Privacy Policy

Last updated 27 October 2026

This policy explains what personal data the Weebo website collects, why, who sees it and what you can do about it. It follows the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018.

1. Who we are

Weebo Enterprises Ltd (“Weebo”, “we”) is the controller of the personal data described here. We are a digital marketing agency registered in Cyprus under number HE332874.

Address

Aftokratora Theofilou 2, Misha Court 6, Flat 104, 8027 Pafos, Cyprus

Email

weeboltd@gmail.com

Phone

+357 96 902 855

Write to us at any of these for anything about your data.

2. What this policy covers

This policy covers weebo.software and the enquiries you send us, through the website, by email or by phone.

When we run marketing for a client, we handle their customers' data on that client's instructions, under our agreement with them. The client's own privacy policy applies to that data.

3. What we collect and why

You don't have to give us any personal data to read this website. To get a reply from us, we need at least your email address.

Messages you send us

The forms on the Contact and Support pages and in the footer send us:

• your email address and message;
• your name, phone number and subject, if you fill them in;
• the address of the page you sent the form from.

The form emails these to our mailbox. The website itself keeps no copy. The same applies when you email or call us directly.

We use them to answer you and, if you ask for one, to prepare a quote. Legal basis: steps you ask us to take before a possible contract (Art. 6(1)(b) GDPR), and our legitimate interest in answering enquiries (Art. 6(1)(f)).

Spam protection on the forms

To stop automated spam, the website counts how many messages arrive from one internet connection. When you send a form, it stores a one-way coded (hashed) version of your IP address for 10 minutes and then deletes it automatically. A nightly backup taken in those 10 minutes may contain it until the backup is deleted after 7 days.

Legal basis: our legitimate interest in keeping the website secure (Art. 6(1)(f)).

Comments on blog posts

If you comment on a post, we store your name, email address and comment, the time, your IP address and your browser's user-agent string. We check comments before they appear.

Once a comment is approved, your name and comment are public. Your email address and IP address are never shown. We don't send your email address to Gravatar or any other service.

Legal basis: your consent, which you give by posting the comment (Art. 6(1)(a)). The IP address and browser details rely on our legitimate interest in preventing spam (Art. 6(1)(f)).

Server logs

Like every web server, ours records each request it receives:

• your IP address;
• the date and time;
• the page or file requested and the result;
• the page you came from;
• your browser's user-agent string.

We use these logs only to keep the site working and secure, for example to find faults and block attacks. Repeated failed sign-in attempts on the site's admin area get that IP address blocked for a short time.

Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f)).

The map on our Contact page

Google's map is not loaded until you click Show map. Once you click, your browser connects to Google. Google receives your IP address and browser details and may set its own cookies. Google handles that data under its own privacy policy.

We don't remember your choice. On your next visit the map is off again until you click. The Open in Google Maps link takes you to Google's own website.

Legal basis: your consent, which you give by clicking (Art. 6(1)(a)).

We don't use your data for automated decisions or profiling, and we don't sell it or share it for advertising.

4. Cookies

This website sets no cookies while you browse it. It has no analytics and no advertising or social-media tracking. Our fonts and scripts load from our own server, so a visit doesn't tell any other company that you were here. That's why you don't see a cookie banner.

Cookies are set only in these cases:

You can delete cookies at any time in your browser's settings.

5. Who receives your data

These companies process data for us:

• DigitalOcean, LLC hosts the website on a server in Frankfurt, Germany. That covers the website's data, its backups and the server logs.
• Google (Gmail) hosts our weeboltd@gmail.com mailbox, where your messages arrive.
• [TO CONFIRM: service that sends the website form emails, e.g. Brevo] delivers the website's form messages to our mailbox.

Google receives data only if you load the map, and then as a separate controller, as described above.

We may disclose data when the law requires it, for example to a court or the police. We never sell it.

6. Transfers outside the EU

Our website server is in Germany, in the EU. DigitalOcean is a US company. Any access to the data from the US is covered by DigitalOcean's certification under the EU–U.S. Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback, under its Data Processing Agreement. If another provider we use processes data outside the EU, we rely on the same kind of safeguards.

7. How long we keep it

8. Your rights

Under the GDPR you have the right to:

• access the data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• delete your data;
• restrict how we use it;
• object to uses based on our legitimate interest;
• receive data you gave us in a common format, or have it sent to someone else;
• withdraw consent at any time. This doesn't affect what we did before.

To use any of these rights, email weeboltd@gmail.com or write to our address. It's free. We reply within one month and may ask you to confirm who you are first.

9. Complaints

If you think we have mishandled your data, please tell us first so we can put it right. You can also complain to the supervisory authority in Cyprus:

You can also complain to the authority in the EU country where you live or work.

10. Children

Our services are for businesses. We don't knowingly collect data from children under 14, the age of digital consent in Cyprus.

11. Security

The site only works over an encrypted connection (HTTPS). We keep its software up to date and limit the admin area to our team, with protection against password guessing. The site runs no third-party plugins.

12. Changes to this policy

When we change this policy, we update this page and the date at the top. If a change affects how we use data you have already given us, we tell you before it applies.