Privacy & Data Policy

This Privacy Policy is designed to comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “UAE PDPL”); the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) for users in the EEA and UK; and the Indonesian Personal Data Protection Law (Law No. 27 of 2022, “PDP Law”) for users in Indonesia.

B1. Who We Are (Data Controller)

[Operator Legal Name] (“WeGather”, “we”, “our”, “us”), incorporated under the laws of [jurisdiction], is the data controller in respect of personal data processed in connection with the Platform.

Data Protection Contact / DPO (if required): [name or role] — privacy@wegather.ai.

B2. What Personal Data We Collect

We collect the minimum personal data necessary to operate the Platform.

From event organisers (at time of listing submission):

• Name (individual or trading name)
• Email address
• WhatsApp number or other contact number (if voluntarily provided)
• Social media handles or website URL (if provided)
• Event details submitted, including any images uploaded
• Date and time of submission

From visitors (automatically, via cookies): browser type and version; device type and operating system; pages viewed and time spent; referral source.

We do not collect payment card data, government identification numbers, biometric data, health data, or data relating to children under 18. We do not knowingly collect personal data from persons under 18 years of age.

B3. How and Why We Use Your Data

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

B4. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share data only in these limited circumstances:

• Service providers. Carefully selected providers who help us operate the Platform (web hosting, email delivery, analytics), under data processing agreements and on WeGather’s instructions only.
• Legal and regulatory disclosure. Where required by law, court order, or to protect the rights, property, or safety of WeGather, its users, or the public.
• Business transfers. In a merger, acquisition, or sale of a material part of the business, subject to equivalent data protection obligations.

All listing content submitted by organisers — including name, contact details, and event information — is displayed publicly on the Platform. By submitting a listing, you consent to this public display.

B5. International Data Transfers

WeGather operates across the UAE, Indonesia, and Spain, and your personal data may be transferred to and processed in countries other than your own. Where we transfer personal data from the EEA to a country not recognised as adequate by the European Commission, we implement appropriate safeguards such as Standard Contractual Clauses. For transfers from or to Indonesia, we comply with the cross-border transfer requirements of the Indonesian PDP Law.

B6. Cookies

We use essential cookies necessary to operate the Platform, and may use analytics cookies to understand and improve usage. Where required by law (including EU/Spain e-Privacy rules), we will request your consent before placing non-essential cookies. You may withdraw consent for non-essential cookies at any time via your browser settings; withdrawal does not affect the lawfulness of prior processing.

B7. Data Retention

We retain personal data only for as long as necessary, or as required by law:

• Active listings — retained for the duration of the listing’s publication.
• Removed or declined listings — retained for [12 months] following removal, to investigate complaints and meet legal obligations.
• Server logs — retained for [90 days] in standard operations.
• Legal hold — data may be retained longer where required by a court order, regulator, or ongoing proceedings.

B8. Your Rights

Depending on your location, you may have the following rights. To exercise any right, contact us at privacy@wegather.ai.

All users (UAE, Indonesia, EU/Spain): access, rectification, erasure (subject to legal retention), restriction of processing, and objection to processing based on legitimate interests.

EU/EEA users (additional GDPR rights): data portability; the right to withdraw consent at any time; and the right to lodge a complaint with your local supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD), www.aepd.es.

UAE users: rights under the UAE PDPL including access, correction, and deletion, and the right to complain to the UAE Data Office. Indonesian users: rights under the Indonesian PDP Law including access, rectification, and erasure.

We respond to valid requests within 30 days (or as otherwise required by law), and may need to verify your identity first.

B9. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure or access. However, no internet transmission is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach likely to result in a risk to individuals, we will notify the relevant supervisory authorities and, where required, affected individuals, in accordance with applicable law.

B10. Children

The Platform is not directed at children under 18, and we do not knowingly collect their personal data. If we become aware that we have inadvertently collected data from a child, we will delete it promptly. If you believe we have, please contact us immediately.

B11. Updates to This Policy

We may update this Privacy Policy from time to time. The effective date above indicates when it was last revised. Material changes will be communicated by updating the effective date and, where appropriate, by notice on the Platform. Continued use following any update constitutes acceptance of the revised Policy.

B12. Contact and Complaints

For any privacy-related query, request, or complaint, contact [Operator Legal Name] — Data Privacy at privacy@wegather.ai (registered address: [Registered address]). If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.