Privacy Policy

Last updated: 25 August 2026

1. Introduction

This Privacy Policy explains how What Software ("What Software", "we", "us", or "our") collects, uses, and protects personal data when you visit what-software.com or contact us about What Hub, our Digital Product Passport platform.

This policy applies only to personal data processed through this website. It does not cover product data or end-customer data that our customers process inside What Hub itself, which is governed by the applicable customer agreement and Data Processing Agreement.

2. Who We Are

What Software operates what-software.com and What Hub, a cloud-based platform that helps manufacturers, importers, and distributors create, publish, and manage Digital Product Passports.

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), What Software is the data controller for personal data processed through this website. You can reach us at contact@what-software.com with any question about this Privacy Policy or about how we handle your personal data.

3. Information We Collect

We collect a limited amount of personal data through this website — only what is necessary to respond to enquiries, operate the site reliably, and keep it secure. You do not need to create an account to browse the website.

Email contact information

When you contact us by email at contact@what-software.com, we process the information you provide: your name, email address, company name if included, and the content of your message. We use this information solely to respond to your enquiry and follow up on your interest in What Hub.

Business contact details

If you contact us directly by email, we collect the contact details and content of that correspondence, including your name, email address, and anything else you choose to share, in order to respond to you.

Technical information

Our website and hosting infrastructure automatically log limited technical information for security, performance, and troubleshooting purposes, such as request timestamps, pages requested, and error events.

IP address

Your IP address is processed automatically by our hosting and security infrastructure and, if you have consented, by Google Analytics. We do not use IP addresses to identify you personally.

Browser/device information

We may process general browser and device information, such as browser type and version, operating system, and screen size, to ensure the website displays correctly and, where you have consented, to compile aggregated analytics.

4. Cookies and Analytics

We use a small number of cookies to run this website and, where you consent, to understand how it is used. You can accept, reject, or customize non-essential cookies at any time using the cookie banner or the "Cookie Preferences" link in the website footer. For details on the individual cookies we use, please see our Cookie Policy.

Google Analytics

With your consent, we use Google Analytics to understand how visitors use our website, such as which pages are viewed and how visitors navigate the site. This processing only takes place after you give consent through our cookie banner, and you can withdraw consent at any time. Data collected by Google Analytics is processed by Google in accordance with Google's own data processing terms.

5. Hosting and Security

This website is hosted on Microsoft Azure Static Web Apps. Our hosting provider processes technical request data, such as IP addresses and request logs, as necessary to deliver the website and protect it against abuse.

This processing is necessary for the security and availability of our website and does not depend on cookie consent. Microsoft's handling of this data is described in the Microsoft Privacy Statement (privacy.microsoft.com).

6. How We Use Your Information

  • To respond to demo requests and other enquiries you submit to us
  • To provide, operate, and maintain the what-software.com website
  • To protect the website and our systems against fraud, abuse, and security incidents
  • To understand how visitors use our website, where you have given consent, so that we can improve it
  • To comply with our legal obligations

Depending on the purpose, we rely on the following legal bases under Article 6 GDPR:

  • Responding to demo requests and business enquiries: Article 6(1)(b), steps necessary prior to entering into a contract, and Article 6(1)(f), our legitimate interest in responding to prospective customers.
  • Operating and securing the website, including hosting and security logging: Article 6(1)(f), our legitimate interest in keeping the website functional, available, and secure.
  • Google Analytics and other non-essential cookies: Article 6(1)(a), your consent, given through the cookie banner, which you may withdraw at any time.
  • Compliance with legal obligations: Article 6(1)(c).

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Demo request and business correspondence data is generally retained for as long as needed to progress the relevant business relationship and a reasonable period afterwards, and is deleted or anonymised when no longer needed.

Technical and security logs are retained for a limited period sufficient to investigate incidents. Analytics data collected with your consent is retained in accordance with Google Analytics' standard retention settings, and is deleted earlier if you withdraw your consent.

9. Data Sharing

We do not sell personal data. We share personal data only with service providers who process it on our behalf and under contract, including our email provider used to handle enquiries, our hosting provider, and our analytics provider where you have consented. These providers may not use your data for their own purposes.

10. International Transfers

Some of our service providers, including Google, may process personal data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards recognised under GDPR, such as the European Commission's Standard Contractual Clauses, so that your personal data continues to receive an equivalent level of protection.

11. Your GDPR Rights

Subject to the conditions and exceptions set out in applicable law, you have the following rights in relation to your personal data:

  • Right of access to the personal data we hold about you
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure of your personal data, where applicable
  • Right to restriction of processing, where applicable
  • Right to data portability, where applicable
  • Right to object to processing based on our legitimate interests
  • Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
  • Right to lodge a complaint with your local data protection supervisory authority

12. Security

We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration, including encryption in transit, access controls, and the use of reputable, security-conscious infrastructure and service providers.

No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of information transmitted to us.

13. Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at contact@what-software.com.