide adequate authorization.

11.3 Other US State Privacy Laws

Residents of US states with comprehensive consumer privacy legislation including but not limited to Colorado (Colorado Privacy Act, CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), and Montana (MCDPA) may have similar rights under their respective state laws.

Wasal LLC is committed to honoring privacy requests from residents of all US states where applicable comprehensive privacy legislation is in effect. To submit a rights request, contact support@wasal.us and identify your state of residence in your request so that we may apply the appropriate legal framework.

SECTION 12: RIGHTS OF EU AND UK DATA SUBJECTS (GDPR / UK GDPR)

In addition to the US-specific rights described in Section 11, individuals located in the European Union or United Kingdom have the following rights under the GDPR and UK GDPR respectively. These rights apply to personal data processed by Wasal LLC as data controller.

• Right of Access (Article 15 GDPR): Obtain confirmation of whether Wasal LLC processes your personal data and request a copy of such data along with supplementary information about processing activities.
• Right to Rectification (Article 16 GDPR): Request correction of inaccurate personal data and completion of incomplete personal data.
• Right to Erasure / "Right to be Forgotten" (Article 17 GDPR): Request deletion of your personal data where processing is no longer necessary, where consent has been withdrawn, or where other statutory grounds apply.
• Right to Restriction of Processing (Article 18 GDPR): Request that Wasal LLC restrict the processing of your personal data in certain defined circumstances.
• Right to Data Portability (Article 20 GDPR): Receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller.
• Right to Object (Article 21 GDPR): Object to processing your personal data where it is based on legitimate interests, including the right to object to direct marketing at any time without providing a reason.
• Right to Withdraw Consent (Article 7(3) GDPR): Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: Lodge a complaint with your local data protection supervisory authority, for example, the Information Commissioner's Office (ICO) in the United Kingdom at https://ico.org.uk, or your national Data Protection Authority (DPA) within the EU.

To exercise any of the above rights, contact support@wasal.us or our Data Protection Officer at support@wasal.us. We will respond within 30 days of receiving a valid request. This period may be extended by up to two additional months for complex or multiple requests, with prior written notice provided.

SECTION 13: CHILDREN'S PRIVACY

The Wasal Platform is intended exclusively for business users who are 18 years of age or older. Wasal LLC does not knowingly collect, process, or store personal data from individuals under the age of 18.

If Wasal LLC becomes aware that personal data has been inadvertently collected from a minor, we will take prompt steps to delete such data from our systems. If you have reason to believe that we may have inadvertently collected personal data from a minor, please contact us immediately at support@wasal.us.

SECTION 14: THIRD-PARTY LINKS AND SERVICES

The Wasal Platform may contain links to third-party websites, tools, integrations, or services that are not owned or controlled by Wasal LLC. Wasal LLC is not responsible for the content, privacy practices, or security of such third-party sites or services.

We encourage all users to review the privacy policies of any third-party websites they visit or services they engage with. The presence of a hyperlink to a third-party website on the Wasal Platform does not constitute endorsement, recommendation, or warranty of that site's privacy practices, products, or services.

SECTION 15: CHANGES TO THIS PRIVACY POLICY

Wasal LLC reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Platform functionality. All changes will be effective from the updated effective date displayed at the top of this document.

When we make material changes to this Privacy Policy, we will notify users by:

• Sending an email notification to the address associated with your account; and/or
• Posting a prominent notice on the Platform prior to the change becoming effective.

Your continued use of the Platform following notification of material changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you must immediately discontinue your use of the Platform and, where applicable, submit a data deletion request pursuant to Section 11 or Section 12.

We recommend that users periodically review this Privacy Policy to remain informed of our current data practices.

SECTION 16: CONTACT US

For privacy-related inquiries, rights requests, complaints, or to contact our Data Protection Officer, please use the information below. Wasal LLC aims to acknowledge all privacy inquiries promptly and to respond fully within the timeframes specified in this Policy.

 

Contact Channel	Details
Privacy Team (General Inquiries & Rights Requests)	support@wasal.us
Data Protection Officer (DPO)	support@wasal.us
Mailing Address	1751 Pinnacle Dr, Floor 6th, Suite 600. McLean, VA, USA 22102
Website	https://wasal.us

 

Users located in the European Union or United Kingdom may also contact our designated EU/UK representative or lodge a complaint directly with the relevant supervisory authority as described in Section 12.

WASAL LLC - PRIVACY POLICY  |  Effective Date: June 24, 2026  |  Version 1.0