Legal
Last updated 9 October 2026
Inibus FZE, trading as What to Say at Work, is responsible for the personal information described in this policy.
Our details are:
In this policy, "we", "us" and "our" mean Inibus FZE.
Our products are for adults aged 18 or over. They are intended for personal use and are not purchased or administered by employers.
Our website is available in English and may be accessed from different countries. We do not currently conduct marketing directed specifically at people in the United Kingdom or the European Economic Area. People located in those countries may nevertheless find the website and place an order.
We will review the data protection requirements that apply if our marketing practices, products or customer base change.
This policy applies to personal information processed through:
It does not apply to information you enter into a downloaded PDF on your own device unless you separately send that information to us.
Our products are:
The Process and The Complete Lines are fixed downloadable PDFs. You complete them locally on your device. We do not receive or process what you type into them.
When Reviewed opens, it will involve sending material to us by email. Our founder will personally read the material and write the response.
We do not use artificial intelligence to deliver Reviewed. We do not use customer text:
A hosted searchable sentence library and adaptive artificial-intelligence features are not currently part of any product. Before launching any such feature, we will assess the proposed processing and update this policy and any relevant consent or contractual arrangements.
When you use the website, our hosting and security providers may process technical information needed to deliver and protect it. This may include:
If you affirmatively consent, we use Simple Analytics to understand general website use.
Depending on its service configuration, Simple Analytics may process information such as:
Simple Analytics states that it does not use cookies, local or session storage, fingerprinting, stored IP addresses or hashed IP addresses for this service.
We do not load Simple Analytics until you give affirmative consent. You may refuse or withdraw that consent through our consent controls.
When you buy a product, we may receive or create:
Stripe processes payments. We do not receive or store your full payment-card details.
Stripe also sends you a receipt by email when you pay, and a confirmation if you are refunded.
After you pay, Stripe emails you an invoice on our behalf with a link to your files. That email uses your name, your email address and the product you bought.
Stripe Tax may use an IP address to estimate an initial location for tax purposes. It may use a billing or shipping address to calculate the final tax treatment.
If you purchase Reviewed, we process:
Workplace material may contain personal or sensitive information about you or another person. Please provide only what is reasonably necessary.
Do not send:
The Reviewed submission form or process should require a separate, unticked acknowledgement addressing potentially sensitive material before submission.
If you contact us, we process your contact details and the content of the communication.
If you ask to receive marketing emails, we process your email address, consent record, subscription status and communication preferences.
We use Mailchimp to manage marketing communications. We are verifying whether all open and click tracking has been disabled in the live configuration. Until that verification is complete, Mailchimp may process information about email delivery and, depending on configuration, email opens or clicked links.
We will update this policy when the live configuration has been conclusively verified.
If you reply to one of our emails, we receive your email address and the content of your reply through our Network Solutions mailbox. A reply may contain information about you, your employer, colleagues or other people. Please provide only what is necessary and remove names and identifying details wherever possible.
We use replies to respond to you, understand common workplace communication problems and, where appropriate, develop future editorial content. We do not publish your identity. We use a reply as source material only after genuinely anonymising and generalising it so that the people and organisations concerned cannot reasonably be identified. If we want to quote you, closely paraphrase your words or use a distinctive or sensitive situation, we will ask for your express permission first.
We normally delete the original reply within 90 days of receipt, and sooner once it is no longer needed. We may retain it for longer where necessary to continue a conversation, record permission, resolve a complaint or establish, exercise or defend legal claims. Genuinely anonymised editorial material may be retained because it no longer identifies a person.
We use personal information where necessary to:
Where UK data-protection law applies, our bases may include:
Where consent is the basis, you may withdraw it at any time. Withdrawal does not affect processing that occurred before withdrawal.
We disclose personal information only where reasonably necessary.
Recipients may include:
We do not:
Netlify, Inc. hosts the website and downloadable PDF files. Netlify uses a global delivery network, with replication across locations that may include the United States, Europe, Asia, South America and Australia.
Your emails and replies and, once it opens, Reviewed submissions pass through hosted email supplied by Network Solutions. Network Solutions has not publicly confirmed to us the precise storage region, active-mailbox deletion process or backup-retention period applicable to this service.
Simple Analytics processes visitor analytics on servers in the Netherlands.
Stripe and Mailchimp may process information in more than one country under their respective service arrangements.
As a UAE business using international providers and serving enabled countries, we may process or transfer information outside the country where you live. Where required, we use contractual, organisational or other recognised safeguards appropriate to the transfer.
We apply the following retention approach:
Payment and tax records are kept separately from the substantive content of a Reviewed submission. Deleting the submission does not require us to delete records that we must retain for accounting, tax, fraud-prevention or legal purposes.
We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
No internet transmission, email system or storage service can be guaranteed to be completely secure. In particular, ordinary email may not be suitable for highly sensitive information.
Please do not send more information than is necessary for Reviewed. Contact us before sending material if you are unsure whether it is appropriate.
Depending on where you live and the law that applies, you may have rights to:
These rights are not absolute. We may need to verify your identity and may retain information where required for tax, accounting, fraud-prevention, legal-claims or other lawful purposes.
To exercise a right, email hello@whattosay.work. Please state your country or US state of residence so that we can apply the relevant requirements.
We do not discriminate against a person for exercising an applicable privacy right.
You can also complain to us about how we handle your personal information. Email hello@whattosay.work, and we will acknowledge your complaint within 30 days and tell you what happens next.
For US residents, the categories of personal information we may process include:
We obtain this information from you, your device, payment and service providers, and records generated while providing the service.
We use and disclose it for the purposes and to the recipients described in this policy.
We do not sell personal information or share it for cross-context behavioural advertising. We do not knowingly sell or share the personal information of children.
Rights vary by state and may apply only if the relevant legal thresholds are met.
If UK data-protection law applies, you may complain to the UK Information Commissioner's Office in addition to contacting us.
Our assessment of whether a UK representative must be appointed has not yet been completed. If a representative is appointed, its identity and contact details will be added here before the relevant processing begins.
Simple Analytics is disabled unless and until you affirmatively consent.
You may:
Refusing analytics does not prevent you from viewing the website or buying a product.
Strictly necessary technology may still operate where needed to provide the website, maintain security, remember your checkout state or complete a transaction.
We send marketing communications only where permitted and on the basis of an appropriate consent or other lawful permission.
You may unsubscribe using the link in a marketing email or by contacting hello@whattosay.work.
A receipt, order confirmation or email containing the download link for a purchased product is a service communication. We will not add promotional or cross-selling material to a purely transactional download email unless the relevant marketing rules have been satisfied.
Our products are intended for adults aged 18 or over.
We do not knowingly offer the service to children or intentionally collect their personal information. If you believe that a child has provided personal information to us, contact hello@whattosay.work.
The website or products may refer to third-party websites or services. Their privacy practices are governed by their own notices. We are not responsible for how an independent third party processes personal information.
We may update this policy when our products, providers, practices or legal obligations change.
We will publish the revised version with a new "Last updated" date. If a change materially affects existing customers, we will provide additional notice where reasonably appropriate or legally required.
We will review and update this policy before launching:
For privacy questions or requests, contact:
Inibus FZE, trading as What to Say at Work. Licence number 3815.