Privacy Policy

Last updated: 15 July 2026

1.Crucial information and our identity

Purpose of this privacy notice

This notice explains how Wemates gathers and processes your personal data while you use our platform — whether you're getting a quote, using a product or service, or otherwise engaging with us.

Our platform is designed for adults, and we don't intentionally gather data about children.

Please read this notice alongside any other privacy-related documents or processing notices we may give you on specific occasions — it's supplementary, not a replacement for those.

Data controller

"Wemates" is an officially recognised trademark of Radarme Sp. z o.o. All rights reserved. Use of the Wemates name, logo, and associated branding elements is under the exclusive purview of Radarme Sp. z o.o. Unauthorised use or replication without express permission is strictly prohibited.

Wemates P2P Risk-Sharing Network is the controller and caretaker of your personal data, referred to as "Wemates", "we", "us", or "our" throughout this notice.

We have appointed a Data Privacy Officer (DPO) to handle all queries related to this notice. If you have concerns, need clarification, or wish to exercise your legal rights, please contact our DPO using the details below.

Contact information

For serious data protection concerns, you're entitled to lodge a complaint with your local Data Protection Authority. We'd appreciate the chance to address any concerns directly first, before you approach a higher authority.

Links to third-party websites

Our platform may contain links to external websites, plugins, or applications. Using these links may allow third parties to collect or share data about you. Wemates does not control these third-party sites and cannot be held responsible for their privacy practices. Once you leave our platform, we encourage you to review the privacy policy of every site you visit.

2.The data we gather about you

Personal data is any information that allows an individual to be recognised. If information is modified so that your identity is concealed (made anonymous), it's no longer considered personal data.

We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

• Identity Data — first name, middle name, last name, username or similar identifier, marital status, title, date of birth, and gender.
• Contact Data — billing address, delivery address, email address, and phone numbers.
• Financial Data — bank account and payment card information.
• Transaction Data — payments to and from you, and details of products and services you've acquired from Wemates.
• Technical Data — device IMEI, serial number, IP address, login credentials, browser type and version, geographical settings, browser plug-ins, operating system, and other technical details of the devices you use to access our platform.
• Profile Data — your login details, purchases or orders, preferences, feedback, and survey responses.
• Usage Data — how you navigate and use our platform, products, and services.
• Marketing and Communications Data — your preferences on receiving marketing from us and our partners, and your preferred communication channels.

We also gather Aggregated Data — statistical or demographic data derived from your personal data but not, by itself, personal data, since it doesn't reveal your identity. If Aggregated Data is combined with personal data in a way that does reveal your identity, we treat the combined data as personal data under this policy.

Consequences of not providing personal data

Where we're legally required to collect personal data, or need it to perform a contract with you, and you don't provide it when asked, we may not be able to perform that contract — for example, delivering a service you've requested. If this happens, we'll let you know.

3.Methods of personal data collection

Direct engagements

You share data with us directly when you:

• register for our risk-sharing services or products;
• create an account on our platform;
• opt in to marketing communications;
• take part in contests, promotions, or surveys;
• give us feedback or other input.

This may involve sharing your Identity, Contact, and Financial Data, through online forms, post, phone, email, or other direct correspondence.

Automated technologies and interactions

As you use our platform, we automatically collect Technical Data about your device and your browsing behaviour, using cookies, server logs, and similar technologies. See our Cookie Policy for details.

Third-party or public sources

We also receive data about you from external third parties and public databases, including:

• Technical Data from analytics providers (e.g. Google) and advertising networks (e.g. Meta), which may be based outside your jurisdiction;
• Contact, Financial, and Transaction Data from technical solution and payment providers, such as Stripe, based within the EU;
• Identity and Contact Data from data brokers or aggregators.

4.Utilisation of your personal data

We process your personal data on one of the following legal bases:

1. To perform a contract you've entered, or are about to enter, with us.
2. Where it's in our legitimate interest, and this doesn't override your rights and freedoms.
3. To comply with a legal or regulatory obligation.
4. With your explicit consent — mainly when we send third-party marketing by email or text. You can withdraw this consent at any time.

Marketing

We may suggest products or services we believe align with your interests, based on your Identity, Contact, Technical, Usage, and Profile Data — if you haven't opted out of marketing communications. We only share your data with third parties for their marketing with your explicit agreement. You can change your marketing preferences at any time via platform settings or the opt-out link in our communications; opting out of marketing doesn't affect data shared during transactions.

5.Sharing your personal data

We may share your personal data with:

• Associated third parties — as detailed in the Glossary below, always within the purposes described in Section 4.
• Business transitions — if parts of our business are sold, transferred, or merged (or we acquire or merge with another entity), the successor may have access to your personal data, under the same principles set out in this policy.

All third-party collaborators must keep your personal data confidential and secure, and may only process it for the purposes we specify — never for their own separate purposes.

6.Cross-border data transfers

Some of our collaborations involve entities outside the European Economic Area (EEA), meaning your data may sometimes be transferred beyond EEA borders. When this happens, we ensure it's treated to the same standard as within the EEA, through:

• Adequate national data protections — transfers only to countries the European Commission recognises as having adequate protection.
• Standard contractual clauses — European Commission-approved contracts requiring providers to protect your data to EEA standards.
• Equivalent safeguards for US-based partners, in line with applicable EU-US data transfer frameworks.

7.Ensuring your data's security

• Robust protective measures — we use up-to-date security protocols to protect your data from loss, unauthorised access, alteration, or disclosure.
• Selective access — your data is only accessible to personnel and partners who need it for legitimate operational purposes, under strict confidentiality obligations.
• Prompt response to data breaches — we have processes to identify and contain incidents quickly, and to notify you and relevant regulators where the law requires it.

8.Retention of your data

Regulatory requirements mean we retain core Contact, Identity, Financial, and Transaction Data for seven and a half years after your membership with Wemates ends.

Where possible, you have the right to request deletion of your personal data — see "Erase your data" under Your legal rights, or contact privacy@wemates.ai.

We may anonymise data for research and analytics, in which case it can no longer identify you and may be retained indefinitely.

9.Your legal rights

As a Wemates member, you have the following rights under data protection law:

To exercise any of these rights, contact privacy@wemates.ai. This is usually free, unless your request is clearly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline the request. We may need to verify your identity before responding, and we aim to respond within one month — complex or multiple requests may take longer, in which case we'll keep you updated.

10.Glossary & guide

Lawful grounds we rely on

• Legitimate interest — we weigh our operational interests against your rights, and only proceed without your explicit consent when it doesn't unfairly affect you.
• Performance of contract — processing needed to deliver a contract with you.
• Legal or regulatory compliance — processing required to meet a legal or statutory obligation.

Who we may share data with

• Consultation allies — legal advisors, banking affiliates, auditors, and insurers within the EEA.
• Regulatory entities — tax and other regulatory bodies within the EEA.
• Digital solution providers — SaaS partners in the EEA, UK, or US.
• Claims administration — entities within the EEA that help process claims.
• Fraud and insurance oversight bodies — EEA-based agencies monitoring fraud.
• Financial channels — payment and banking partners within the EEA.