Legal

Privacy Policy

Last updated: 15 September 2026

This policy explains what personal data weLabs Limited (“weLabs”, “we”, “us”) collects when you visit welabs.dev, send us a project enquiry, book a call or subscribe to our newsletter, and how we use and protect it. weLabs is a concern of weDevs.

1. Who we are

weLabs Limited is the controller of the personal data described in this policy. You can reach us at contact@welabs.dev or by post at Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy Central, Hong Kong S.A.R.

2. What we collect

Project enquiries

When you submit the form on our Start a Project page, we collect:

your name, email address and phone number;
your website, the type of project and your budget range;
the project details you write, and any file you choose to attach.

When you subscribe, we collect your email address.

Booking a call

“Book a Call” opens Google Calendar’s appointment scheduling. The details you enter there (such as your name and email address) are collected through Google and shared with us so we can hold the meeting. Google’s scripts are only loaded once you hover over, focus or click a “Book a Call” button.

Usage data

If you accept analytics cookies, Google Analytics records how you use the site, for example the pages you view, how you arrived, your approximate location, and your device and browser type. Like any website, our hosting and security providers also process technical data such as your IP address to deliver pages and protect the site from abuse.

3. How and why we use it

To respond to your enquiry and discuss, quote for and deliver a project. This is necessary to take steps at your request before entering into a contract, and in our legitimate interest in running our business.
To send our newsletter, based on your consent. Every email has an unsubscribe link, and you can withdraw consent at any time.
To understand and improve the site through analytics, based on your consent via the cookie banner.
To keep the site and forms secure and prevent spam and abuse, in our legitimate interest.
To meet legal obligations, such as accounting and record-keeping, where they apply.

We do not sell your personal data, and we do not use it for automated decision-making.

4. Cookies and similar technologies

We use Google Tag Manager with Google Consent Mode. Until you make a choice, analytics and advertising storage are set to “denied”, so no analytics cookies are set. The Tag Manager script itself is still loaded from Google on every page, so Google receives the technical data of that request (such as your IP address) even before you choose.

Essential: we store your cookie choice in your browser’s local storage (under the key welabs-consent) so we don’t ask again. The security check on our forms may also set strictly necessary cookies.
Analytics (optional): Google Analytics cookies such as _ga and _ga_*, set only after you choose “Accept all”.
Advertising measurement (optional): “Accept all” also grants advertising storage, which allows Google tags to measure the performance of any campaigns we run.

You can change your choice at any time:

You can also delete or block cookies in your browser settings.

5. Who we share it with

We share personal data only with service providers that help us run the site and our business, under their own privacy and data-processing terms:

Cloudflare: website hosting, content delivery and the Turnstile spam check on our forms.
Google: Tag Manager, Analytics and Calendar appointment scheduling.
Our WordPress hosting provider: processes form submissions and uploaded files.
Brevo: manages newsletter subscriptions and sends the newsletter.
weDevs, our parent company, where needed to deliver or support your project.

We may also disclose data if the law requires it, or to protect our rights, users or the public.

6. International transfers

We work with clients worldwide, and our team and service providers are located in several countries. Your data may therefore be processed outside the country where you live, including in Hong Kong, Bangladesh, the United States and the European Union. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep it

Enquiries and attachments: for as long as we are discussing a project with you, and then for up to two years, unless we go on to work together, in which case the contract’s record-keeping requirements apply.
Newsletter: until you unsubscribe.
Analytics: according to our Google Analytics data-retention setting, and for no longer than 14 months.

8. Your rights

Depending on where you live (for example under Hong Kong’s Personal Data (Privacy) Ordinance, the EU/UK GDPR, or US state privacy laws), you may have the right to:

access the personal data we hold about you and receive a copy;
correct inaccurate data;
ask us to delete it or restrict how we use it;
object to processing based on our legitimate interests;
withdraw consent at any time, without affecting processing that has already happened;
complain to your local data protection authority.

To exercise any of these rights, email contact@welabs.dev. We will respond within the time the applicable law requires.

9. Security

The site is served over HTTPS, and access to enquiries and files is limited to the people who need it. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data.

10. Children

Our services are for businesses and are not directed at children under 16. We do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy as our site or services change. The “Last updated” date above shows when it last changed; significant changes will be highlighted on this page.

12. Contact

Questions about this policy or your data? Email us at contact@welabs.dev.