Legal
Privacy policy
Draft for review. This page is still being finalised and may change. Highlighted text marks details that are proposed or still to be confirmed.
This policy explains how We AI Anything collects and uses personal data when you visit weaianything.com, contact us, or buy a service from us, and the rights you have under the General Data Protection Regulation (GDPR).
Who we are
We AI Anything is the trading name of [to be confirmed: legal name of the owner or company], [to be confirmed: postal address]. We are the data controller for the personal data described here, which means we decide how and why it is used.
For anything about your personal data, email info@weaianything.com.
What we collect and why
When you contact us
When you use the contact form or email us, we collect your name and email address, your business name and website if you give them, the service you're interested in, and what you tell us in your message. We use this to reply to you and, if you ask, to prepare a quote.
Our legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)) and, where you contact us on behalf of a business, our legitimate interest in responding to business enquiries (Article 6(1)(f)).
Please don't send passwords or other login details through the form or by email. If we need access to your website or accounts, we'll agree a secure way to arrange it.
When you buy a service
Online payments are processed by Stripe on its own secure pages, so we never see or store your full card details. We receive your name, email address, billing details, what you bought and whether the payment succeeded. We use this to deliver the service and to keep the accounting records the law requires.
Our legal bases are performing our contract with you (Article 6(1)(b)) and complying with our tax and accounting obligations (Article 6(1)(c)).
When you visit the website
We don't use analytics, advertising or tracking cookies. Our hosting provider, Cloudflare, processes technical data such as your IP address and browser details to deliver the website and protect it from attacks.
On the contact page, Cloudflare Turnstile checks that the form is being used by a person rather than an automated program. To stop the form being flooded, we also keep a one-way hash of your IP address, which can't be turned back into the address, for up to one hour after you send a message. Our legal basis is our legitimate interest in keeping the website secure and available (Article 6(1)(f)).
Who we share it with
We use the following service providers, who process personal data on our behalf:
- Cloudflare: website hosting, security and spam protection (Turnstile)
- Resend: delivering contact-form messages to our inbox
- Porkbun: forwarding email sent to our weaianything.com address
- Google: our email inbox (Gmail)
- Stripe: payment processing. Stripe also acts as an independent controller for some purposes, such as fraud prevention; see Stripe's privacy policy.
We don't sell your personal data or share it with anyone for marketing.
International transfers
Some of these providers are based in, or process data in, the United States. Where that happens, the transfer is protected by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses. [to be confirmed: the transfer mechanism each provider relies on]
How long we keep it
- Enquiries that don't lead to work: deleted 12 months after our last contact.
- Client and payment records: kept for 6 years after the end of the financial year they relate to, as Irish tax law requires.
- Rate-limiting data: deleted automatically after one hour.
- Contact-form messages are also held by Resend for a limited period for delivery and troubleshooting. [to be confirmed: Resend's retention period on our plan]
Your rights
You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. To use any of these rights, email info@weaianything.com. We'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Data Protection Commission at dataprotection.ie. We'd appreciate the chance to put things right first.
Cookies
See our cookie information.
Changes to this policy
If we change this policy, we'll update this page and the date at the top.