Privacy Policy

Effective Date: 21 August 2026

Last Updated: 21 August 2026

This Privacy Policy explains how Wobble ("Wobble", "we", "us" or "our"), operator of wobblepk.com and related Wobble websites, forms, applications, platforms and services, collects, uses, stores, processes, discloses and protects personal information.

Wobble provides AI transformation, automation, AI operating systems, AI agents, workflow systems, dashboards, CRM integrations, marketing systems, communications infrastructure and related technology and consulting services.

By accessing our website, submitting information to us, requesting an AI Readiness Call, communicating with us, or otherwise interacting with Wobble, you acknowledge the practices described in this Privacy Policy.

Nothing in this Privacy Policy limits any rights that cannot lawfully be limited under applicable law.

1. Scope

This Privacy Policy applies to personal information collected through:

• wobblepk.com and any Wobble-controlled website or landing page;
• our AI Readiness Call and other enquiry forms;
• email, telephone, SMS, WhatsApp and similar communications;
• meetings, consultations, audits and sales discussions;
• events, referrals and professional networking;
• our client and prospective-client relationships;
• Wobble dashboards, portals or applications where this Privacy Policy is referenced;
• business information obtained from publicly available sources; and
• other interactions with Wobble.

Where Wobble processes personal information solely on behalf of a client in connection with services supplied to that client, Wobble may act as a processor, service provider or similar intermediary rather than the party determining the purposes of processing. In those circumstances, the applicable client agreement, data processing agreement and the client's own privacy obligations may govern that processing.

2. Information We Collect

The information we collect depends upon how you interact with us.

2.1 Information You Provide

We may collect information including:

Contact information, such as:

• name;
• email address;
• telephone number;
• WhatsApp number; and
• preferred method of communication.

Business and professional information, including:

• company or business name;
• job title, role or professional position;
• team or company size;
• business location, city, country or market;
• website address;
• LinkedIn, Instagram, Facebook or other business profiles;
• industry;
• products or services;
• business objectives; and
• publicly available business information.

AI Readiness and operational information, including:

• information regarding your business operations;
• workflows and processes;
• operational bottlenecks;
• sales and lead-follow-up processes;
• customer-service processes;
• marketing processes;
• scheduling or appointment processes;
• reporting and dashboard requirements;
• internal knowledge or SOP requirements;
• software, platforms and business tools currently used;
• AI or automation maturity;
• implementation timeframe;
• areas in which you are interested in using Wobble;
• readiness for an audit or implementation;
• information regarding systems or workflows you may be able to provide during a future engagement; and
• any information entered into open-text fields.

Commercial information, such as:

• services you have requested;
• proposals or quotations;
• contracts;
• project information;
• billing and transaction records;
• account or subscription information where applicable; and
• correspondence relating to a commercial relationship.

2.2 Information Collected Automatically

When you use our website or digital services, we or our technology providers may automatically receive technical information such as:

• IP address;
• device type;
• browser type and version;
• operating system;
• approximate geographic region derived from IP address;
• referring website or source;
• pages viewed;
• links clicked;
• date and time of access;
• session information;
• website performance information;
• error and diagnostic information;
• cookie identifiers;
• advertising or analytics identifiers where enabled; and
• other information produced through cookies, pixels, local storage, log files and similar technologies.

We may combine this information with other information where permitted by applicable law.

2.3 Information From Third Parties

We may receive information from:

• clients;
• business partners;
• referrals;
• service providers;
• CRM platforms;
• advertising platforms;
• social networks;
• professional networking platforms;
• analytics providers;
• communications platforms;
• public business directories;
• company websites;
• publicly available professional profiles; and
• other lawful public or commercial sources.

For business-development purposes, this may include professional contact information relating to representatives, owners, officers or employees of businesses that we reasonably believe may have an interest in Wobble's services.

3. Information You Should Not Submit Through Public Forms

Our website forms are intended primarily for initial business enquiries and readiness assessment.

Unless Wobble specifically requests it through an appropriate secure channel, you should not submit:

• passwords;
• authentication credentials;
• private API keys;
• financial account credentials;
• government identification documents;
• medical information;
• patient records;
• biometric information;
• criminal-record information;
• highly confidential trade secrets;
• payment-card information;
• private customer databases; or
• other sensitive, regulated or confidential information.

