Privacy Policy

WeldLit ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, your rights under the General Data Protection Regulation (GDPR), and how to exercise them.

Data controller: WeldLit, operating in the EU. Contact: privacy@weldlit.com

1. Data we collect

Depending on how you use our services, we may collect:

• Account data: name, email address, company name, role, phone number provided during registration.
• Usage data: pages visited, features used, session duration, browser type, device type, IP address (anonymised where possible).
• Contact form submissions: name, email, company, and message content when you contact us.
• ERP data: production records, documents, certificates, and other business data you enter into the WeldLit ERP platform. This data belongs to you.
• Cookies: see Section 5 below.

2. Legal basis for processing

• Contract performance: to provide the WeldLit ERP and Marketplace services you have signed up for.
• Legitimate interests: to improve our platform, prevent fraud, and respond to support requests.
• Consent: for marketing communications. You may withdraw consent at any time.
• Legal obligation: where required by EU or Lithuanian law.

3. How we use your data

• To create and manage your account and provide the services you requested.
• To send you important service notifications (not marketing unless you opted in).
• To respond to your support requests and contact form submissions.
• To improve the platform based on aggregate, anonymised usage patterns.
• To comply with applicable law.

We do not sell your personal data. We do not share your ERP data with any third party without your explicit instruction.

4. Data retention

• Account data: retained while your account is active, plus 12 months after deletion request.
• ERP data: retained for the duration of your subscription plus 30 days after termination (for export). You may request earlier deletion.
• Contact form data: retained for up to 24 months.
• Server logs: anonymised and retained for up to 90 days.

5. Cookies

We use the following types of cookies:

• Essential cookies: required for login sessions and core platform function. Cannot be disabled.
• Analytics cookies: privacy-friendly analytics to understand aggregate usage. No personal profiling. Opt-out available.

We do not use advertising or third-party tracking cookies.

6. Data hosting and transfers

All data is hosted in the European Union. We do not transfer personal data outside the EU/EEA. Our infrastructure providers are GDPR-compliant processors operating under appropriate data processing agreements.

7. Your rights under GDPR

You have the right to:

• Access a copy of the personal data we hold about you.
• Rectification if your data is inaccurate or incomplete.
• Erasure ("right to be forgotten") in circumstances defined by GDPR Article 17.
• Restriction of processing in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent for any processing based on consent.

To exercise any of these rights, contact privacy@weldlit.com. We will respond within 30 days. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI) at vdai.lrv.lt.

8. Contact

For any privacy-related questions: privacy@weldlit.com
General inquiries: info@weldlit.com

This policy is provided in English. If there is any conflict between a translated version and the English version, the English version prevails.