Privacy policy

We UC Ltd is the controller of the personal data described in this policy, except where we process data on a client's behalf as their processor (see section 3).

• We UC Ltd, registered in England and Wales, company number 15200847.
• Registered office: Ariadne House, Town Quay, Southampton, SO14 2AQ, United Kingdom.
• Registered with the Information Commissioner's Office (ICO) under registration number ZB747507.
• Privacy questions and requests: privacy@weuc.com.

If you need this policy in another format, email privacy@weuc.com and we'll provide it.

No tracking or advertising cookies

weuc.com doesn't use analytics, advertising or tracking cookies, and we don't build profiles of visitors.

The contact form

When you use the contact form we collect your name, work email, the topic you choose and your message, plus your company name and phone number if you choose to give them. We use these details to reply to you, to prepare a quote or proposal, and to follow up on your enquiry. Our lawful bases are our legitimate interest in responding to business enquiries and, where you're asking about working with us, taking steps at your request before entering into a contract.

Your message is delivered to our team by email. So we can respond quickly, a short internal notification with your name and email address is also sent to our team through Telegram.

Spam protection

The contact page uses Google reCAPTCHA to check that submissions come from a person rather than a bot. reCAPTCHA collects information about your device and how you interact with the page and sends it to Google, which may set cookies needed for this check. Google's Privacy Policy and Terms of Service apply to that processing. We use it under our legitimate interest in keeping the site and our inbox free of abuse.

Technical and security data

Like most websites, our hosting records technical information such as IP address, browser type and the pages requested, and uses security tools that detect and block malicious traffic. We use this to keep the website secure and working, and keep it only for as long as needed for those purposes.

People we deal with

When you engage us for a Rescue audit, a build or ongoing support, we process the business contact details of the people we work with, records of our correspondence and meetings, and billing details. We do this to perform our contract with your business and under our legitimate interest in running our business.

Data inside your systems

To audit, build or support software we may be given access to your code, hosting and databases, which can contain personal data about your customers, staff or others. For that data, your business is the controller and we act as your processor. That means we:

• process it only on your documented instructions and only for the purpose of the engagement;
• make sure everyone who can access it is bound by confidentiality;
• protect it with appropriate technical and organisational security measures;
• only use sub-processors you've agreed to, on terms that protect the data in the same way;
• help you respond to requests from individuals and meet your own data protection obligations;
• delete or return it at the end of the engagement, as you instruct, unless the law requires us to keep it.

During a Rescue audit we work with read-only access and don't change your systems. Where a written data processing agreement is needed, we'll put one in place with you before we start.

This section applies to We UC hosted services that don't have their own privacy policy, including the We UC app at app.weuc.com.

What we collect

• Profile and contact data: name, email address, phone number, company name, job title and account credentials.
• Usage data: call logs (including outgoing and missed calls and call minutes), numbers of messages sent and received, features used and other interaction data, meeting recordings and file transfers.
• Recordings: recordings of calls and meetings, where recording is enabled and appropriate consent has been given.
• Payment data: card type, the last four digits of the card and billing address. Card payments are processed by Stripe, Inc., which collects your card details directly under its own Privacy Policy.
• Device and IP data: IP address, device ID, device type, operating system and browser.
• Information you give us in free-form text in the service, or in emails and letters you send us.

Where it comes from

Directly from you when you create an account, use the service or contact us; automatically through cookies and similar technologies when you use the service; and from providers who help us run, support and analyse the service.

How we use it

• To create and manage your account, provide the service and process billing.
• To provide support and respond to you.
• To keep the service secure, prevent fraud and fix problems.
• To understand how the service is used and improve it.
• To send you service messages and, where you've agreed or where the law allows, information about our products. You can opt out of marketing at any time.
• To meet our legal obligations and enforce our agreements.

Our lawful bases are performing our contract with you, our legitimate interests in running, securing and improving the service, your consent where we ask for it, and compliance with legal obligations.

Cookies in the hosted services

The hosted services use essential cookies to keep you signed in and remember your settings, and may use analytics tools, such as Google Analytics and Mixpanel, to understand how the service is used. You can control cookies through your browser settings, though some features may stop working if essential cookies are blocked. You can find out more at ico.org.uk.

We don't sell personal data. We share it only where we need to:

• Service providers who help us operate, such as hosting, email and communication providers, payment processing (Stripe), security services and support tools. They may only use the data to provide their services to us.
• Colleagues and contractors in our wider team who help deliver our products and services, under confidentiality obligations.
• A buyer or successor if our business, or part of it, is sold or reorganised. We'll take reasonable steps to tell you before your data becomes subject to a different policy.
• Authorities, courts and others where the law requires it, or where it's necessary to protect the rights, property or safety of you, us or others.

We may also create aggregated or anonymised information that can't identify you, and use it to understand and improve our products.

Our main operation and infrastructure are in the United Kingdom. Some engineering, support and administration is carried out by colleagues and contractors outside the UK, including in Europe and the United Arab Emirates, and some of our service providers operate internationally.

Where personal data is transferred to, or accessed from, a country without UK adequacy regulations, we put in place the safeguards UK data protection law requires, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for more information at privacy@weuc.com.

• Enquiries: for as long as we need to respond and follow up. If we don't go on to work together, we delete your enquiry when it's no longer needed.
• Clients and hosted-service customers: for as long as we work together, then for as long as needed to meet legal, tax and accounting requirements and to resolve any disputes.
• Client data we process as a processor: for the length of the engagement, then deleted or returned as you instruct.
• Technical and security logs: only for as long as needed to keep our systems secure.

We protect personal data with technical and organisational measures appropriate to the data and the risks, including access controls and encryption in transit. You can help by keeping your account credentials safe and signing out on shared devices. No method of transmitting or storing data is completely secure, but we work to protect it and will act promptly if something goes wrong.

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that's wrong or incomplete;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to our use of your data, including for direct marketing;
• ask for your data in a portable, machine-readable format;
• withdraw consent at any time, where we rely on your consent.

To use any of these rights, email privacy@weuc.com. We may need to confirm your identity first. We'll respond within one month, and tell you if a right doesn't apply or if we need longer. If we process your data as a processor for one of our clients, we'll pass your request to that client and help them respond.

You can also complain to the Information Commissioner's Office. We'd appreciate the chance to put things right first, so please contact us before you do.

Our website and services are for businesses. We don't knowingly collect personal data from children under 16. If you think a child has given us their data, contact privacy@weuc.com and we'll delete it.

Our website links to other sites, including our product websites. Each has its own privacy practices, and we're not responsible for sites we don't run.

We'll update this policy when the way we handle personal data changes. The date at the top shows when it last changed. If a change is significant, we'll tell customers by email or in the relevant service.

Email privacy@weuc.com, or write to the Data Protection lead, We UC Ltd, Ariadne House, Town Quay, Southampton, SO14 2AQ, United Kingdom.