Our AI Readiness form is not intended to receive confidential documents or production business datasets.

If you voluntarily submit unnecessary sensitive information through an inappropriate channel, Wobble may delete, restrict, isolate or otherwise handle that information as we reasonably consider appropriate.

4. Information About Other People

If you provide Wobble with personal information relating to another person, you represent that you are authorised or otherwise lawfully permitted to provide that information to us for the relevant purpose.

Clients are responsible for ensuring that they possess all necessary notices, rights, permissions, consents and lawful bases required before instructing Wobble to process personal information belonging to their customers, patients, employees, contractors, leads or other third parties.

5. How We Use Information

We may process personal information to:

• respond to enquiries;
• evaluate whether Wobble's services are suitable for a business;
• arrange and conduct AI Readiness Calls;
• prepare proposals, scopes and recommendations;
• conduct audits and discovery;
• communicate with prospective and existing clients;
• provide, operate, maintain and improve Wobble services;
• configure AI agents, automations, workflows, CRM systems and dashboards;
• integrate systems requested by clients;
• provide customer support;
• manage commercial relationships;
• administer contracts, billing and payments;
• authenticate users and manage accounts;
• maintain system reliability and security;
• detect fraud, abuse, spam, security threats or unauthorised activity;
• diagnose technical issues;
• understand website usage and performance;
• improve our website, products, models, workflows, processes and services;
• perform internal analytics;
• conduct research and product development;
• generate aggregated or de-identified business insights;
• communicate relevant Wobble services, updates or opportunities;
• administer events or promotional activities;
• enforce our agreements and policies;
• establish, exercise or defend legal claims;
• comply with applicable legal or regulatory obligations; and
• undertake other purposes reasonably related to the circumstances in which the information was collected.

We will not use personal information in a materially incompatible manner where applicable law requires additional notice, consent or another lawful basis.

6. AI and Automated Processing

Because Wobble is an AI-focused business, artificial intelligence and automated systems may form part of our internal operations and services.

We may use AI or automated tools to assist with activities including:

• organising information;
• classifying enquiries;
• summarising business information;
• researching businesses;
• generating recommendations;
• analysing workflows;
• detecting patterns;
• drafting communications;
• routing enquiries;
• analysing performance;
• extracting structured information;
• operating support or sales workflows;
• creating reports; and
• improving Wobble systems.

Information processed through AI systems may be transmitted to third-party infrastructure or model providers where necessary to provide a function.

Where appropriate, we use contractual, technical and organisational measures intended to limit how such providers may use information.

Unless separately disclosed and lawfully permitted, Wobble does not intend to use information collected through an ordinary website enquiry to make a decision based solely on automated processing that produces legal or similarly significant effects upon an individual.

AI systems can produce errors. Wobble may use human review, validation, controls and escalation processes where appropriate to the relevant use case.

7. Client Data and Wobble Services

Wobble's systems may connect to client-controlled platforms such as:

• CRM systems;
• email platforms;
• advertising accounts;
• websites;
• ecommerce platforms;
• communications platforms;
• WhatsApp;
• SMS or telephony systems;
• spreadsheets;
• databases;
• scheduling platforms;
• cloud-storage systems;
• reporting systems; and
• internal business applications.

When Wobble accesses personal information through a client's systems solely to perform contracted services, the client generally remains responsible for determining:

• why the information is collected;
• whether collection is lawful;
• what notices must be given;
• whether consent is required;
• how long information should be retained;
• which communications may lawfully be sent;
• which individuals should have access; and
• how data-subject requests should be handled.

Wobble will process such information according to the applicable agreement, documented client instructions and applicable law.

A client may not instruct Wobble to use Wobble services for unlawful surveillance, unlawful discrimination, deceptive conduct, spam, unauthorised access, unlawful processing of personal information or any other unlawful activity.

8. Legal Bases for Processing

Where a jurisdiction requires us to identify a lawful basis, depending on the circumstances we may rely upon:

Contract and Pre-Contractual Steps

Where processing is necessary to:

• respond to a request for services;
• prepare a proposal;
• conduct requested discovery;
• enter into an agreement; or
• perform a contract.

