Welivo is run by Certi Technologies Ltd. We collect as little personal data as the service needs, we keep it in the EU, we do not sell it, and this website sets no tracking cookies. If you are a rep whose manager uses Welivo, your employer decides why your data is processed and we act on their instructions.
Who we are
Certi Technologies Ltd, company number 16956446, registered at 86 to 90 Paul Street, London EC2A 4NE. We trade as Welivo. We are the controller for data collected through this website and for our own customer records. For personal data inside a customer's Welivo account (managers, reps, commitments, confirmations, reviews) the customer is the controller and we are their processor.
Questions about this policy go to scott@welivo.co.uk. We do not have a separate data protection officer. We are registered with the Information Commissioner's Office, registration number placeholder, to be added.
This website (welivo.co.uk)
The site is static pages served through Cloudflare. It sets no analytics or advertising cookies and loads no tracking scripts. Fonts and icons are served from this site, not from a third party. Cloudflare keeps standard server logs (IP address, browser, pages requested) for security and to keep the site up, for a short period.
If you fill in the form on the book page we collect what you type (name, work email, company, role, team size, how you track coaching today and anything you add), plus the page you came from and any campaign tag in the link, so we can follow up properly. The form is protected by Cloudflare Turnstile, which checks you are not a bot without a puzzle and without setting a tracking cookie. Enquiries are stored in HubSpot, our customer relationship system, and if you choose a call the booking page is HubSpot's too. If you email us, we keep the email. If you download a template, nothing is collected. We do not ask for an email address to download anything.
The Welivo service
When an organisation becomes a customer we hold, as controller, the details of the people who sign the agreement and pay: name, work email, job title, company, billing details. Card payments are taken by our payment provider and we never see the full card number.
Inside the service, on the customer's instruction, we process:
- Names, work email addresses, team and manager for everyone the customer adds
- Commitments managers make, with dates
- Reps' confirmations of whether commitments were kept
- Coaching events, with dates and any evidence the manager attaches
- Targets, sales figures, pace and the gap, where the customer uploads them
- Performance reviews and the rep's sign-off
- Disputes a rep raises and how they were resolved
- An audit log of every entry, hashed to the one before it
The customer decides what goes in, who can see it and how long it is kept. We do not use it for anything except running the service for that customer. We do not use customer data to train models and we do not sell it.
If you are a rep or employee
If your manager uses Welivo, your employer is the controller and should have told you. In practice this is what happens with your data.
- You have no login and no account. You receive an email, usually on a Friday, with the commitments your manager made to you and two buttons: kept or not kept.
- Your answers are never shown to your manager. They see their own follow-through rate, never who said what. Your answer is final and cannot be changed by anyone after the fact.
- You can see every review of you, with the figures behind it, through a link in your email. You sign reviews yourself.
- A dispute you raise is shown to your manager only if you choose to share it. Otherwise it goes to your organisation's ops or director.
- Requests to see, correct or delete your data go to your employer, who is the controller. We will help them answer within the legal time limit. If you contact us directly we will tell your employer and help.
Our lawful bases
- Contract. Running the service for a customer, billing, support.
- Legitimate interests. Keeping the site and service secure, keeping server logs, replying to enquiries, and keeping the business records a company has to keep. We balance this against your interests and you can object.
- Legal obligation. Tax, accounting and company law records.
- Instruction of the controller. For everything inside a customer's account, we act on the customer's documented instructions under a data processing agreement.
We do not rely on consent for anything on this site, because we do not set tracking cookies or send marketing email to people who have not asked for it.
Who we share data with
Only the suppliers the service runs on, each under a contract that limits what they can do with it.
| Supplier | What for | Where |
|---|---|---|
| Supabase | Database and storage for the service | EU |
| Vercel | Hosting the application | EU region, with edge network worldwide |
| Cloudflare | Hosting this website, DNS, security | Global network, EU data processing available |
| Resend | Sending the service's emails (digests, confirmations, reviews) | EU region |
| Payment provider | Taking card payments | placeholder, to be named when billing goes live |
| HubSpot | Enquiries from this site, bookings, our sales records | EU |
We do not share personal data with anyone else unless the law requires it. We will tell a customer about any legal request for their data unless we are prohibited from doing so.
Where data is stored
Customer data is stored in the EU. Where a supplier moves data outside the UK or EU (for example Cloudflare's global network, or support staff at a supplier based elsewhere) it is covered by the UK International Data Transfer Agreement or the EU standard contractual clauses as adopted for the UK.
How long we keep it
- Inside a customer's account: for as long as the customer sets, per organisation. The default is six years. When a record passes the date it is deleted from the live database and from backups at the next backup cycle. This applies to leavers too, so a leaver's record is there if a claim arrives and gone when the customer says it should be.
- When a customer leaves: we delete their account data 30 days after the agreement ends, unless they ask for an export first or the law requires us to keep something.
- Our own customer and billing records: six years after the relationship ends, for tax and company law.
- Enquiries and emails: up to two years.
- Server logs: up to 30 days.
Your rights
Under UK GDPR you can ask to see the personal data we hold about you, have it corrected, have it deleted, restrict or object to how we use it, and in some cases have it moved to another provider. Email scott@welivo.co.uk and we will reply within one month. If the data sits inside a customer's account we will pass the request to the customer, who is the controller, and help them answer it.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.
Security
Row-level security on every database table, so the database itself refuses to return rows that do not belong to the organisation and role making the request. Encryption in transit and at rest. A hash-chained audit log so that no entry can be altered without the chain breaking. Reps' confirmations are write-once. Access to production data by us is limited to what is needed to run the service and is logged. More on the security and data page.
If we ever have a breach that affects you, we will tell the affected customer without undue delay and, where the law requires, the ICO within 72 hours.
Changes and contact
We will update this page when the service changes and put the date at the top. If a change is significant we will email customers before it takes effect.
Certi Technologies Ltd, 86 to 90 Paul Street, London EC2A 4NE. scott@welivo.co.uk.