Privacy Policy - Wawa Llama Ltd (AI Avalanche)

Privacy Policy

Last updated: August 27, 2025
Notice: July 2025 We’ve moved our membership platform to Memberstack and Webflow. This change is part of our ongoing effort to improve speed, reliability, and user experience. As part of this upgrade, your account data (such as your name, email address, and membership status) will be securely transferred to the new system. This data will continue to be processed in accordance with our existing lawful bases and only for the same purposes as originally collected. Memberstack and Webflow will act as GDPR-compliant data processors on our behalf, under appropriate Data Processing Agreements.

This Privacy Notice for Wawa Llama Ltd (doing business as “AI Avalanche" or "AI Black Magic", “we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

  • Visit our website at https://aiavalanche.com, or any other site of ours that links to this privacy notice
  • Purchase our digital products or subscriptions, or engage with our store
  • Use any related services, sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@aiavalanche.com.

Summary of Key Points

  • What personal information do we process? We collect information you provide (e.g., name, email) and certain device data automatically.
  • Do we process sensitive information? We do not intentionally collect or process sensitive personal information (see definition below).
  • How do we process your information? We process it to provide and improve our Services, manage orders and subscriptions, send transactional emails, and for security/fraud prevention.
  • When and with whom do we share personal information? We share it with service providers (hosting, payment, analytics, email, automation) as necessary; we do not sell it.
  • How long do we keep your information? We keep it indefinitely unless you request deletion (subject to legal and accounting obligations).
  • What are your rights? Depending on your location, you may have certain rights regarding your personal information, including the right to delete your data upon request.
  • How can you exercise your rights? Contact us at hello@aiavalanche.com or see Section 14 below.

Table of Contents

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHAT LEGAL BASES DO WE RELY ON?
  4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  6. HOW LONG DO WE KEEP YOUR INFORMATION?
  7. HOW DO WE KEEP YOUR INFORMATION SAFE?
  8. DO WE COLLECT INFORMATION FROM MINORS?
  9. WHAT ARE YOUR PRIVACY RIGHTS?
  10. CONTROLS FOR DO-NOT-TRACK FEATURES
  11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
  12. DO WE MAKE UPDATES TO THIS NOTICE?
  13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Provide

In Short: We collect personal information you choose to provide, such as your name and email address, when you use our Services.

We collect personal information that you voluntarily give us—for example, when you make a purchase or contact us for support. This may include:

  • Names
  • Email addresses
  • Phone numbers (if provided)

Sensitive Information: We do not intentionally collect or process what is defined as “sensitive personal information,” including, for example, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, or data concerning sex life or sexual orientation. If you choose to provide such information without our request (e.g., through open text fields or messages), it will be treated like other personal data under this policy.

Information Automatically Collected

In Short: Some information (e.g., IP address, device info) is collected automatically when you visit our websites.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser type, operating system, and the pages you view. We also use cookies or similar technologies to collect analytics and usage data.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your data to provide, improve, and administer our Services, manage orders and subscriptions, send emails, and for security/fraud prevention.

  • Account Creation & Management: We automatically create a user account for each purchase so you can manage orders, downloads, or subscriptions.
  • Order Fulfillment: We use your information to process and deliver products, including subscriptions.
  • Transactional Emails: We send order confirmations, receipts/invoices, or support messages (via Mailgun).
  • Marketing (With Consent): We may send promotional emails through Omnisend if you opt in. Unsubscribe anytime.
  • Analytics & Site Improvement: We use tools like Google Analytics, Facebook Pixel, TikTok Pixel, and Google Ads to understand site usage and improve user experience.
  • Security & Fraud Prevention: We may process your information to protect our Services and users.
  • Automations: We use Zapier to connect systems and securely automate workflows.

3. WHAT LEGAL BASES DO WE RELY ON?

In Short: We only process your personal information when we have a valid legal reason to do so (e.g., your consent, performance of a contract, legitimate interests, or legal obligations).

If you are located in the EU/UK/EEA, we generally rely on consent, performance of a contract (like fulfilling your order), legitimate interests, or compliance with legal obligations. If you are in Canada, we may rely on express or implied consent. You can withdraw your consent at any time—just contact us.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share data with service providers as needed to run our business and provide Services to you.

  • Payment Processors: Stripe and PayPal handle billing. We do not store full payment details; Stripe/PayPal may store billing tokens or info for recurring charges.
  • Hosting Provider (Kinsta): Your data may be processed on cloud servers located outside your region.
  • Subscription Plugin: We use a plugin to manage recurring subscription payments and user data.
  • Quaderno (Invoices): We share necessary billing details to generate invoices and comply with tax obligations.
  • Mailgun (Transactional Emails): We use Mailgun to deliver transactional emails such as order confirmations and support communications.
  • Zapier (Automations): We use Zapier to automate secure data flows between our systems and services.
  • Third-Party Contractors: If you request custom AI services, we may share your contact details with trusted contractors assisting us with project fulfillment.
  • Marketing/Analytics Services: Google Analytics, Google Ads, Facebook Pixel, TikTok Pixel, Omnisend.

We do not share or sell your personal data to unrelated third parties for their direct marketing.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes, we use cookies and similar tracking technologies (e.g., web beacons, pixels) to collect and store information.

We use these to enhance your experience, analyze usage, and serve relevant ads. We also have a cookie banner for user consent or settings. If you disable cookies, some parts of the Services may not function properly.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information indefinitely unless you request deletion, subject to any legal or accounting obligations.

We retain data as long as necessary to fulfill the purposes described in this policy or for legitimate business needs (e.g., order history, subscription management, legal compliance). If you wish to have your personal data deleted, please request it (see Section 14). However, we may keep certain records (e.g., invoices, transaction logs) if required by law or for accounting.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your information through technical and organizational security measures.

We use secure hosting, encryption where appropriate, and other safeguards to protect data from unauthorized access. However, no electronic transmission or storage is 100% secure. Use our Services at your own risk.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18.

By using the Services, you represent that you are at least 18 or the parent/guardian of a minor using the Services with consent. If we learn that personal information from users under 18 has been collected, we will take reasonable steps to delete it. Please contact us if you become aware of any data from children under 18.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you may have rights such as requesting access, deletion, or correction of your personal data.

  • EU/UK/EEA/Canada Residents: You may have the right to request access, rectification, or erasure of your personal data, or to object to its processing.
  • Withdrawing Consent: If you opted in to marketing emails, you can unsubscribe anytime. Transactional emails (e.g., receipts) are still sent as needed.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers include a “Do-Not-Track” (DNT) feature. No uniform standard for recognizing DNT signals has been adopted. We do not respond to DNT signals currently.

11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, you have specific privacy rights regarding access to your personal information.

Under the “Shine The Light” law, California residents may request once a year, free of charge, information about categories of personal data (if any) disclosed to third parties for direct marketing. We do not share your data with third parties for their own direct marketing.

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we update this notice as necessary.

The updated version will be indicated by an updated “Last Updated” date and will be effective as soon as it is accessible. If we make significant changes, we may notify you by email or post a notice on our Services. This policy was most recently updated on August 27, 2025 to include Mailgun and Zapier as data processors.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO):

  • Name: Matthew Hitcham
  • Email: hello@aiavalanche.com
  • Phone: +44 7732034305
  • Address:
    Wawa Llama Ltd
    6 Norfolk Street
    Whitstable, Kent CT5 4HB
    United Kingdom