Privacy Policy
Effective Date: 31 January 2022
Last updated: 31 May 2023
Your privacy is very important to us. In this document we provide you with information regarding the data we collect, how and why we collect it, and how we store and secure it.
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
1. Contact information
Customers and users of WareBee may contact us via the information provided below.
WareBee ltd
Unit 1, Cambridge House,
Camboro Business Park,
Oakington Road, Girton,
Cambridge,
Cambridgeshire,
CB3 0QH
United Kingdom
Legal Contact
Data protection officer
2. The information we collect
When using our website, app and/or services we collect the following information. If you create an account the following data is processed:
- Your name
- Your email address
- Your company name and address
- Your company payment details
- Your IP Address (anonymised)
- Web browser info (User Agent/type of device)
- Referrer (page viewed by the User) and all the information available on the http header
- Cookie preferences
If you visit our website or use our services the following end user data is processed:
- Your IP Address (anonymised)
- The date and time of the consent
- User agent of the End User’s browser and operating system
- The URL from which the consent was submitted
- An anonymous, random and encrypted key value
- The End User’s consent state, serving as proof of consent
If you visit our website or use our services the following system generated data is processed:
- The type of your browser
- The operating system that you use
- User device data, like screen resolution, and brand (apple/android).
We specifically do not aim our services and products at persons under the age of sixteen (16). If personal data regarding such persons is discovered in our systems the data will be deleted without undue delay.
3. The purposes for which we process information
The information we process can be used for one or multiple of the following purposes:
Account management
When you have an account with us we need to process your personal information to ensure that you can log in and make changes to your subscription, orders, and payment. We also need your personal information to be able to contact you.
Security of your personal information
We take appropriate technical measures for keeping your personal information confidential and protected against accidental or unlawful destruction or loss, alteration, unauthorised disclosure or access. We use technical safeguards measures including Finally, our sub-contractors are contractually bound to keep your personal information secure and confidential, consistent with this Privacy Policy, and are kept up-to-date on our security and privacy practices. The security of your personal information also depends on your protection of your user account. Please use a unique and strong password, and keep your login credentials secret. Also, be sure to log out after having used our services from a shared computer.
Orders and payment
When you place an order or make a payment to us, we need certain personal information to ensure the correct processing of your request, to prevent fraud, and for tax purposes.
Marketing
-
With your consent we process your personal information to be able to send you tailored offers regarding our products and services.
-
In order to analyse how our website and services are used and how we can improve them we use pseudonymised data.
-
We can also use your personal data for personalised advertising.
-
Sending you newsletters
-
If you sign up for our newsletter we need your personal details to send you the newsletter and enable you to unsubscribe.
-
Market research
-
Pseudonymised, anonymised, and aggregated data collected from website visitors to help us improve our services.
-
Your personal data is processed when you fill in questionnaires and/or customer satisfaction ratings
-
Security and error logging
-
We can process personal data for security and error logging and thus, to improve our security and data protection.
4. Legal basis for processing
We always process your personal data with the utmost care. In this section the different legal bases we use are set out. We always process your data on the basis of the consent you give us to do so. We could also process your data if it is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. These legal bases are set out in article 6(1)(a) & (b) of the GDPR.
In order to enter into a contract regarding the purchase of one of our services, you must provide us with the required information. If you do not provide the required information it is not possible for us to deliver our services.
In some cases we are legally obliged to process your data, article 6(1)© GDPR. In that case, we will always inform you of this processing, unless a legal obligation prevents us from doing so.
5. How we protect your data
WareBee has taken technical, organisational and physical security measures to ensure that the data you share with us is protected against all forms of unlawful processing. Examples are: accidental or unlawful destruction, accidental loss, alteration, unauthorised use, unauthorised modification, disclosure and/or access.
For safety and security reasons we cannot disclose the specific measures we have taken. A few broad examples are set out below.
5.1. Confidentiality
This means that we have processes and measures in place to protect your personal data against unintentional, unlawful, or unauthorised access disclosure or theft.
All our personnel are subject to full confidentiality and any third parties hired are obliged to sign a confidentiality agreement if the full confidentiality is not part of the main agreement. All data we process is encrypted to align with best practices for protecting confidentiality and data integrity.
Data is encrypted with Secure Socket Layer (SSL) technology and data which are no longer necessary are destroyed without undue delay. When personal data is accessed by authorised personnel the access is only possible over an encrypted connection. All devices used by personnel have antivirus software.
5.2. Integrity
This means that we have processes and measures in place for the maintenance of, and the assurance of, data accuracy and consistency. Access to personal information is only possible on a need to know basis and there are processes in place for identification and authentication of persons wanting access. There are also processes in place for erasure or rectification of incorrect information.
5.3. Availability
This means that we have processes and measures in place to ensure the timeliness and reliability of access to and use of data. We use the extensive features of the cloud environment to ensure high availability, like full redundancy, load balancing, automatic capacity scaling, continuous data backup and geo-replication along with a traffic manager for automatic geographical failover on data-center level disasters. All failover mechanisms are fully automated.
