Data protection

Privacy

In short: this website uses no cookies and doesn’t follow you around the web. We count visits anonymously, with a program on our own servers; the only data really about you is what you write in the form. If we’ve sent you a preview of your website, though, we know more there – who opened it, when and what they looked at – and below we tell you exactly what.

Who processes the data

WeSite, Via Beroldingen 12, 6850 Mendrisio, Canton Ticino, Switzerland – info@we-site.ch.

What we collect, and when

If you fill in the form, we receive your business’s name, your name, your email address, your phone number if you leave it, your sector and whatever you write in the message. Along with it we record the IP address the submission comes from and the page it was sent from: they help us stop automated submissions and understand where people write to us from.

If we’ve sent you a preview, by letter or by email, we collect what is described in the section below.

If you email us, we process what it contains, for as long as it takes to reply and to keep a record of our relationship.

If you’re a client and use the client area, we record every sign-in (including failed ones), every sign-out, password changes and resets, invitations and roles, together with the IP address and the string your browser identifies itself with. We also record who changed what in the services, the plan and the contract, and when. If one of us opens the client area as you see it, to help you, we record that under their name. This protects your access and tells us, for the contract, who asked for what.

On every page of this website we count the visit: which page, which website you came from, the country, the type of device, the browser, the language, and whether you pressed the preview button. This is done by Umami, a program installed on our own servers, not a third-party service: no cookies, no identifier stored on your device, and the IP address is not kept – it is used only for the length of a calculation, to tell whether two pages belong to the same visit. From it we learn how many people read what, not who you are.

The server that delivers these pages logs requests as any web server does – IP address, time, page – for security and troubleshooting. These logs are not used to profile anyone.

If we’ve sent you a preview

A preview is the website we built for your business before we met you, and we send it to you ourselves: by a letter carrying a QR code, or by email. Here, unlike on the rest of this website, we know who received it, and we record what happens next.

The link is personal. The QR code, the address printed beneath it and the button in the email are different for every letter and every email we send: when someone opens them, we know which letter or email it came from, and so who we sent it to.

Our emails about the preview tell us whether they were delivered, whether they bounced and whether they were opened. To tell when one is opened, they contain an invisible image served from our own servers. No other email we send you – quotes, invoices, notices – contains anything of the kind.

When you open the link, we record the time, the type of device, the operating system, the browser, the language, the page you came from and your approximate location (the town, derived from the IP address). We also keep the IP address and the string your browser identifies itself with, but only for a limited time: they help us tell a person from a program that checks links, such as those used by company mailboxes.

On the preview we record which pages you read, for how long and what you tapped – a phone number, the button to write to us – with the same program on our servers that counts visits to this website. To link visits back to the letter or email you came from, the preview keeps a single code in your browser’s storage: that of the letter or email, not your name. A recording of how you moved around the page may also be kept, with the text hidden and nothing of what you type.

We do this to know whether the preview reached you, whether it was useful and when it makes sense to call you back, instead of phoning at random. We build no profile from it and use it for nothing else. If you’d rather we didn’t, just say so: reply to the email, write to the address on this page or use the unsubscribe link at the bottom of the email. From that moment on, we stop.

Cookies and tracking

There are no cookies on this website: not ours, not third parties’, not advertising ones. There are no Meta or Google pixels, no Google Analytics, and the pages talk only to our own servers – the fonts and animations are served from here, and the statistics stay with us. That’s why you see no banner: there would be nothing to accept.

The only invisible image we use is the one in our emails about the preview, and the only code we leave in a browser is the preview’s own, both described above. They are ours, served from our servers, and nobody else sees them.

Why we process it

  • to reply to you and prepare the preview you asked for;
  • to know whether the preview we sent you reached you and was useful, and when it makes sense to call you back;
  • to manage the relationship if you become a client: contract, invoices, support;
  • to protect the website from automated submissions and abuse;
  • to meet our legal obligations, above all our accounting ones.

We sell data to no one and don’t use it to send you other people’s advertising. If you write to us once and nothing comes of it, you won’t end up on any list.

Who we share it with

Only with those we need to run the service, each for their own part: the provider hosting our servers, the service that delivers the emails we send you, and – if you become a client and pay by card – the payment provider. None of them uses the data for their own purposes.

Some of these providers may process data outside Switzerland, in the European Economic Area (EEA), which offers protection recognised as adequate.

How long we keep it

We keep an enquiry that doesn’t lead to a client relationship for two years at most, so that if you write again we know what we talked about. A client’s data stays for as long as the relationship lasts and, for contracts and invoices, for the ten years Swiss law requires. Then it is deleted.

The client area’s log follows the same logic. We keep sign-ins, with the IP address and the browser, for one year; who changed what in your details for two years; and anything concerning invoices, payments and contracts for ten years from the end of the financial year, like the accounts. Backups also hold these entries until the backups themselves expire.

For a preview we sent you, we delete the IP address and the browser string 90 days after the preview has expired. The rest – when it was delivered and opened, on what device, from which town, what was looked at – stays on file under your business for as long as an enquiry would: two years, if you don’t become a client.

What you can ask of us

You can ask us which of your data we hold, to correct it, to delete it, to hand it over in a readable format, or to stop processing it. Write to info@we-site.ch: we reply within one working day and charge nothing for it. For us to stop recording what happens with a preview, it’s also enough to reply to the email that brought it, or to use the unsubscribe link at the bottom.

If you think we’re getting it wrong, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

Security and changes

Pages are sent encrypted, access to the data is limited to the three of us, and our systems are kept up to date. If we change this notice, the date below changes too.

Last updated: 16 September 2026.