Legal

Privacy Policy

Last updated: 21 May 2026

WeKomply ("WeKomply", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard personal data when you visit our website, in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection law.

1. Data controller

The data controller responsible for the processing of your personal data is:

WeKomply
Email: privacy@wekomply.com

2. Personal data we collect

We collect only the personal data necessary to operate, secure, and improve our website.

Information you provide

If you contact us by email or via a form on our website, we process the information you choose to share with us — typically your name, email address, company, and the contents of your message.

Information collected automatically

When you visit our website, certain technical information is automatically logged for security, reliability, and abuse prevention. This includes your IP address, browser type and version, device and operating system information, referring URL, pages visited, and the date and time of your visit.

Cookies

We use only strictly necessary cookies that are required for the website to function and to keep it secure. These cookies do not track you for marketing or analytics purposes and do not require your consent under the ePrivacy Directive.

3. Purposes and legal basis for processing

We process your personal data for the following purposes:

  • Operating and securing the website — including hosting, content delivery, and protection against attacks and abuse. Legal basis: our legitimate interest in providing a stable and secure service (GDPR Art. 6(1)(f)).
  • Responding to inquiries — handling messages you send us through email or website forms. Legal basis: your consent and/or steps taken prior to entering into a contract (GDPR Art. 6(1)(a) and 6(1)(b)).
  • Compliance with legal obligations — where required by applicable law. Legal basis: GDPR Art. 6(1)(c).

4. Recipients and processors

We do not sell your personal data. We share personal data only with service providers acting as our data processors, under written data processing agreements that meet the requirements of GDPR Art. 28:

  • Cloudflare, Inc. — provides hosting, content delivery, DNS, and security services (including DDoS protection and bot mitigation) for our website.

Personal data may also be disclosed to public authorities where we are required to do so by law.

5. International transfers

Some of our service providers, including Cloudflare, are established outside the European Economic Area (EEA). When personal data is transferred outside the EEA, we ensure an adequate level of protection by relying on the European Commission's Standard Contractual Clauses (SCCs) and, where appropriate, supplementary technical and organisational measures.

6. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

  • Server and security logs are typically retained for up to 30 days.
  • Email correspondence is retained for as long as needed to handle your request and, where relevant, to document our business relationship.

7. Your rights

Subject to the conditions set out in the GDPR, you have the following rights in relation to your personal data:

  • The right of access to your personal data (Art. 15).
  • The right to rectification of inaccurate data (Art. 16).
  • The right to erasure ("right to be forgotten") (Art. 17).
  • The right to restriction of processing (Art. 18).
  • The right to data portability (Art. 20).
  • The right to object to processing based on legitimate interests (Art. 21).
  • The right to withdraw consent at any time, where processing is based on consent (Art. 7(3)). Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at privacy@wekomply.com. You also have the right to lodge a complaint with your local data protection supervisory authority. In Denmark, this is the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk).

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, and destruction. These include encryption in transit (TLS), access controls, and use of reputable infrastructure providers.

9. Children's privacy

Our website is not directed at children under the age of 16 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

11. Contact

For any questions about this Privacy Policy or our processing of your personal data, please contact us at privacy@wekomply.com.