All data centers where your personal information is stored are within the EU and comply with industry standards such as ISO270001 for physical security and availability.
5.4. Data breach notification
We do our best to prevent any kind of unauthorised access to your personal data. In the event that your data is compromised, we have internal procedures and policies on how to handle these situations. We will notify you and the competent Supervisory Authority(ies) within 72 hours with information about the extent of the breach, affected data, any impact on our services and our plan for measures to secure the data, and limit any further negative effects on the data subjects.
6. How we use cookies
For information on our use of cookies, we refer you to our Cookie Policy.
Do not track signals
We do not track your online behavior over time and across different internet websites or online services. However, some of the third-party services we use may do so. If you want to prevent them from tracking you, you can do so right from your browser. Location and transfer of your personal information We use third party service providers including Google Ads, Vimeo, Google Analytics, Datadog, Hotjar, All such service providers are contractually bound to keep your personal information secure and confidential and to use it only for the above purposes, consistent with this Privacy Policy. You understand and accept that data protection legislation applicable to such service providers may not be as protective as in your country of residence. By accepting this Privacy Policy, you consent to such use of your personal information by these third party service providers. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
7. Third parties
In principle, WareBee does not sell, trade or otherwise transfer your personal data to third parties.
This does not include trusted third parties or subcontractors who assist us in providing our services and products. Such trusted parties may have access to personally identifiable information on a need-to-know basis and will be contractually obliged to keep your information confidential.
We may also release your information when we believe release is appropriate to comply with the law, enforce our policies, or protect our and/or others’ rights, property, or safety. Furthermore, non-identifiable information may be provided to other parties for marketing, advertising, or other purposes.
We will not disclose personal data to law enforcement or other supervisory authorities, unless our customers instruct us to do so or if we are compelled by law to do so. In those cases, we will limit the disclosure to the data which are requested and strictly necessary to comply with the request. If we are compelled to disclose your data, we will notify you and provide you with a copy of the demand unless we are legally prohibited from doing so.
7.1 Sub processors
The Processor, WareBee Ltd., has sub-contracted (part of) the processing of the Personal Data to the following Sub-Processors:
7.1.2 WareBee Sub-Processor
With whom we share the collected personal information
We employ third party companies and individuals (‘Service Providers’) to facilitate and make our website accessible to our visitors. We share and disclose your personal information with these tools. They use cookies and other tracking technologies. Such tools are created and managed by parties outside our control. As such, Secure Privacy is not responsible for what information is actually captured by such third parties or how such third parties use and protect that information. These service providers have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. They may track your online behavior over time and across different internet websites or online services. We share or disclose your personal information with the following third-party service providers:
Analytics:
We use a 3rd party analytical software to gather statistical information about our website visitors. The services we use include:
| Service Name | Location of Data processing | Description / Purpose |
|---|---|---|
| Google LLC. | EU/US | Analytics: measuring usage, SEO |
| Woopra LLC. | EU/US | Analytics: measuring usage, SEO |
| Twillio Inc. | EU/US | Analytics: Segment CDP measuring usage |
| Fullstory Inc. | EU/US | Analytics: Heatmaps |
Advertisement & Social Media:
We may use third-party services to measure and personalise content. These services may share content you provide to 3rd party. These include: {% table %}
| Service Name | Location of Data processing | Description / Purpose |
|---|---|---|
| Google LLC. | EU/US | Advertising |
| Microsoft Inc. | EU/US | Social Network advertising, SEO |
| LinkedIn Inc. | EU/US | Social Network advertising |
| Facebook Inc. | EU/US | Social Network advertising |
| Twitter Inc. | EU/US | Social Network advertising |
Third-party sub-processors (Billing/Support):
| Service Name | Location of Data processing | Description / Purpose |
|---|---|---|
| Stripe Inc. | EU/US | Payment & Billing |
| Hupspot Inc. | EU/US | CRM / Chat Support |
8. Where your data is stored
WareBee stores all personal data in databases located in the European Economic Area (EEA). In certain cases some of our subcontractors or trusted third parties may transfer personal data outside the European Union, but only if this is necessary for the provision of their services. These parties all have implemented adequate safeguards to guarantee the protection and security of your data.
9. Your rights
If we process your personal data, you have the certain rights flowing from the GDPR. Aside from these rights you can always withdraw your consent. If you do so, we will not process any more of your personal data from that point in time.
You have the following data protection rights (Summary):
- The right to access to your data
- The right to update or correct your data
- The right to object to the use of your data
- The right to restrict the use of your data
- The right to transfer your data to another data controller
- The right to the erasure of your data
- The right to withdraw consent
- The right to non-discrimination related to the exercising of your rights under the GDPR and CCPA
- The right to obtain information about the personal data we have collected from you and sold or – disclosed to other subjects, if you are a California resident
- The right to opt-out from sales of your personal information to third parties
- In addition, if you are a California resident, you have the right to request from us to disclose to you the following:
- The categories of personal information we have collected about you.
