Privacy Policy

Westbase One GmbH ("Westbase", "we", "us", or "our") operates the platform at westbase.io, providing company formation and business services across 14 jurisdictions. Our registered address is [Registered Address], Germany.

We are the data controller for personal information collected through our platform. For any privacy questions, contact us at: privacy@westbase.io

We collect the following categories of personal information:

Identity Information:

• Full legal name
• Date of birth
• Nationality and country of residence
• Government-issued ID (passport, national ID)
• Tax identification numbers

Contact Information:

• Email address
• Phone number
• Residential and business address

Business Information:

• Company name and structure preferences
• Business description and industry
• Intended country of incorporation
• Beneficial ownership information

Technical Information:

• IP address and device information
• Browser type and version
• Pages visited and time on site
• Cookies and tracking technologies

We process your personal data for the following purposes:

• Providing company formation services and managing your engagement
• Conducting required KYC/AML identity verification
• Communicating updates on your formation progress
• Processing payments and issuing invoices
• Complying with legal obligations in each jurisdiction
• Improving our platform and services
• Sending relevant service communications (opt-out available)

Under GDPR, we rely on the following legal bases:

• Contract performance — to deliver the services you've requested
• Legal obligation — for KYC/AML compliance in each jurisdiction
• Legitimate interests — for platform improvement and fraud prevention
• Consent — for marketing communications (withdrawable at any time)

We share your information only with:

• Licensed local legal partners in your chosen jurisdiction (required for formation)
• Identity verification providers (e.g., Onfido, Stripe Identity)
• Payment processors (Stripe)
• Cloud infrastructure providers (under data processing agreements)
• Regulatory and government bodies when legally required

We do not sell your personal data to third parties.

We retain your personal data for as long as necessary to provide our services and meet legal obligations. Specifically:

• Account data: for the duration of your account plus 5 years
• KYC/AML records: 5–10 years depending on jurisdiction
• Financial records: 7 years (tax and accounting requirements)
• Marketing preferences: until you withdraw consent

If you are in the European Economic Area, you have the right to:

• Access your personal data (data subject access request)
• Rectify inaccurate data
• Request erasure (where legally permitted)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@westbase.io. We will respond within 30 days.

We use cookies and similar tracking technologies. Please see our Cookie Policy for full details.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, strict access controls, and regular security audits. However, no system is perfectly secure — we encourage you to use strong passwords and not share account credentials.

We may update this policy from time to time. Material changes will be notified by email. The current version is always available at westbase.io/privacy.