Wareflows · Behome
Privacy notice
How Wareflows handles personal data when providing Behome and responding to inquiries.
About this notice
Wareflows operates Behome. This notice explains how we handle personal data when you visit our website, contact us, use Behome or interact with an organisation that uses Behome.
Our processing is subject to Albania’s Law no. 124/2024 “On Personal Data Protection” and, where applicable, the EU General Data Protection Regulation (GDPR).
Wareflows acts as controller for website inquiries, user accounts, security and service administration. When a customer agency uses Behome to process property, lead or customer communication data, that agency normally acts as controller and Wareflows processes the data on its behalf.
What information we collect
- Information you provide directly, such as your name, email, company and message when you contact us, as well as account, authentication, organisation-membership and support information.
- Customer Data submitted or collected by a customer agency, including property, lead and customer communication records.
- Connected-platform data, such as account and profile identifiers, authorisation credentials, permissions, connection status, participant and message identifiers, message content, timestamps, delivery information and attachments.
- Technical and security data, such as IP address, browser or device information, access times, and limited delivery, diagnostic and security records.
We receive information directly from you, from Behome customers and authorised users, from connected platforms when an integration is enabled, and from normal operation of the service. We do not buy contact lists or use public social profiles to enrich customer records.
How we use personal data
- To respond to inquiries and take steps requested before a contract.
- To create accounts, authenticate users and provide, administer and support Behome.
- To process Customer Data according to the customer agency’s instructions.
- To maintain connections requested by customers and deliver communications.
- To secure the service, prevent abuse, diagnose faults and maintain records.
- To comply with law, resolve disputes and protect legal rights.
We do not use website inquiries for unrelated marketing unless you separately ask to receive it.
Legal bases for processing
Where Wareflows acts as controller, we process personal data as needed to enter into or perform a contract, to comply with legal obligations, and for legitimate interests such as responding to requests, operating and securing the service and protecting legal rights. Where consent is required, we will ask for it separately and it may be withdrawn at any time without affecting earlier lawful processing.
Where Wareflows acts as processor, the customer agency determines the purpose and legal basis and Wareflows follows its documented instructions. If information is required to enter into or perform a contract and is not provided, we may be unable to provide the requested account or service.
Connected platforms, including Meta
When an authorised customer connects a Meta service or another platform, the information made available depends on the service and permissions approved. It may include account and profile identifiers, permissions, authorisation credentials, connection status, communications, participant and message identifiers, timestamps, delivery information and attachments.
We process this information only to provide and protect the connection requested by the customer and in accordance with the customer’s instructions. We do not use connected-platform data for advertising, sell it or use it to build independent profiles about individuals.
How we share personal data
Personal data may be disclosed to authorised users of the relevant customer, service providers that help us operate, secure, support or maintain the service, and connected platforms selected by the customer. We may also disclose data to professional advisers, competent authorities or another party where required by law or necessary to establish, exercise or defend legal claims.
Recipients receive only the information needed for their role and are subject to appropriate contractual, confidentiality, data-protection and security obligations. We do not sell personal data or disclose it for third-party advertising.
International transfers
Personal data may be processed outside the European Economic Area where a service provider or connected platform operates internationally. Where required, we rely on an adequacy decision, the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism, and apply supplementary safeguards where appropriate. You may contact privacy@wareflows.com for information about safeguards relevant to your personal data.
How we store and secure personal data
We apply appropriate organisational and technical measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No method of storage or transmission is completely secure, so we review and improve these measures as risks and the service change.
Website inquiries are kept only while needed to handle the conversation and maintain necessary business or security records. Other data is kept while it is needed to provide the service, satisfy the customer agency’s documented instructions and meet legal or security obligations. Connected-account data is removed when it is no longer required for the authorised connection, subject to limited retention required by law, security or the establishment, exercise or defence of legal claims. Protected backups expire under controlled retention schedules.
Your privacy rights and choices
Depending on applicable law, you may request access to, correction or deletion of your personal data; ask us to restrict processing; object to processing; request portability; or withdraw consent where processing relies on consent. These rights may be limited where the law permits.
If your data was provided to a customer agency, that agency is normally the first contact because it controls the customer record. Wareflows will assist the agency with verified requests where required. We respond to requests for data we control without undue delay and normally within one month. Where the law permits an extension, we will explain it within the first month.
You may also complain to the data protection authority where you live or work, where the issue occurred, or to the authority responsible for Wareflows. The competent Albanian authority is the Information and Data Protection Commissioner.
Contact us
Wareflows sh.p.k.
Rr. Abdulla Keta, Tirana, Albania
+355 2001094
privacy@wareflows.com
Changes to this notice
We may update this notice when our processing changes. Material changes will be communicated through the service or directly to affected customers.