Legitimate Interests

Where permitted by law, we may process information for legitimate business interests including:

• operating and improving our business;
• responding to business enquiries;
• securing our systems;
• managing client relationships;
• developing products and services;
• conducting B2B business development;
• measuring performance;
• preventing fraud and abuse; and
• protecting our legal interests.

We consider the nature of the information, reasonable expectations of affected individuals and potential impact when relying on legitimate interests.

Consent

Where we ask for consent, including where required for:

• certain marketing;
• certain cookies or tracking technologies; or
• particular optional processing activities.

You may withdraw consent where applicable. Withdrawal does not affect processing already lawfully carried out.

Legal Obligations

We may process information where required to comply with applicable law, regulation, court order, legal process, tax requirement or other binding obligation.

9. Communications and Marketing

If you contact Wobble, request information, become a client, provide your business contact details or otherwise establish a business relationship with us, we may contact you regarding that relationship.

Subject to applicable law, we may also send information about:

• Wobble services;
• AI developments;
• relevant products;
• business insights;
• events;
• offers; and
• related commercial opportunities.

Communications may occur by email, telephone, SMS, WhatsApp or another channel appropriate to the relationship.

Where consent is required by law, we will rely upon the appropriate consent or other lawful basis before sending applicable marketing communications.

You may unsubscribe from marketing communications or ask us to stop contacting you for marketing purposes at any time.

Opting out of marketing will not necessarily prevent us from sending communications that are necessary to provide a requested service, manage an existing relationship, respond to you, comply with law or administer a contract.

10. Cookies and Similar Technologies

Our website and service providers may use cookies, pixels, tags, scripts, local storage and similar technologies.

These technologies may be used for:

Strictly Necessary Functions

Necessary to operate, secure and deliver the website.

Preferences

Used to remember choices and settings.

Analytics and Performance

Used to understand how visitors use the website and to improve performance and functionality.

Advertising and Attribution

Where enabled, used to understand campaign effectiveness, attribute visits or conversions, measure advertisements or provide relevant advertising.

Where applicable law requires consent before non-essential cookies or similar technologies are used, we will seek that consent through an appropriate consent mechanism.

Browser controls may allow you to block or delete certain cookies. Doing so may affect website functionality.

Where legally required, additional cookie controls or disclosures may be provided separately.

11. How We Share Information

We may disclose personal information to the following categories of recipients when reasonably necessary.

Technology and Service Providers

Including providers of:

• website hosting;
• cloud computing;
• databases;
• analytics;
• cybersecurity;
• email;
• CRM;
• messaging;
• telephony;
• scheduling;
• automation;
• AI models and infrastructure;
• software development;
• payment processing;
• document management;
• customer support; and
• other technology necessary to operate our business.

Professional Advisers

Including lawyers, accountants, auditors, insurers, consultants and other professional advisers.

Clients

Where Wobble processes information in connection with services performed for that client.

Corporate Transactions

Information may be disclosed in connection with a proposed or completed:

• merger;
• acquisition;
• financing;
• investment;
• restructuring;
• reorganisation;
• sale of assets;
• change of control; or
• similar corporate transaction.

Legal and Protective Disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

• comply with applicable law;
• comply with legal process;
• respond to lawful requests by competent authorities;
• enforce an agreement;
• investigate fraud or security incidents;
• protect Wobble's rights or property;
• protect the safety or rights of another person; or
• establish, exercise or defend legal claims.

With Your Direction

We may share information where you request, authorise or reasonably expect us to do so.

12. Sale and Sharing of Personal Information

Wobble does not sell personal information for direct monetary payment as part of its ordinary business model.

Certain jurisdictions use broad legal definitions of "sale", "sharing", "targeted advertising" or similar concepts that may cover certain advertising, analytics or technology arrangements even where no money is paid in exchange for personal information.

If Wobble engages in activity treated as a sale or sharing under an applicable law, we will provide any notice, consent or opt-out mechanism required by that law.

