This Privacy Policy explains how Internet Company BV, trading as “Wobbio” (“Wobbio”, “we”, “us”, “our”), collects, uses, discloses, and otherwise processes personal data when you:
- visit our websites, including https://wobbio.com and https://test-wobbio.com (the “Websites”);
- create an account or use our website builder, hosting, email services, domain services, analytics, AI features, and related tools (the “Services”);
- communicate with us (e.g., support, sales, or marketing).
Company details
- Internet Company BV (trading name: Wobbio)
- Address: Operetteweg 7, 1323 VJ Almere, Netherlands
- Privacy contact: support@site.eu
- Support contact: support@site.eu
1) Who this Privacy Policy applies to
This Privacy Policy applies to:
- A) Website/Marketing Visitors – people who visit our Websites.
- B) Customers/Users – people who create and use a Wobbio account and manage sites, domains, email, marketing, or other Services.
- C) End Users (Visitors of Customer Websites) – people who visit or submit information through websites created and hosted using Wobbio.
Important note about roles (Controller vs Processor)
- When we process account, billing, product/usage, marketing, and security data for our own business operations, we generally act as a “controller” under data protection laws.
- When Customers use Wobbio to collect or store personal data about End Users (for example, through contact forms, email marketing lists, inboxes, or e-commerce), we generally act as a “processor” (or service provider) processing “Customer Content” on the Customer’s behalf.
If you are an End User interacting with a Customer Website, the Customer (site owner) is responsible for explaining how your data is collected and used on their site. Please refer to the Customer Website’s privacy policy where available.
2) Personal data we collect
2.1 Data you provide to us (Customers/Users)
Depending on how you use the Services, we may collect:
- Account data: name, email address, username, password (stored in hashed form), profile details, account settings, authentication factors (e.g., 2FA when enabled).
- Billing and subscription data: plan details, invoices, billing address, VAT/tax identifiers (if applicable), payment status, and transaction records.
- Domain registration and management data: domain name(s), registrant/admin/tech contact details required for registration, and related communications.
Note: some domain registration data may be shared with registries/registrars and may be disclosed as required by registry rules or law. - Website and hosting content: text, images, files, databases, and any other content you upload or create in the builder; site configuration; and logs necessary to operate the service.
- Email hosting content and metadata: mailbox content (emails and attachments), email addresses, sending/receiving metadata, delivery logs, and anti-spam/anti-abuse signals required to operate and secure email services.
- Email marketing data (if you use it): subscriber/contact lists, campaign content, campaign metrics (opens/clicks where enabled and lawful), suppression lists (e.g., unsubscribes), and related configuration.
- Communications: messages you send to us (support tickets, emails, chat conversations), and information you choose to provide during troubleshooting.
2.2 Data we collect automatically
When you visit our Websites or use our Services, we may automatically collect:
- Device and usage data: IP address, browser type, device type, operating system, language, referring URLs, pages viewed, features used, and timestamps.
- Logs and security data: login events, access logs, audit trails (where enabled), error logs, and security events to protect accounts, prevent fraud, and maintain availability.
- Cookies and similar technologies: see Section 6.
2.3 Data we process on behalf of Customers (End Users of Customer Websites)
Customers may use Wobbio to collect or store personal data from End Users, such as:
- form submissions (name, email, message, and other fields configured by the Customer);
- e-commerce details if a Customer enables store features (e.g., order info and customer contact details);
- site visitor analytics (e.g., page views and device data, depending on configuration);
- communications routed through the Customer’s site (if enabled).
Wobbio processes this data as directed by the Customer, subject to our agreements with the Customer (including our Data Processing Addendum where applicable).
3) How we use personal data
We use personal data to:
- Provide and operate the Services (hosting websites, enabling site editing and publishing, domain services, email hosting, email marketing, forms, analytics dashboards, and other features).
- Create and manage accounts, authenticate users, and maintain account security.
- Process subscriptions and billing, and maintain financial records.
- Provide customer support, respond to inquiries, and troubleshoot.
- Improve and develop the Services (analytics, feature testing, debugging, and performance improvements).
- Maintain safety, security, and integrity (fraud prevention, abuse detection, spam prevention, malware detection, DDoS protection, and enforcement of our Terms).
- Communicate with you about service-related updates (e.g., system notices, security alerts, billing notices).
- Send marketing communications where permitted (you can opt out; see Section 7).
- Comply with legal obligations and respond to lawful requests.
AI features
If you use AI-powered features (e.g., copy suggestions, SEO assistance, image/help tools), we process the content you submit (prompts and related context) and generate outputs.
- We may use multiple AI providers and models to deliver these features.
- We contractually require our AI providers not to use Customer Content (including prompts, website content, or files) to train or improve their general AI models, unless you explicitly opt in.
- We may retain limited AI usage logs/metadata and, where needed for security or quality, limited inputs/outputs for a limited period (for example, to prevent abuse, resolve incidents, or improve reliability), subject to Section 9 (Retention).
4) Legal bases for processing (EEA/UK/Switzerland users)
If the GDPR or similar laws apply, we rely on one or more of the following legal bases:
- Contract: to provide the Services you request and perform our agreement with you.
- Legitimate interests: to secure, operate, and improve the Services, prevent abuse, and communicate with business users (balanced against your rights).
- Consent: where required for certain cookies/advertising/marketing or where you choose to enable optional features.
- Legal obligation: to comply with applicable laws (e.g., accounting/tax requirements, responding to lawful requests).
5) How we share personal data
We may share personal data with:
5.1 Vendors and service providers (“subprocessors”)
We use trusted vendors to help us operate the Services (for example: infrastructure providers, security providers, customer support tools, analytics tools, and AI providers).
