Privacy Policy

1. Data Controller

The controller of your personal data is Wee-Source [company name and registered address to be completed by the platform operator], referred to below as the "Controller" or "Wee-Source".

For any matters related to the processing of personal data, you can contact us at the email address provided at the end of this Policy.

2. Scope and purposes of processing

We only collect data necessary for the purposes below, provided voluntarily through the forms available on the platform:

• "Product inquiry" form (worldwide sourcing) — name or company name, email address, phone number, delivery country and inquiry details — used to find and pass on matching offers from our partners and suppliers.
• Client account registration — first name, last name, email address, password (stored in encrypted form), optionally company and phone — used to create and manage your account, track orders and communicate with your dedicated agent.
• Agent application form — contact details, country/region of operation, professional experience and network description — used to review your application to the partner program.
• Email and phone correspondence — contact details and message content — used to respond to your questions and handle your requests.

3. Legal basis for processing

We process your data on the following legal bases:

• Art. 6(1)(b) GDPR — processing necessary for the performance of a contract (e.g. managing a client account, handling a product inquiry) or to take steps prior to entering into one.
• Art. 6(1)(f) GDPR — the Controller's legitimate interest (e.g. pursuing claims, preventing abuse, analyzing platform traffic).
• Art. 6(1)(a) GDPR — your voluntary consent, where required (e.g. signing up for notifications about new listings or auctions).

4. Recipients of data

Your data may be shared with verified suppliers and business partners only to the extent necessary to fulfill the product inquiry you submitted — never for third-party marketing purposes.

Data may also be entrusted to providers of hosting, email, payment and technical support services acting on our behalf, under data processing agreements and bound by confidentiality obligations.

5. Transfers outside the European Economic Area

Due to the international nature of our business (sourcing suppliers from outside the EU), some inquiry-related data may be transferred to partners located outside the EEA. In such cases, we ensure an adequate level of data protection through standard contractual clauses approved by the European Commission or other mechanisms provided for under GDPR.

6. Data retention period

We retain data for as long as necessary to fulfill the purpose for which it was collected, and then for the period required by law (e.g. tax regulations) or until any claims become time-barred. Client account data is retained for the lifetime of the account, and after its deletion — for the period resulting from the Controller's legal obligations.

7. Your rights

In connection with the processing of your personal data, you have the following rights:

• the right to access your data and receive a copy of it,
• the right to rectify (correct) your data,
• the right to erasure ("the right to be forgotten"),
• the right to restrict processing,
• the right to data portability,
• the right to object to processing based on legitimate interest.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that the processing of your data violates GDPR.

8. Cookies

The platform uses cookies necessary for the site to function properly (e.g. remembering your chosen light/dark theme and interface language) and, with your consent, analytics cookies that help us understand how you use the platform.

You can change your cookie settings in your browser at any time, including blocking them entirely — this may however limit the functionality of some parts of the platform.

9. Data security

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss or destruction, including encrypted connections (HTTPS), password hashing, and restricted access limited to authorized staff and collaborators.

10. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy, in particular in connection with changes in the law or platform functionality. We will inform you of any material changes via a notice on the site. The current version of the Policy is always available at this address.