---
title: "Weftd - Privacy Policy"
description: "Learn how Weftd collects, uses, and protects your personal data, in compliance with the GDPR."
url: https://www.weftd.com/privacy
locale: en
alternates:
  en: https://www.weftd.com/privacy
  fr: https://www.weftd.com/fr/privacy
---

# Privacy Policy

_Last updated: 9 July 2026_

At WEFTD, protecting your personal data is a priority. When you use the website weftd.com (the “Site”), we collect personal data relating to you. The purpose of this policy is to inform you of how we process this data in compliance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”).

## 1. Who is the data controller?

The data controller is Mr. Mathieu BUONOMO, acting on behalf of WEFTD, a French simplified joint-stock company (SAS) currently being incorporated, whose registration with the French Trade and Companies Register is pending (“We”/“Us”).

_This information will be updated once the company is definitively registered._

## 2. What data do we collect?

Personal data is any data that allows an individual to be identified, directly or by cross-referencing with other data.

We collect data falling within the following categories:

- Identification data, in particular your name, first name and email address, when you subscribe to our newsletter or contact us;
- Where applicable, data relating to your professional activity (company name, position held, sector of activity), if you choose to provide it;
- Any information you wish to send us as part of your enquiry;
- Browsing data (for example, your IP address, connection data and cookies) – see section 7 on cookies.

_Mandatory data is identified as such when you provide it to us (for example by an asterisk) and is necessary to provide you with our services._

## 3. On what legal basis, for what purposes and for how long do we retain your personal data?

| Purposes | Legal bases | Retention periods |
| --- | --- | --- |
| Sending you newsletters, offers and promotional messages (commercial prospecting) and maintaining a prospect database | If you are an individual consumer (B2C): your consent. If you act on behalf of a business (B2B): our legitimate interest in retaining and informing our prospects of our latest news | 3 years from your last contact with Us, or until you withdraw your consent |
| Responding to your enquiries and contacting you back where appropriate | Performance of pre-contractual measures taken at your request | 3 years from your last contact |
| Measuring the Site's audience and, where applicable, offering you targeted advertising, by means of cookies | Your consent, collected via the cookie management module (except for cookies strictly necessary for the Site to function, based on our legitimate interest) | Cookie lifespan: 13 months maximum. Retention of your choice: 6 months maximum |
| Managing requests to exercise your rights | Our legitimate interest in responding to your requests and keeping track of them | Proof of identity: kept only for the time needed for verification, then deleted. Objection to prospecting: kept for 3 years |

## 4. Who are the recipients of your data?

The following will have access to your personal data:

- WEFTD staff;
- Our processors, in particular our hosting provider (Vercel Inc.) and, where applicable, our email/newsletter service providers and customer relationship management (CRM) tools;
- Where applicable, public and private bodies, solely to comply with our legal obligations.

## 5. Is your data likely to be transferred outside the European Union?

The Site is hosted by Vercel Inc., whose registered office is located in the United States (340 Pine Street, Suite 900, San Francisco, CA 94104). Your data may therefore be transferred to, and stored, outside the European Union in this context, as well as in the context of the other tools we use (see section 4 above).

Such transfers are, depending on the case, governed by one of the following safeguards:

- the data is transferred to a country covered by an adequacy decision of the European Commission, in accordance with Article 45 of the GDPR (for example under the EU–U.S. Data Privacy Framework, where the recipient is certified);
- the data is transferred to a country whose level of protection has not been recognised as adequate, on the basis of appropriate safeguards under Article 46 of the GDPR, in particular standard contractual clauses approved by the European Commission;
- the data is transferred on the basis of one of the other appropriate safeguards described in Chapter V of the GDPR.

_You may contact us using the details in section 8 for further information on the safeguards implemented._

## 6. What are your rights over your data?

You have the following rights with respect to your personal data:

- Right to information: this is precisely why we drafted this policy (Articles 13 and 14 GDPR);
- Right of access: you have the right to access all of your personal data at any time (Article 15 GDPR);
- Right to rectification: you have the right to rectify inaccurate, incomplete or outdated personal data (Article 16 GDPR);
- Right to restriction: you have the right to obtain the restriction of processing of your data in certain cases (Article 18 GDPR);
- Right to erasure: you have the right to require your personal data to be erased, in the cases provided for (Article 17 GDPR);
- Right to lodge a complaint with a competent supervisory authority (Article 77 GDPR) – in France, the CNIL (Commission Nationale de l'Informatique et des Libertés) – or with the supervisory authority of your habitual residence, place of work, or of the place of the alleged infringement;
- Right to issue instructions regarding the retention, deletion and disclosure of your personal data after your death;
- Right to withdraw your consent at any time, for processing based on consent (Article 7 GDPR), without affecting the lawfulness of processing carried out before withdrawal;
- Right to data portability: subject to certain conditions, you have the right to receive the data you provided to us in a structured, machine-readable format and to have it transmitted to a third party of your choice (Article 20 GDPR);
- Right to object: you have the right to object to the processing of your personal data (Article 21 GDPR), subject to legitimate grounds or the defence of legal claims that we may raise.

_You may exercise these rights by writing to us at the details in section 8. We may ask you to provide additional information or documents to verify your identity._

## 7. Cookies

A cookie is a file placed on your device (computer, tablet, smartphone) when you browse the Site.

The Site uses the following cookies:

- Cookies strictly necessary for the Site to function, placed without prior consent (based on our legitimate interest);
- Audience measurement cookies, used to establish Site visit statistics;
- Where applicable, targeted advertising cookies, used to offer you advertising content adapted to your browsing.

_Except for strictly necessary cookies, the placing of these cookies is subject to your prior consent, collected via the cookie management module displayed on your first visit to the Site. You may withdraw or change your consent at any time via this module, generally accessible at the bottom of the Site. For more information on your rights regarding cookies, you may consult the relevant guidance of your local data protection authority, or the CNIL (cnil.fr) as the authority competent for WEFTD._

## 8. Contact point for personal data matters

Contact email: contact@weftd.com

## 9. Changes

We may amend this policy at any time, in particular to comply with any regulatory, case-law, editorial or technical developments. Such amendments will apply from the effective date of the amended version. You are invited to regularly consult the latest version of this policy. We will keep you informed of any significant changes.

_This English version is provided for information purposes only; in the event of any discrepancy between language versions, the French version shall prevail. Effective date: 9 July 2026_