- The categories of sources from which the personal information is collected.
- The categories of third parties with whom we share personal information.
- The specific pieces of personal information we have collected about you.
9.1. Right of access
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed by us and if that is the case access to that information.
9.2. Right to rectification
You have the right to correct and/or complete personal data concerning yourself if those data are incorrect and/or incomplete. We will correct this without undue delay.
9.3. Right to erasure
You may require us to have your personal information deleted and we shall be obliged to erase that information immediately if one of the following situations applies:
- Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- You revoke your consent and there is no other legal basis for processing.
- You object to the processing and there are no other legitimate grounds for processing.
- Your personal data have been processed unlawfully.
- Your personal data have to be erased for compliance with a legal obligation.
9.4. Right to restriction of processing
You may at any time request us to restrict processing of your personal data if one of the following situations applies:
- If you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.
- If the processing is unlawful and you would rather restrict the use of your personal data as opposed to the erasure.
- If we no longer need the personal data for the purposes of the processing, but we are required by you for the establishment, exercise or defence of legal claims.
- If you have objected to the processing pending the verification whether our legitimate grounds override yours.
9.5. Notification obligation
If you invoke your right to rectification, erasure or restriction of processing we shall communicate this to all recipients to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. Upon your request we will inform you about those recipients.
9.6. Right to data portability
You have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and transmit those data to another party without hindrance from us. If you wish, the personal data can also be transferred directly to a third party of your choice, where technically feasible.
9.7. Right not to be subjected to automated individual decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This does not apply if:
- It is necessary for entering into, or performance of, a contract;
- It is authorised by EU or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests;
- It is based on your explicit consent.
9.8. Right to complain with a competent supervisory authority
You have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against GDPR. Names and contact information of the competent supervisory authorities in the European Union can be found at Overview EU DPAs.
The supervisory authority to which the complaint has been submitted shall inform you of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
9.9. How can you exercise your rights as the owner of personal information
You may submit your requests to exercise your right under the GDPR and CCPA by:
- By email: legal@warebee.com
Please note that we may ask you to verify your identity before responding to such requests. You have the right to complain to a Data Protection Authority about our collection and use of your personal information. For more information, please contact your local data protection authority.
10. Data retention – How long do we store your Personal Data?
Personal data processed by WareBee will be deleted as soon as they are not necessary anymore for the provision of our services and products or after the contract between us and the customer ends.
In the Cookie Policy all retention periods regarding cookies can be found. These retention periods affect all website visitors and all visitors on websites of customers of WareBee.
All retention periods regarding personal data processed regarding our customers can be found in the Agreements concluded between us, including the Terms of Service Agreement.
When permitted and in compliance with applicable laws and regulations, Your Personal Data will be deleted upon your request or as soon as it is no longer serving the purpose for which it has been collected. If regulations require longer storage of your Personal Data, or if we need your Personal Data to assert legal claims or defend against legal claims, we will store your Personal Data until the expiration of the corresponding storage period or until the settlement of the claims.
11. General terms and conditions
Please see our Terms of Service Agreement for further information about the use, availability and maintenance of our services and products, the prices, liability, non-disclosure, and other general terms.
12. Links to third-party Websites
Our service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
13. Protecting your child’s privacy
Our Service does not address anyone under the age of 16 (‘Children’). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children have provided us with Personal Data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.
14. Hosting and backend infrastructure
Amazon Web Services Inc. Seattle, United States The Services is hosted on AWS services. They provide us with the online platform that allows us to provide the Service to you. Your information, including Personal Data, may be stored through AWS data storage, databases and the general AWS applications. They store your data on secure servers behind a firewall.
Description of processing, Sub-processor name and processing location
- (Default) Hosting location for European Customers: European Union, e.g., Ireland, United Kingdom
- (Upon specific request) Hosting location for Customers in the United States and Canada: United States
- Privacy Policy: Amazon Web Services (AWS) privacy policy: https://aws.amazon.com/privacy/
15. Traffic optimization and distribution
Cloudflare, Inc., San Francisco, United States Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
Description of processing, Sub-processor name and processing location
| Service Name | Location of Data processing | Description / Purpose | Privacy Policy |
|---|---|---|---|
| Cloudflare | Globally | Data of European Customers will be processed within the EU. | https://www.cloudflare.com/privacypolicy/ |
Changes to this policy
Within the limits of applicable law, the Company reserves the right to review and change this Policy at any time. As long as you are using the Services, you are responsible for regularly reviewing this Policy. Continued use of the Services after such changes are performed shall constitute your consent to it.
Contact us
If you have any questions about our Security Practices or this Policy, please contact us at
- By email: legal@warebee.com
- By visiting this page on our website: warebee.com/legal/