Privacy Policy

Last updated: 13 September 2026

Webbuild Products is the software distribution, account and licensing platform operated by Stefanos Proios (Στέφανος Πρώιος), sole proprietor, trading as Webbuild. Our general company website is https://webbuild.gr and the product platform is https://products.webbuild.eu. In this policy, “Webbuild”, “we”, “us” and “our” mean the operator of Webbuild Products.

This policy explains how Webbuild Products processes personal information when you visit the platform, create or use an account, purchase or receive a licence, download software, contact us, or use services connected with a Webbuild product. It also explains the data boundaries for Webbuild Business Registry, a self-hosted Perfex CRM module. Product-specific notices may provide additional information where appropriate.

Depending on how you use the platform, we may process your name, email address, account and authentication information, account status and language or theme preference. We process authentication credentials to operate the account; passwords are not displayed to administrators.

The platform may also process product, release, licence, activation and download information, such as the product and release selected, licence status and limits, activation status, installation or version information, download-grant information and operational timestamps. We do not claim that every field is collected for every user.

When a purchase or other commerce event is processed, the platform may record the customer name and email address, the provider or source, an external order or event reference, order status, amount and currency, payment status and related timestamps, and refund information where applicable. The platform’s current data model does not store payment-card numbers or security codes.

Technical and security information may include session and security-token data, IP or request information available in application or hosting logs, and information needed to protect the platform, investigate faults and maintain audit records.

We use account information to authenticate you, provide the customer portal, deliver downloads and licences, communicate about your account or transaction, and provide support. Licences are internal Webbuild entitlements. An external order, marketplace or provider reference remains an external reference and is not used as the internal licence secret.

If you contact Webbuild, we process the information you choose to provide, such as your name, email address, product or licence details and the contents of your enquiry, to respond and keep appropriate support records.

Webbuild Business Registry is a self-hosted Perfex CRM module. It can query external services and, where the operator chooses, present results for review before selected updates are made in the customer’s own Perfex installation.

The module is not a replacement for the customer’s own data-governance responsibilities. Webbuild does not centrally store the customer’s self-hosted Perfex CRM business or customer records through the module’s normal operation.

Where enabled and used by the customer, the module can query Companies House, an official third-party UK company information service. Results may be previewed before an operator-selected update in the customer’s own system. Companies House controls its service and data; its own terms and privacy information also apply.

Where enabled and used by the customer, the module can query the HMRC Check a UK VAT Number API, an official third-party HMRC service, to check VAT information. Results may be previewed before an operator-selected update in the customer’s own system.

The integration uses API or OAuth credentials configured for the integration. Webbuild does not store or request the customer’s HMRC sign-in username or password. Webbuild is not HMRC-approved, HMRC-accredited or HMRC-recognised, and use of the HMRC service remains subject to HMRC’s own terms and availability.

Where applicable and enabled, the module can query Greek AADE services as external third-party services. The available service, information returned and any authentication requirements depend on the applicable AADE service. Results may be previewed before an operator-selected update in the customer’s own Perfex installation. AADE’s own terms and privacy information also apply.

Customer CRM records, business records, contact details, notes, documents and other information entered into or retained by a customer’s self-hosted Perfex installation remain under that customer’s control and responsibility. Webbuild does not claim to centrally store or control those records merely because the Webbuild Business Registry module can access or update them.

Where UK or EU data-protection law applies, we generally rely on the following legal bases, as appropriate to the activity: performance of a contract or steps requested before a contract; our legitimate interests in operating, securing and improving the platform and providing support; compliance with legal obligations; and consent where consent is required. Where we rely on legitimate interests, we consider the impact on individuals and their rights.

The platform and products may interact with third-party providers, including hosting and infrastructure providers, email or SMTP providers, payment or marketplace providers when enabled, Companies House, HMRC services and Greek AADE services. Each provider processes information under its own terms and privacy information. We only describe an integration as active where it is enabled and used for the relevant purpose.

The Webbuild Products platform is hosted in the EEA. Some third-party providers may process information outside the EEA depending on the service used and its infrastructure. Where required, we use an appropriate legal transfer mechanism and safeguards.

We use reasonable technical and organisational measures appropriate to the platform, including access controls, authenticated administration, least-privilege operational access, secure transport where provided by the platform, logging and review of relevant security events. No online service can be guaranteed completely secure. We do not make an unsupported claim about encryption at rest.

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, including to provide accounts, licences, downloads and support, meet legal or accounting obligations, resolve disputes, enforce agreements and protect the platform. Retention can vary by record type and circumstances; fixed retention periods are not currently defined for every category. When information is no longer required, we delete it, anonymise it or securely restrict it where appropriate.

Subject to applicable law, you may have rights to request access to your personal information, correction of inaccurate information, deletion, restriction or objection to processing, data portability, and withdrawal of consent where processing is based on consent. You may also complain to the relevant UK or EU supervisory authority. We may need information to verify your identity and may apply lawful exceptions.

You can control, export, correct or delete records held in your own self-hosted Perfex installation using that installation’s administrative tools and procedures. Requests about Webbuild Products account, licence or transaction information can be sent to us using the contact details below. Deleting a platform account or record may not remove information that we must retain for legal, security, dispute or transaction-record purposes.

Webbuild Products uses essential session and security mechanisms, including cookies or similar storage needed for authentication, CSRF protection, language selection, preferences and safe operation of the platform. These mechanisms are not described as advertising or analytics cookies. Blocking essential cookies may prevent login or other platform functions from working.

Please report suspected security issues promptly to [email protected]. Do not include credentials, API secrets or unnecessary personal information in a report. We assess and respond to incidents in accordance with applicable law.

We may update this policy when the platform, products, providers or legal requirements change. The “Last updated” date identifies the current version. Material changes will be communicated through appropriate platform or account channels where required.

For privacy questions or requests about Webbuild Products, contact Webbuild through https://webbuild.gr or https://products.webbuild.eu. For security reports, contact [email protected].

When a customer requests an HMRC VAT check through the managed Webbuild Business Registry gateway, Webbuild sends only the VAT number and country code needed for that requested check and returns the VAT registration information made available by HMRC. The gateway does not intentionally persist HMRC VAT lookup request or response bodies in application storage during normal operation.

The purpose of this processing is to provide the VAT verification requested by the customer as part of the Business Registry service, including validation of a VAT registration, the registered business name or address, and related legitimate business-record or due-diligence tasks. HMRC lookup data is not used in normal operation for marketing, marketing-list creation, resale, public publication or dataset building, and is not repurposed for unrelated uses. Where UK or EU data-protection law applies to Webbuild's operation of the gateway, our lawful bases are performance of the applicable service contract and our legitimate interests in operating and securing that service.

Those lawful bases describe Webbuild's own gateway processing only. The customer remains responsible for determining and documenting its own role and lawful basis for personal data that it stores or uses in its own self-hosted Perfex CRM, and for giving any notices and handling any rights requests required for that processing.

Webbuild is responsible for protecting personal data that Webbuild itself handles through Webbuild Products and the managed gateway. Customers remain responsible for protecting information retained in their own self-hosted Perfex environment.

HMRC gateway traffic is transferred using HTTPS/TLS. HMRC application credentials that Webbuild needs to retain are encrypted at rest using the platform's application encryption and are not returned in API responses or written to application logs. HMRC client secrets and access tokens are not logged. The Business Registry module encrypts provider credentials that it stores in the customer's Perfex environment. Webbuild does not request or store a customer's HMRC sign-in username or password.

Customers can control, correct, export or delete records retained in their own Perfex installation. Requests concerning Webbuild Products account, licence or transaction information can be made using the contact details in this policy.