Privacy Policy

1. Who we are

We Belong is operated by Christopher Tremlett, based in The Hague, Netherlands. We Belong is the data controller for all personal data collected through this website.

You can contact us at any time at info@webelong.nl.

2. What data we collect and why

Waitlist signups

When you sign up for early access on our homepage, we collect your email address. We use this to notify you when We Belong launches in The Hague. This is based on your consent, which you can withdraw at any time by emailing us.

Host applications

When you submit a host application through our Become a Host page, we collect:

• Your name and email address
• A description of the activity you would like to host
• Information about yourself, your background, and your experience
• Any supporting files you choose to upload (photos, documents)
• A link to your website, Instagram, or portfolio (optional)

We use this information to review your application and get in touch with you. The legal basis is your consent, which you give when you submit the form.

User accounts and sign-in

When you create an account to book activities and manage your profile, we collect and store your email address along with the profile details you choose to add (such as a display name, photo, and short bio). You can sign in either with your email address and a password, or by using "Continue with Google". Passwords are stored securely as salted hashes by our authentication provider and are never visible to us.

If you choose to sign in with Google, Google shares a limited set of profile information with us so we can create and identify your account, namely:

• Your name
• Your email address
• Your profile picture (avatar)

We use this information solely to create and secure your account, to pre-fill your display name and profile photo, and to identify you when you sign in. We do not use it for advertising, and we do not share it with third parties for advertising purposes. We request only the minimum profile and email information needed for sign-in, and nothing more.

We Belong's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The legal basis for processing your account data is the performance of our service to you and your consent.

Activity bookings

When you request a place on an activity, we collect:

• Your name and email address
• Your phone number (optional)
• The number of people, the session or option you chose, and the listed price
• Any message you add for the host
• The fact that, and the moment at which, you accepted our Terms & Conditions

We use this to process and manage your booking, send you confirmation, cancellation, and update emails, and keep a record of your consent. The legal basis is the performance of our service to you.

We share these booking details with the host of the activity you book, so they can confirm your place, contact you, and arrange payment directly with you. The host receives your name, email address, phone number (if given), and any message you include. Hosts are independent and act as their own data controller for the information they receive; we ask hosts to use it only to manage your booking.

Community features (profile and "Who's going")

If you choose to use our community features, we process:

• Your profile details: display name, photo, short bio, interests, and neighbourhood
• Connection requests you send or receive with other members
• Messages you exchange with members you are connected to

Where your profile is set to be visible, other seekers booked onto the same session can see a limited public profile, namely your first name, profile photo, and interests, so people attending the same activity can recognise and connect with one another. Your full profile, email address, and bookings are never shown to other members. You can turn off this visibility at any time in your profile settings. The legal basis for these optional features is your consent, shown by choosing to use them, and you can withdraw it by switching visibility off or deleting your account.

Profile photos are stored in a publicly accessible storage bucket, which means the photo file can be reached by anyone who has its direct link. Please only upload a photo you are comfortable sharing.

Saved activities

If you save or bookmark an activity, we store that choice against your account so we can show it back to you. This is visible only to you.

Calendly bookings

If you book a call through our Calendly link, your data is handled by Calendly in accordance with their own privacy policy. We receive your name, email address, and the time of the call.

Website usage

We do not use tracking or advertising cookies or third-party analytics tools on this website. To keep you signed in, we store a session token in your browser's local storage; this is strictly necessary for the account feature to work and is not used for tracking. This policy will be updated if our practices change.

3. How we store your data

Form submissions are processed and stored by Netlify, our website hosting provider. Netlify stores form data on servers within the United States. This transfer is covered by Netlify's compliance with EU data transfer regulations. You can read Netlify's privacy policy at netlify.com/privacy.

Account data, profiles, bookings, connections, messages, and saved activities are stored by Supabase, the platform that provides our authentication and database. You can read Supabase's privacy policy at supabase.com/privacy. Any information we receive from Google when you sign in with Google is stored within Supabase as part of your account and is used only as described in section 2.

Booking, confirmation, cancellation, and account emails are delivered through Resend, our email provider, which processes your name and email address for the sole purpose of sending those messages. You can read Resend's privacy policy at resend.com/legal/privacy-policy.

As described in section 2, the personal data in a booking is also shared with the independent host of the activity you book. We do not sell, rent, or share your personal data with any other third parties for marketing purposes.

4. How long we keep your data

We keep your data for as long as it is necessary for the purpose it was collected:

• Waitlist email addresses: until We Belong has launched and notified you, or until you withdraw your consent
• Host application data: for up to 12 months after the application is received, or until the application process is complete
• Account data (including profile details and any information received from Google sign-in): for as long as your account is active. When you delete your account, or ask us to delete it, this data is removed.
• Booking data (including consent records): for as long as your account is active and for a reasonable period afterwards to handle queries, refunds, or disputes, after which it is deleted or anonymised
• Community data (connections, messages, and saved activities): for as long as your account is active, and removed when you delete your account

Note that the host of an activity you booked keeps the booking details they received as an independent controller, under their own retention practices. To have a host delete the data they hold about you, contact us and we will pass on your request.

You can delete your account yourself at any time. Sign in, open your profile, and choose Delete my account. This removes your account, profile, photo, connections, messages, saved activities, and any Google sign-in data straight away. Your past bookings stay with the hosts who ran them, but we strip out the details that identify you. If you would rather we did it for you, you can still email info@webelong.nl and we will take care of it.

5. Your rights under GDPR

As a resident of the EU or EEA, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the data we hold about you
• Right to rectification: You can ask us to correct inaccurate data
• Right to erasure: You can delete your account and data yourself from your profile (Delete my account), or ask us to do it for you
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can ask us to provide your data in a portable format
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time
• Right to object: You can object to processing based on legitimate interests

To exercise any of these rights, email us at info@webelong.nl. We will respond within 30 days.

If you feel your rights have not been respected, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

6. Cookies and local storage

This website does not use tracking or advertising cookies. If you sign in, we store a strictly necessary session token in your browser's local storage so you stay logged in; this is not used for tracking and is cleared when you log out. We may use functional cookies in the future to improve the user experience. If we do, we will update this policy and ask for your consent where required.

7. Changes to this policy

We may update this Privacy Policy as We Belong grows and new features are introduced. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

8. Contact

For any questions about this Privacy Policy or how we handle your data, please contact us at info@webelong.nl.