Privacy Policy

Last updated: 14 August 2026

This policy explains what personal data Helyass Ltd collects, why we collect it, who we share it with, and the rights you have over it. It covers our website at thiqa.xyz and the WhatsApp messaging services we build and operate for business clients.

Who we are

CAPE CAUSE LTD is a company registered in England and Wales.

For any question about this policy or your data, contact privacy@thiqa.xyz.

Two different roles

Our responsibilities depend on whose data we are handling.

As a data controller. When you visit our website, email us, or book a call with us, we decide how your data is used. This policy governs that use.

As a data processor. When we build and run a WhatsApp assistant for a business client — a clinic, gym, or similar — that client is the data controller for their own customers' data. We process it only on their written instructions. If you messaged a business on WhatsApp and reached an assistant we built, that business's own privacy policy governs your data, and we act under contract with them.

What we collect

Website visitors

Name, email address, company name, and phone number, when you submit a form or book a call.
Basic technical data: IP address, browser type, pages viewed, and referring source.

WhatsApp users

When you send a message to a WhatsApp number operated by us or on behalf of a client, we process:

Your WhatsApp phone number and profile display name.
The content of messages you send and receive in that conversation.
Timestamps and delivery status.
Any information you volunteer in the conversation — for example your name, preferred appointment time, or service requested.

We do not collect special category data, and we ask you not to send it. Do not send medical details, financial details, identification documents, or passwords over WhatsApp.

Prospective clients

For business-to-business outreach we process business contact details — name, role, business email address, company name, and website — obtained from publicly available sources or from the individual directly. Every message we send includes a way to opt out, and we act on opt-out requests promptly.

Why we use it, and our legal basis

To respond to your messages and book appointments — performance of a contract, or the legitimate interest of the business you contacted in serving its customers.
To operate and improve our services — legitimate interest in running and maintaining a reliable service.
To send business-to-business outreach — legitimate interest in offering relevant services, balanced against your right to object at any time.
To meet legal and accounting obligations — legal obligation.

We do not sell personal data. We do not share it with advertisers. We do not use WhatsApp conversation content for advertising.

Automated messaging

Messages from our WhatsApp assistants are generated automatically using artificial intelligence. Conversation content is sent to third-party AI providers to generate replies. These providers process the content to return a response and do not use it to train their models.

You can reach a human at any time by replying HUMAN or AGENT. To stop receiving messages, reply STOP. You can also block the number in WhatsApp.

Who we share data with

We use the following categories of service provider, each bound by contract to protect your data:

Messaging — Meta Platforms, for delivery of WhatsApp messages.
AI processing — providers who generate automated replies from conversation content.
Workflow and hosting — the automation platform and servers that run our services.
Scheduling — calendar providers, where appointment booking is enabled.
Client records — CRM systems, where a client has asked us to log enquiries.
Email — email delivery and inbox providers, for our own correspondence.

We also disclose data where required by law or to establish or defend legal claims.

International transfers

We operate from the United Kingdom, with personnel and infrastructure in Morocco, the European Union, and the United States. Where data leaves the UK or EEA, we rely on adequacy decisions or standard contractual clauses to protect it.

How long we keep it

WhatsApp conversations — up to 90 days, unless the client we act for instructs a different period in writing.
Appointment and enquiry records — for as long as our client retains them, then deleted or returned on termination.
Website enquiries — up to 24 months from last contact.
Opt-out records — kept indefinitely, so we do not contact you again.
Invoices and accounting records — six years, as required by UK law.

Security

We use encrypted connections, access controls limited to those who need them, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable steps to protect data and will notify affected people and the relevant regulator of a qualifying breach without undue delay.

Your rights

Under UK and EU data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it to another provider. You can also withdraw consent where we rely on it.

Write to privacy@thiqa.xyz and we will respond within one month. If your data was collected through a WhatsApp assistant we run for a business client, we will pass your request to that business and support them in answering it.

If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority.

Our website uses only the cookies necessary to make it work. If we add analytics or advertising cookies, we will ask for your consent first.

Children

Our services are for businesses and are not directed at anyone under 16. We do not knowingly collect data from children. If you believe we hold data about a child, contact us and we will delete it.

Changes

We may update this policy. The current version is always at this address, with the date of the last change shown at the top.

Helyass Ltd · Registered in England and Wales · privacy@thiqa.xyz