13. Aggregated and De-Identified Information

We may create information that has been aggregated, anonymised or de-identified so that it does not reasonably identify an individual.

Subject to applicable law, we may use such information for:

• analytics;
• benchmarking;
• research;
• product development;
• service improvement;
• internal reporting;
• business intelligence; and
• commercial or operational purposes.

Where information has been lawfully de-identified, we may retain it for longer than identifiable personal information.

14. International Data Transfers

Wobble operates from Pakistan and works with businesses and technology providers in multiple countries.

As a result, information may be processed or stored in Pakistan and in other jurisdictions where Wobble, its clients or its service providers operate.

Data-protection standards may differ between jurisdictions.

Where applicable law requires safeguards for an international transfer, we may rely upon appropriate mechanisms such as:

• contractual data-protection terms;
• standard contractual clauses;
• international data-transfer agreements or addenda;
• adequacy decisions;
• consent where legally appropriate; or
• another lawful transfer mechanism.

15. Data Security

We use technical, administrative and organisational measures that we consider appropriate to the nature of the information and the relevant risks.

Measures may include, where appropriate:

• access controls;
• authentication;
• encryption;
• credential management;
• network and infrastructure controls;
• backups;
• logging;
• monitoring;
• permissions;
• vendor controls;
• employee or contractor confidentiality obligations; and
• incident-response procedures.

However, no website, transmission method, cloud platform, AI system, database or electronic storage system can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect information, we cannot guarantee absolute security or that unauthorised third parties will never defeat security measures.

Users are responsible for maintaining the confidentiality and security of credentials and access methods under their control.

16. Data Retention

We retain personal information only for as long as we reasonably determine necessary for the relevant purpose, taking into account:

• the purpose for which it was collected;
• whether an active enquiry or commercial relationship exists;
• contractual obligations;
• the nature and sensitivity of the information;
• security requirements;
• dispute or limitation periods;
• legal, regulatory, accounting and tax obligations;
• fraud-prevention needs;
• suppression records required to honour opt-outs; and
• whether retention is necessary to establish, exercise or defend legal claims.

Prospective-client information may therefore be retained after an enquiry where reasonably necessary to manage the relationship, preserve business records or conduct lawful B2B follow-up.

Client information may be retained following termination of a relationship for legal, accounting, dispute-management, security and legitimate record-keeping purposes.

Backup copies may remain for a limited additional period until overwritten or securely removed through normal backup-management processes.

Aggregated or lawfully de-identified information may be retained for longer.

17. Your Privacy Rights

Depending upon your location and applicable law, you may have some or all of the following rights:

• request confirmation of whether we process your personal information;
• access personal information we hold about you;
• request correction of inaccurate information;
• request deletion of information;
• request restriction of certain processing;
• object to certain processing;
• request portability of certain information;
• withdraw consent;
• object to direct marketing;
• opt out of certain targeted advertising;
• opt out of a legally defined sale or sharing of information;
• request limitation of certain sensitive-information processing;
• request information about categories of data or recipients;
• appeal certain privacy-rights decisions where applicable; and
• lodge a complaint with an applicable supervisory or regulatory authority.

These rights are not universal. Their availability, scope and exceptions depend on applicable law.

We may ask for reasonable information to verify identity and authority before completing a request.

Where permitted by law, we may decline or limit requests that are:

• unverifiable;
• manifestly unfounded;
• excessive;
• repetitive;
• technically infeasible;
• contrary to another person's rights;
• inconsistent with applicable legal obligations; or
• subject to a lawful exemption.

We will not unlawfully discriminate against an individual for exercising an applicable privacy right.

18. California Privacy Rights

If the California Consumer Privacy Act or another applicable California privacy law applies to Wobble and to your personal information, California residents may have rights including the right to:

• know what personal information is collected;
• request access;
• request correction;
• request deletion;
• know categories of disclosures;
• opt out of legally defined sale or sharing;
• limit certain uses of sensitive personal information where applicable; and
• receive equal service and pricing subject to lawful exceptions.

Wobble does not sell personal information for direct monetary payment as part of its ordinary business model.

Where California law treats applicable advertising or technology activities as "selling" or "sharing", Wobble will provide legally required mechanisms where those requirements apply to Wobble.

