Document ID: WBL-POL-PP-v1.0 · Effective Date: 19 February 2026 · Data Controller: Webility SRL/BV
Webility SRL/BV ("Webility", "we", "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Belgian law.
1. Who We Are
| Data Controller | Webility SRL/BV |
| Registered Address | Avenue Louise 54, 1050 Brussels, Belgium |
| Paris Office | 12 Rue de la Paix, 75002 Paris, France |
| Privacy Contact | privacy@webility.local |
2. Data We Collect
2.1 Information You Provide
| Data Category | Examples | When Collected |
|---|---|---|
| Contact information | Name, email, phone, company name | Contact forms, quote requests, email |
| Project information | Brief, requirements, assets | During client engagement |
| Billing information | Name, address, VAT number | Invoicing and payment |
| Account credentials | Platform logins, API keys | Project onboarding (secured per our Security Policy) |
2.2 Information Collected Automatically
| Data Category | Examples | Purpose |
|---|---|---|
| Usage data | Pages visited, time on page, device type | Website analytics |
| Technical data | IP address, browser type, OS | Security and performance |
| Cookies | Session cookies, analytics cookies | See our Cookie Policy |
3. Legal Basis for Processing (GDPR)
| Processing Activity | Legal Basis |
|---|---|
| Responding to contact form inquiries | Legitimate interest / Consent |
| Delivering client services | Contract performance |
| Invoicing and payment | Legal obligation (Belgian tax law) |
| Marketing emails | Consent (explicit opt-in only) |
| Website analytics | Legitimate interest (anonymised data) |
| Compliance and legal defence | Legal obligation / Legitimate interest |
4. How We Use Your Data
We use your data to:
- Respond to inquiries and provide quotes
- Deliver the services you have contracted with us
- Issue and process invoices
- Communicate project updates, feedback requests, and progress reports
- Send marketing communications (only with consent; you may opt out at any time)
- Improve our website and services
- Comply with legal and regulatory obligations
5. Data Retention
| Data Category | Retention Period | Reason |
|---|---|---|
| Client project data | 7 years from project close | Belgian tax and commercial law |
| Invoices and financial records | 7 years | Belgian accounting law |
| Contact form submissions (non-client) | 12 months | Follow-up and service improvement |
| Marketing email consent | Until withdrawn | Consent-based |
| Website analytics (anonymised) | 26 months | Google Analytics default |
| Security logs | 90 days | Incident investigation |
6. Who We Share Your Data With
We do not sell your personal data. We share data only as necessary:
| Recipient | Purpose | Location |
|---|---|---|
| Payment processors (Stripe, bank) | Processing invoices and payments | EU / EEA |
| Cloud storage (Google Workspace, Notion) | Project file storage and collaboration | EU / US (SCC) |
| Email service providers | Sending project communications | EU / US (SCC) |
| Website analytics (Google Analytics) | Anonymous usage analytics | US (DPA in place) |
| E-signature providers | Contract execution | US (SCC) |
| AI tools | See our AI Use Policy | Various |
| Legal or regulatory authorities | When required by law | Belgium / EU |
| Subcontractors | Project delivery support | EU (contractual protections) |
All third-party processors are bound by appropriate data processing agreements or standard contractual clauses (SCCs). When Webility processes personal data on behalf of a client, our Data Processing Agreement applies.
7. International Data Transfers
Where personal data is transferred outside the EU/EEA, we ensure protection through:
- Adequacy decisions recognised by the European Commission
- Standard Contractual Clauses (SCCs) issued by the European Commission
- Certification schemes such as the EU-US Data Privacy Framework
8. Your Rights Under GDPR
| Right | What It Means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your data (where legally permitted) |
| Restriction | Request that we limit processing of your data |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interest or for direct marketing |
| Withdraw consent | Withdraw consent at any time without affecting prior lawful processing |
To exercise any of these rights, contact us at privacy@webility.local. We will respond within 30 days.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA):
- Website: autoriteprotectiondonnees.be
- Address: Rue de la Presse 35, 1000 Brussels
9. Cookies
We use cookies on our website. For full details, see our Cookie Policy.
10. Security
We implement technical and organisational measures to protect your personal data, including encrypted storage and transmission (TLS/SSL), access control, role-based permissions, and regular security reviews. No transmission method over the Internet is 100% secure, but we maintain industry-standard protections.
11. Changes to This Policy
We will notify you of material changes with 30 days' advance notice via email or website notice. The version history is recorded in the changelog below.
12. Contact
Email: privacy@webility.local Post: Webility SRL/BV, Data Protection, Avenue Louise 54, 1050 Brussels, Belgium
Policy Changelog
| Version | Date | Summary |
|---|---|---|
| v1.0 | 2026-02-19 | Initial publication |