Privacy Policy

WebList Directory (“we”, “us”, the “Controller”) operates https://weblist.directory. We determine the purposes and means of processing personal data under the EU General Data Protection Regulation (GDPR).

• Usage data: pages viewed, queries, device/browser, approximate location (from IP), timestamps, referrers.
• Account & merchant data (if you create one): name, email, store profile details (logo, store name), and any information you provide in forms.
• Transactional meta (if applicable): actions like “open product link”, “contact store”, non-payment events on our site.
• Cookies and similar technologies (see Section 4).

We do not intentionally collect special categories of data (GDPR Art. 9) nor data about criminal convictions (Art. 10).

• Provide and improve the service — search, filtering, performance, troubleshooting (Art. 6(1)(b) contract and 6(1)(f) legitimate interests).
• Account features — create and maintain profiles, respond to requests (Art. 6(1)(b)).
• Security & abuse prevention — rate limiting, fraud detection, logs (Art. 6(1)(f)).
• Compliance — tax/audit/record-keeping where applicable (Art. 6(1)(c) legal obligation).
• Consent-based analytics/marketing — only if you opt-in via our cookie banner (Art. 6(1)(a)).

We use essential cookies to run the site and, with your consent, optional cookies for analytics and improvements. You can change your preferences anytime.

We keep personal data only as long as necessary for the purposes described above:

• Account & merchant data: for the lifetime of the account and up to 12 months after closure (unless legal obligations require longer).
• Server logs & security events: typically 90 days.
• Consent records: at least as long as required to demonstrate compliance.

We may share data with vetted service providers (processors) who help us operate the platform (hosting, DDoS protection, error logging, analytics where consented). They process data only under our instructions and with appropriate safeguards.

We do not sell personal data.

If personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs), plus additional measures where necessary.

• Right of access, rectification, erasure, restriction, and portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time (for consent-based processing).
• Right to lodge a complaint with your local supervisory authority.

We may verify your identity before acting on your request. We will respond within statutory deadlines.

We employ administrative, technical and organizational measures to protect personal data (TLS in transit, access controls, least-privilege, backups). No method of transmission or storage is 100% secure; we continuously improve our safeguards.

Our services are not directed to children under 16. If you believe a child has provided us personal data, contact us to remove it.

We may update this Privacy Policy from time to time. We will post the changes on this page and revise the “Last updated” date.

If you have questions or wish to exercise your rights, contact our privacy team:

Email: privacy@weblist.directory
Address: Amsterdam, Netherlands