- They may only process personal data to provide services to us (and/or on your behalf where you are our Customer), consistent with our instructions and contractual protections.
- You can request a current list of subprocessors by emailing support@site.eu.
5.2 Domain registries/registrars and related parties
If you register or manage domains through Wobbio, we may share required registration data with registries, registrars, resellers, and escrow providers as necessary to provide domain services. Certain data may be disclosed where required by registry policies or law.
5.3 Advertising and marketing partners (if and when enabled)
We may use advertising partners to:
- measure the effectiveness of campaigns; and/or
- show Wobbio ads (including remarketing).
This may involve the use of cookies/pixels and the sharing of limited identifiers or event data (depending on your device and consent settings).
We do not sell personal data for money. However, some privacy laws treat certain advertising-related disclosures as “sharing” (e.g., for cross‑context behavioral advertising). Where required, we provide opt-outs (see Section 7).
5.4 Legal, safety, and compliance disclosures
We may disclose personal data when we believe in good faith it is necessary to:
- comply with law or lawful requests;
- protect the rights, safety, and security of Wobbio, our users, or the public; or
- investigate fraud, abuse, or security issues.
5.5 Business transfers
If Wobbio is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate protections.
5.6 Aggregated or de-identified data
We may share aggregated or de-identified information that cannot reasonably be used to identify you.
6) Cookies, analytics, and advertising
We use cookies and similar technologies on our Websites and Services for:
- Essential functions (login/session, security, load balancing).
- Preferences (e.g., language).
- Analytics (understanding performance and usage).
- Advertising/remarketing (if enabled).
Analytics (Matomo)
We use Matomo to understand usage and improve the Websites/Services. Depending on configuration, Matomo may use cookies and may process IP addresses and device information. Where required by law, we will obtain consent before using non-essential analytics cookies.
Advertising/remarketing
If enabled, we may use advertising technologies (e.g., pixels/tags) provided by advertising platforms to measure campaigns and support remarketing. Where required by law, we will obtain consent before placing non-essential advertising cookies/pixels.
Cookie controls
- If we provide a cookie banner or cookie preference center, you can manage your preferences there.
- You can also control cookies through your browser settings.
- Some features may not work properly if you disable certain cookies.
7) Your choices and privacy rights
7.1 Account settings
Customers/Users can access and update certain account information via account settings.
7.2 Marketing communications
You can opt out of marketing emails at any time by using the unsubscribe link in our emails or contacting support@site.eu.
Service-related messages (e.g., billing and security notices) may still be sent.
7.3 GDPR/EEA/UK/Switzerland rights (where applicable)
Depending on applicable law, you may have rights to:
- access your personal data;
- correct inaccurate personal data;
- request deletion (with certain exceptions);
- restrict or object to processing;
- data portability; and
- withdraw consent (where processing is based on consent).
To exercise rights, contact support@site.eu. We may need to verify your identity.
End Users of Customer Websites
If you are an End User of a Customer Website and want to exercise rights relating to data collected by that Customer, please contact the Customer (site owner) directly. We may redirect your request to the Customer where appropriate.
7.4 US state privacy rights (where applicable)
Depending on your US state of residence and our activities, you may have rights to access, delete, correct, and opt out of certain processing (including targeted advertising).
If we engage in advertising practices that qualify as “sale” or “sharing” under certain laws, we will provide the required opt-out mechanisms.
Global Privacy Control (GPC)
Where required by applicable law, we will treat browser-based opt-out preference signals (such as Global Privacy Control) as a valid request to opt out of applicable “sale”/“sharing” of personal data.
8) International data transfers
We host and store primary customer and service data in the European Union.
However, some third parties we use (for example, certain AI providers or domain-related parties) may process personal data outside the EU/EEA/UK. When we transfer personal data internationally, we use appropriate safeguards as required by law (for example, Standard Contractual Clauses and/or other valid transfer mechanisms).
9) Data retention
We retain personal data for as long as reasonably necessary to:
- provide the Services;
- comply with legal obligations;
- maintain security and prevent fraud;
- resolve disputes; and
- enforce our agreements.
In practice:
- Account, website content, email hosting content, and Customer Content are generally retained for as long as the Customer keeps them in the Services (and until deleted), and for a limited period after account closure as needed for backups, security, and legal compliance.
- Logs and security records are retained for periods appropriate to their purpose (e.g., security monitoring, abuse prevention, debugging) and then deleted or anonymized where feasible.
- Billing and financial records are retained as required by applicable law.
Customers are responsible for exporting any data they wish to keep before closing their accounts.
10) Security
We implement appropriate technical and organizational measures to protect personal data, such as access controls, encryption in transit, monitoring, and security logging.
Depending on plan and configuration, we may offer additional security features such as two-factor authentication (2FA), role-based access controls, single sign-on (SSO), and audit logs.
No method of transmission or storage is completely secure; we cannot guarantee absolute security.
11) Children’s privacy
Our Websites and Services are not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us personal data, please contact support@site.eu.
12) Third-party services and Customer configurations
Customers can configure their Customer Websites and may add third-party services (e.g., embedded content, payment providers, analytics tools, ad pixels, and plugins).
- Third-party services are governed by their own policies.
- Customers are responsible for configuring and disclosing tracking/collection on their sites and for obtaining any required consents from End Users.
13) Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on our Websites and update the “Last updated” date. If changes are material, we may provide additional notice where required.
14) Contact us and complaints
Contact
- Privacy questions and requests: support@site.eu
- Support: support@site.eu
Supervisory authority (EEA/UK users)
If you are in the EEA, you may have the right to lodge a complaint with your local supervisory authority. As we are based in the Netherlands, you may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
