Privacy Policy

Last updated: March 16, 2026

1. Introduction

This Privacy Policy explains how WK Operations Ltd ("we", "us", or "our") collects, uses, discloses, and protects personal data when you use UnblockingAPI, our web unblocking and data retrieval API platform, including our websites, dashboards, and related services (collectively, the "Service").

We act as a data controller under the General Data Protection Regulation (GDPR) and similar applicable data protection regulations. For data protection inquiries, contact us at unblockingapi@wkoperations.com.

2. Personal Data We Collect

We may collect the following categories of personal data:

  • Account and contact information: name, email address, hashed password, and authentication identifiers.
  • Usage and log data: IP address, browser type, device information, timestamps, platform interactions, API usage patterns, and feature usage.
  • Payment and billing data: payment processing is handled entirely by our Merchant of Record, Paddle.com Market Limited ("Paddle"). We do not store your full payment details. See Paddle's Privacy Policy for details on how they handle your payment data.
  • Support and communication data: support messages, feedback, and any information you voluntarily provide when contacting us.

Data you submit to the Service, including API requests and responses, is treated as service data and may be logged to operate, secure, and improve the Service.

3. How We Use Personal Data

We process personal data for the following purposes and legal bases:

  • Service provision (contract performance): authentication, API request processing, usage tracking, account management, and customer support.
  • Security and abuse prevention (legitimate interests/legal obligations): usage monitoring, fraud detection, rate limit enforcement, and Terms of Service enforcement.
  • Service improvement (legitimate interests): usage analysis, performance optimization, and feature development.
  • Communications (contract/legitimate interests): account notices, service changes, security alerts, and technical updates.
  • Marketing (consent/legitimate interests): product updates, offers, and newsletters. You may opt out of marketing communications at any time.
  • Legal compliance: record-keeping, responding to legal requests, and regulatory adherence.

4. Cookies and Similar Technologies

We may use cookies and similar tracking technologies on our websites and dashboards to remember your preferences and settings, authenticate sessions and protect against fraudulent activity, and analyze usage statistics to understand how the Service is used and to improve it. Where legally required, we obtain your consent before placing non-essential cookies. You can manage your cookie preferences through your browser settings.

5. How We Share Personal Data

We do not sell your personal data. We may share personal data with the following categories of recipients:

  • Payment processor: Paddle.com Market Limited acts as our Merchant of Record and processes all payment transactions, invoicing, sales tax, and VAT on our behalf.
  • Service providers and processors: infrastructure, hosting, and analytics providers who assist in operating the Service.
  • Professional advisers: legal, accounting, and audit professionals as necessary.
  • Authorities and law enforcement: where required by law or to protect our rights.
  • Business transfer recipients: in the event of a merger, acquisition, or sale of assets.

6. International Transfers

The Service may involve the transfer of personal data to countries outside of the European Economic Area (EEA), including to service providers located in countries that may not offer the same level of data protection as your home country. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), transfers to countries with EU adequacy decisions, and other GDPR-approved mechanisms. For details about specific transfers, contact us at unblockingapi@wkoperations.com.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to provide the Service, comply with legal requirements, resolve disputes, and enforce our agreements. Typical retention periods are:

  • Account data: retained during the active account period plus 90 days after deletion.
  • API usage and request logs: up to 12 months.
  • Billing and payment records: up to 7 years for legal and tax compliance (held by Paddle as Merchant of Record).
  • Marketing communications: until you opt out or withdraw consent.

8. Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption in transit and at rest, access controls, audit logging, and regular security reviews. You are responsible for maintaining the security of your account credentials and API keys.

9. Your Rights

Under the GDPR and similar data protection laws, you have the following rights:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure in certain circumstances
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing based on legitimate interests
  • Right to withdraw consent at any time

To exercise any of these rights, please contact us at unblockingapi@wkoperations.com. We will respond to your request within one month, or inform you if we need additional time (up to two additional months for complex requests). You also have the right to lodge a complaint with your local data protection supervisory authority.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Any automated processing is used solely for service improvement and does not impact your rights.

11. Children's Privacy

The Service is not intended for use by children under the age of 16 (or the applicable age of digital consent in your jurisdiction), and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or through a prominent notice on the Service before the changes take effect. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at unblockingapi@wkoperations.com.

WK Operations Ltd
ADD Malta, Level 2, Hardrocks Business Park, Burmarrad Road
Naxxar NXR6345, Malta