Privacy Policy.

Weblee is a two-person operational automation practice serving clients globally. We build AI and automation systems for growing businesses — n8n workflows, AI agents, and custom integrations that replace manual work. We are not a software product company. We engage clients directly through discovery calls, written audits, and ongoing service agreements.

For the purposes of this policy, "Weblee", "we", "us", and "our" refers to the Weblee practice operated by Lethabo Matlou and Jaden Schroeder. Weblee is the data controller for personal information collected through this website and through our direct engagements with prospects and clients.

Contact us at any time regarding this policy: contact@weblee.online.

We collect only the information necessary to assess whether we can help a prospective client and to deliver our services. This includes:

• ·Contact information you provide through our audit application form — your name, work email, and company website.
• ·Business information you voluntarily share — a description of your current operational challenges or manual tasks.
• ·Communication records — emails, notes from calls, and written documents exchanged during an engagement.
• ·Client project data — during an engagement, we may access credentials, workflow configurations, and business data you share with us for the sole purpose of delivering the agreed automation work.
• ·Basic website analytics — we may use tools such as Google Analytics to understand how visitors use our website. This data is aggregated and does not identify individuals.

We do not collect payment card details directly. Any payment processing is handled by third-party providers under their own privacy policies.

We use the information you provide solely for the following purposes, and only on a lawful basis — typically because you have asked us to (contract), because we have a legitimate interest in operating our business, or because you have consented.

• ·To evaluate your audit application and determine whether we can add value to your operations.
• ·To contact you within 48 hours of receiving your application to discuss next steps.
• ·To deliver our operational audit, system builds, and ongoing maintenance services.
• ·To send occasional updates relevant to your engagement with us.

We do not use your information for advertising, profiling, automated decision-making that produces legal or similarly significant effects, or any purpose beyond direct service delivery.

We do not sell your personal information. We do not share it for cross-context behavioural advertising.

We do not sell, rent, or trade your personal information to any third party.

In the course of delivering our services, your data may pass through the following categories of sub-processor:

• ·Workflow automation platforms — such as n8n or Make.com — used to build and operate your automation systems.
• ·CRM tools — such as HubSpot — used to manage client communications.
• ·Communication platforms — such as Gmail or Slack — used for day-to-day correspondence.
• ·Cloud hosting and website infrastructure providers used to serve this website and store project files.
• ·AI model providers — such as OpenAI or Anthropic — when we build systems that use large language models on your behalf. We only send the data you have authorised as part of the agreed workflow.

All sub-processors we engage are selected for their data security standards. We do not grant third parties access to your data beyond what is technically necessary to deliver the service. A current list of named sub-processors is available on request by emailing contact@weblee.online.

If your audit application does not lead to a client engagement, we retain your contact details for a maximum of 6 months before deleting them.

If you become a client, we retain your project information for the duration of the engagement plus 24 months, to support any follow-up or maintenance needs.

Billing and contract records are retained for the period required by applicable tax and accounting law in the jurisdiction of the invoice — typically 5 to 7 years.

You may request deletion of your information at any time by emailing us. We will action all deletion requests within 30 days, subject to the retention obligations above.

Regardless of where you are based, Weblee grants you the following baseline rights over the personal information we hold about you:

• ·Access — to know what personal information we hold about you.
• ·Correction — to request that inaccurate or incomplete information be corrected.
• ·Deletion — to request that we delete your information, subject to any legal retention obligations.
• ·Portability — to receive a copy of your information in a portable, machine-readable format.
• ·Objection — to object to us processing your information.

Depending on where you are based, additional statutory rights may apply.

If you are in the European Union, United Kingdom, or European Economic Area, the General Data Protection Regulation (GDPR / UK GDPR) grants you the rights above plus: restriction of processing, withdrawal of consent at any time (where processing is based on consent), the right not to be subject to a decision based solely on automated processing, and the right to lodge a complaint with your local supervisory authority.

If you are a California resident, the CCPA / CPRA grants you the right to know the categories and specific pieces of personal information we have collected, the right to delete it, the right to correct it, the right to opt out of any sale or sharing of personal information (Weblee does not sell personal information), the right to limit the use of sensitive personal information, and the right to non-discrimination for exercising any of these rights.

If you are a South African resident, the Protection of Personal Information Act (POPIA) grants you the rights above plus the right to lodge a complaint with the Information Regulator of South Africa.

If you are in another jurisdiction with local data protection law — including Canada (PIPEDA), Brazil (LGPD), Australia (Privacy Act), or others — please contact us and we will honour the strongest applicable rights available to you.

To exercise any of these rights, email us at contact@weblee.online from the address associated with your data. We will respond within 30 days (or the shorter period required by applicable law). We may ask you to verify your identity before actioning a request.

Weblee operates internationally. Personal information we collect may be processed in the country where you are based, in South Africa (where our team is located), or in the country where a sub-processor operates — for example, a cloud hosting provider or AI model provider based in the United States or the European Union.

Where applicable law requires safeguards for cross-border transfers of personal data — for example, transfers of EU or UK personal data to countries without an adequacy decision — we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office, or on other lawful transfer mechanisms.

You may request a copy of the safeguards we apply to your data by emailing contact@weblee.online.

We apply technical and organisational safeguards proportionate to the sensitivity of the data we hold. Our tools are password-protected, credentials are stored in a dedicated secrets manager, and access is limited to the two members of the Weblee team.

No method of internet transmission or electronic storage is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

Where a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where applicable, affected individuals — within 72 hours of becoming aware, in line with GDPR requirements, or within the timeframe required by any other applicable law.

Our website may use basic cookies for analytics purposes — currently Google Analytics, to understand aggregate site usage. These cookies do not identify you individually.

You can disable cookies in your browser settings at any time without affecting your ability to use the site. If we add advertising or profiling cookies in the future, we will update this policy and, where required, request your consent through a cookie banner before those cookies are set.

Weblee's services are directed to businesses and are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document. Continued use of our website or services after a change constitutes acceptance of the updated policy.

If a change materially affects how we handle your data, we will notify active clients by email.

For any questions about this Privacy Policy, or to exercise any of the rights described above, contact us at:

Email: contact@weblee.online.