19. European Economic Area and United Kingdom

Where the EU GDPR, UK GDPR or related legislation applies to Wobble's processing, the additional rights and lawful-basis requirements under those laws apply.

Depending upon the processing, Wobble may act as:

• controller;
• joint controller;
• processor; or
• sub-processor.

Where a client determines the purpose and essential means of processing client-provided personal information and Wobble processes that information under the client's instructions, requests relating to that information may need to be submitted to the relevant client as controller.

Nothing in this Privacy Policy is intended to remove any mandatory rights granted under applicable European or UK data-protection legislation.

20. Pakistan

Wobble operates from Pakistan and processes information in accordance with applicable Pakistani law.

We may update our practices as Pakistan's privacy, cybersecurity, electronic communications and data-governance framework develops or changes.

21. Children's Privacy

Wobble's website and services are primarily directed towards businesses and business professionals.

They are not intended for children.

We do not knowingly seek to collect personal information directly from children through our general business website.

If you believe a child has provided personal information to Wobble in circumstances where such collection is not appropriate, please contact us.

22. Third-Party Websites and Platforms

Our website may contain links to third-party websites, social networks, services or platforms.

Wobble does not control those third parties and this Privacy Policy does not govern their independent privacy practices.

Your use of third-party services is subject to the terms and privacy policies of those providers.

The inclusion of a link does not by itself mean Wobble accepts responsibility for that third party's privacy, security or content practices.

23. Security Incidents

If Wobble becomes aware of a personal-data incident, we may investigate, contain, mitigate and remediate the incident as we consider appropriate.

Where applicable law or a binding contractual obligation requires notification to affected individuals, clients, authorities or other parties, we will provide notification in accordance with those requirements.

24. Business Transfers and Changes to Wobble

If Wobble is reorganised, acquired, merged, financed, sold, transferred or otherwise undergoes a change in ownership or business structure, information may be transferred as part of that transaction, subject to applicable law.

A successor may continue processing personal information in accordance with this Privacy Policy or provide an updated privacy notice where required.

25. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• changes to our website;
• new products or services;
• new technologies;
• new vendors;
• changes to our data practices;
• operational changes;
• regulatory developments; or
• changes in applicable law.

The revised version will be posted on our website with an updated Last Updated date.

Where required by applicable law, we will provide additional notice or obtain consent before materially changing how previously collected personal information is used.

Your continued interaction with Wobble following an update does not waive any consent requirement imposed by applicable law.

26. Requests, Questions and Complaints

For questions about this Privacy Policy or requests concerning personal information, contact:

Wobble

Karachi, Pakistan

Requests: wobblepk.com/ai-readiness-call, which reaches the same people and is answered within two working hours

Website: wobblepk.com

Please include sufficient information for us to understand and respond to your request.

For security reasons, do not send passwords, private keys, authentication credentials or unnecessary sensitive information by ordinary email.

27. Relationship With Other Agreements

This Privacy Policy is a general description of Wobble's privacy practices.

A separate:

• service agreement;
• master services agreement;
• statement of work;
• data processing agreement;
• confidentiality agreement;
• business associate agreement where applicable;
• platform agreement; or
• other written agreement

may contain additional or more specific data-processing obligations.

Where Wobble processes information on behalf of a client, the applicable written agreement and lawful documented client instructions may govern that processing.

Nothing in this Privacy Policy expands Wobble's contractual obligations beyond those otherwise agreed in writing or required by applicable law.

Appendix: the cookies this website actually sets

Section 10 describes the categories. This is the list, for this site, as it stands today. It is maintained alongside the website rather than as part of the policy text above, so that it can be corrected the day anything changes.

Nothing in the optional row is set unless you have agreed to it. Until you answer the cookie banner, and if you refuse, no analytics cookie is created at all, because the analytics script is not loaded rather than loaded and told to behave.

There is no advertising pixel, no remarketing tag, no session recorder and no heat mapping on this website. If any of those are added, this table and the banner change before they go live.

You can change your answer at any time from the Cookie settings link in the footer of every page. If your browser sends a Global Privacy Control signal, that is treated as a refusal and you are not asked.