Privacy Policy
Last updated: 26 May 2026
1. Introduction
WeldStack ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our welding management platform. The data controller is: Michał Rymut WeldStack, ul. Rzeszowska 163B, 39-200 Dębica, Poland, NIP: 8722294647, email: [email protected].
2. Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include: name, email address, company information, welder data, qualification certificates, and usage data.
3. How We Use Your Information
We use the information we collect to: provide and maintain our services, process transactions, send notifications about certificate expirations, improve our platform, respond to your requests, and comply with legal obligations. Legal bases for processing under GDPR Art. 6(1): (a) your consent, (b) performance of a contract, (c) compliance with a legal obligation, (f) our legitimate interests (platform improvement, security).
4. Data Storage and Security
Your data is stored in secure data centers within the European Union. We implement industry-standard security measures including 256-bit encryption, regular backups, and access controls to protect your information.
5. Data Sharing
We do not sell your personal data. We may share information with: service providers who assist in operating our platform, legal authorities when required by law, and other parties with your explicit consent. Payment processing, taxes, and invoicing are handled by Paddle.com Market Limited ("Paddle") as our Merchant of Record. Paddle processes your payment data (card details, billing address) in accordance with its own privacy policy. We do not store or have access to your full payment card details.
6. Your Rights (GDPR)
Under GDPR, you have the right to: access your personal data, rectify inaccurate data, request deletion of your data, restrict processing, data portability, and object to processing. To exercise these rights, contact us at [email protected].
7. Cookies
We use essential cookies to ensure the proper functioning of our platform and analytics cookies to understand how you use our services. You can manage cookie preferences in your browser settings.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Audit logs are retained for 7 years to comply with industry regulations. You may request deletion of your data at any time.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at: [email protected]