Privacy policy

1. Data controller

The controller is LE DEPOT Studio SRL, established at Bd de l’Empereur 10, 1000 Bruxelles, Belgique, company number 1002.812.625, VAT BE1002812625. Contact: [email protected] — +32 451 05 56 99.

2. Data covered

In the current demo, the business name and reward entered remain in the browser page and are not sent to a server. The language choice is stored locally in the browser.

• Contact and account details supplied in an enquiry, registration or conversation with wefid.
• Business information needed to configure and invoice a professional subscription.
• Technical data such as IP address, browser, device and security logs when generated by hosting or security services.
• Loyalty data processed for client businesses, including member identifiers, visits, points, rewards and communication preferences.
• Information supplied to book a demonstration or join the franchise newsletter, including identity, professional contact details, brand and number of locations.

3. Purposes and legal bases

• Providing the service and managing accounts: performance of a contract.
• Answering pre-contractual enquiries: steps taken at the individual’s request.
• Invoicing and accounting: legal obligation.
• Securing, maintaining and improving the service: wefid’s legitimate interests, balanced against individual rights.
• Marketing communications where required by law: consent, which may be withdrawn at any time.

4. Roles in the loyalty programme

For member data in a programme created by a business, that business determines the purposes and generally acts as controller. wefid processes the data as processor under a data processing agreement. The business must provide its own notice to members and rely on a valid legal basis.

5. Recipients and providers

Access is limited to authorised wefid personnel and providers needed to operate the service. Hostinger hosts the website. Cal.com manages appointment booking when used. Stripe processes online payments and fraud-prevention data. The application infrastructure also uses Keycloak for authentication.

Any other technical provider receives only the data needed for its hosting, communication, support or security task. wefid checks appropriate contractual and data-protection commitments before entrusting processing to a provider.

6. Transfers outside the EEA

Where a provider processes data outside the EEA, wefid relies on a GDPR-recognised mechanism such as an adequacy decision or Standard Contractual Clauses, with additional safeguards where needed. Information from Hostinger, Cal.com and Stripe describes their processing locations and safeguards.

7. Retention

Contact, demonstration and information requests are kept while they are handled and afterwards only for a reasonable period needed for the commercial relationship and evidence of exchanges. Newsletter subscriptions are kept until unsubscribe or until their purpose ends.

Account data is kept during the contract and afterwards for applicable legal duties or the defence of claims. Accounting records follow Belgian statutory periods. Technical logs are limited to security and diagnostics. At the end of a programme, data processed for a business is returned or deleted under the contract unless the law requires retention.

8. Your rights

You may request access, rectification, erasure, restriction, portability or object to certain processing by writing to [email protected]. You may withdraw consent at any time. A proportionate identity check may be requested.

You may also lodge a complaint with the Belgian Data Protection Authority or the competent authority in your country of residence.

9. Cookies and local storage

The site remembers the selected language in local browser storage. Cal.com, Stripe and sign-in functions may use session, security or preference cookies needed to operate. No advertising tool is currently integrated. Any future non-essential tracking will include information and consent controls where required.

10. Security and updates

wefid applies technical and organisational measures proportionate to the risk. This policy may change with the service or the law; the update date will remain visible at the top of this page.