Privacy policy
1. Data controller
The controller of the data collected on wellsy.io is:
Wellsy FZCO — a Free Zone Company registered with the Dubai Integrated Economic Zones Authority (DIEZA) under licence number 29934
IFZA Properties, DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates
Telephone: +971 55 162 12 00
Contact: [email protected]
Wellsy FZCO's services are intended exclusively for business customers. The data processed is, for the most part, professional contact data.
2. Data collected and purposes
| Data | Purpose | Source |
|---|---|---|
| Surname, first name, email, company, message | Responding to contact and quotation requests | Website forms |
| Sending the newsletter and commercial information | Voluntary sign-up | |
| Account credentials, email, password (encrypted) | Creating and managing the client account | Registration |
| Billing and subscription data, payment history | Performance of the contract, invoicing, subscription management | Subscription |
| IP address, pages viewed, browsing data | Website security, audience measurement, fraud prevention | Browsing |
| Technical access provided by the client (website credentials) | Performance of maintenance services | Provided by the client |
Wellsy FZCO does not collect any sensitive data and does not carry out any solely automated decision-making producing legal effects.
3. Legal bases
- Performance of the contract : management of the account, subscriptions, invoicing and maintenance services.
- Consent : newsletter, cookies that are not strictly necessary.
- Legitimate interest : website security, fraud prevention, business-to-business prospecting.
- Legal obligation : retention of accounting and tax records.
4. Recipients and processors
Data is processed by Wellsy FZCO and by the following providers, acting as processors:
- Hostinger — hosting of the website and data
- Cloudflare — CDN, security and protection against attacks
- Stripe — payment processing and subscription management
- Brevo — sending transactional emails and the newsletter
- Google (reCAPTCHA) — protection of forms against bots
No data is sold or transferred to third parties for commercial purposes.
5. Hosting location and international transfers
The website's data is hosted in France, on Hostinger's infrastructure. Backups are stored, encrypted, on separate infrastructure located in France (OVHcloud, Roubaix).
As Wellsy FZCO is established in the United Arab Emirates, the management and administration of this data involves access from the United Arab Emirates and, for certain providers (Stripe, Cloudflare, Google), transfers outside the European Union. These transfers are covered by the appropriate safeguards provided by the relevant providers, in particular the European Commission's standard contractual clauses.
6. Retention periods
- Contact requests : 3 years from the last exchange.
- Client account and subscription data : duration of the contractual relationship, then 3 years.
- Accounting and invoicing records : retained in accordance with applicable legal obligations.
- Newsletter : until consent is withdrawn (unsubscribe link in every message).
- Technical and security logs : 12 months maximum.
- Technical access provided by the client : duration of the contract, then deletion or revocation.
7. Cookies
The website places cookies that are strictly necessary for its operation (session, authentication, language preference, security). Other cookies, in particular those relating to audience measurement and third-party services (Google reCAPTCHA, Brevo), are only placed with the user's consent, which may be withdrawn at any time.
Most browsers allow cookies to be refused or deleted through their settings.
8. Your rights
In accordance with the applicable data protection regulations, and in particular the General Data Protection Regulation (GDPR) where it applies, you have the following rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time.
To exercise these rights, write to [email protected]. You will receive a response within one month.
If you reside in the European Union, you also have the right to lodge a complaint with the supervisory authority of your country of residence.
9. Security
Wellsy FZCO implements appropriate technical and organisational measures to protect data: encryption of communications (HTTPS), application firewall and CDN, control of administrator access, encrypted backups, regular anti-malware scanning and vulnerability monitoring.
10. Changes to this policy
Wellsy FZCO may amend this privacy policy at any time to reflect changes to its services or to applicable regulations. The version in force is the one published on this page.
11. Governing law
This policy is governed by the laws of the United Arab Emirates, without prejudice to the mandatory provisions applicable to data subjects residing in other jurisdictions. In the event of a dispute, the courts of Dubai, United Arab Emirates, shall have sole jurisdiction.
EN 
FR