Privacy Policy

WeLinkAnything Ltd  ·  Last updated: June 2026  ·  UK GDPR, Data Protection Act 2018 & CCPA

This Privacy Policy explains what personal data WeLinkAnything Ltd ("we", "us", "our") collects, why we collect it, and your rights. We are the data controller for personal data processed through WeLINKanything. This policy applies to all users worldwide, including users in the United Kingdom (under UK GDPR and the Data Protection Act 2018) and users in the United States (including California residents under the California Consumer Privacy Act, CCPA/CPRA).

1. What data we collect

All users (Seekers and Experts):

• Email address — used to identify your account and send magic-link login emails.
• Name — provided at sign-up, used to personalise your agentic key.
• Agentic key / slug — your unique identifier on the platform (e.g. james.harlow).

Experts, Professionals, and Brands (additional profile fields):

• Professional headline, biography, location, website URL, LinkedIn URL
• Skills categories and individual skills you select
• Availability status and average response time
• Service & Payment Terms (text you write and publish publicly on your profile)

Agentic briefs:

When a Seeker sends a brief, the brief text is stored in our database for delivery to the chosen Expert. Once delivered, briefs are retained to allow both parties to reference the exchange. We do not read, analyse, or use brief contents for any purpose other than routing them to the intended recipient.

2. Why we process your data (lawful basis)

• Contract performance — to create and maintain your account and deliver the service you signed up for.
• Legitimate interests — to operate and improve the platform, prevent fraud, and maintain security.
• Legal obligation — to comply with applicable laws and regulations.

3. What we don't do

• We do not sell, rent, or trade your personal data to third parties.
• We do not use brief contents for advertising, profiling, or AI training.
• We do not share your data with advertisers.
• We do not use tracking pixels or third-party ad networks.

4. Who we share data with

We share data only with third-party processors necessary to operate the platform:

• Supabase — database and authentication (data hosted in the EU).
• Netlify — hosting and serverless functions (US-based; EU Standard Contractual Clauses apply).
• Resend — transactional email delivery (magic links, notifications).
• Stripe — subscription billing for Professional and Brand plans (Stripe processes payment card data directly; we do not store card details).

All processors are bound by data processing agreements and are required to handle your data securely and only as instructed by us.

5. Cookies

WeLINKanything uses minimal cookies strictly necessary for authentication (session tokens set by Supabase). We do not use analytics cookies or third-party tracking cookies.

6. Data retention

• Account data — retained for as long as your account is active, then deleted within 30 days of account deletion.
• Agentic briefs — retained until you or the Expert requests deletion, or your account is deleted.
• Email logs — retained for up to 30 days by our email provider for delivery tracking, then deleted.

7. Your rights

UK and EEA users — UK GDPR rights:

To exercise these rights, email us at contact@welinkanything.com. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Rights for US residents (CCPA/CPRA)

If you are a resident of California or another US state with applicable privacy legislation, you have the following rights in relation to your personal information:

• Right to know — you may request details of the personal information we have collected about you, the purposes for which it is used, and with whom it is shared.
• Right to delete — you may request deletion of personal information we hold about you, subject to certain exceptions (e.g. where we are required by law to retain it).
• Right to correct — you may request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share your personal information with third parties for cross-context behavioural advertising. No opt-out is necessary.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

To exercise these rights, email contact@welinkanything.com with the subject line "US Privacy Request". We will respond within 45 days as required under the CCPA. For residents of other US states with privacy laws (Virginia, Colorado, Connecticut, Texas, and others), the same request process applies and we will handle your request in accordance with applicable law.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we will notify you promptly in the event of a breach affecting your data.

10. International transfers

Some of our processors are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions) as required by UK GDPR.

11. Changes to this policy

We may update this Privacy Policy from time to time. We'll notify registered users of material changes by email. The "Last updated" date at the top of this page will always reflect the current version.

12. Contact

For any privacy-related questions or to exercise your rights:

WeLinkAnything Ltd
Email: contact@welinkanything.com
Registered in England and Wales