1. Scope of this policy
This Privacy Policy applies to the Lepem WorkHub website and the marketplace services operated under that name ("Platform", "we", "us", or "our").
It explains the categories of information that may be processed, why that information may be needed, when it may be shared, and what privacy choices may be available.
2. Information we may collect
The information collected depends on which features are actually available and how you use the Platform.
- Account information: name, email address, account role, and authentication-related information.
- Task information: task descriptions, budgets, deadlines, submitted deliverables, and task-related messages where those features are provided.
- Transaction information: payment status, transaction references, amounts, and payment-provider records. Full card or bank credentials should be handled by authorized payment providers where possible.
- Contact information: details and messages you provide when contacting us or submitting a partnership inquiry.
- Technical information: limited device, browser, log, and diagnostic information that may be generated when the website is accessed.
- Cookie information: information stored through cookies or similar technologies, depending on the tools used and your choices.
We should collect only information that is reasonably necessary for specified, legitimate purposes and handle it in accordance with applicable law.
3. How information may be used
Depending on the features provided, information may be used to:
- Create, authenticate, and manage user accounts.
- Display task listings and coordinate client-worker assignments.
- Process payments, refunds, and transaction-related inquiries.
- Respond to messages, complaints, and partnership proposals.
- Maintain security, investigate abuse, and prevent fraud.
- Maintain, troubleshoot, and improve the Platform.
- Meet legal, accounting, and regulatory obligations.
- Send service-related notices and other communications where permitted.
We should not use personal information for an unrelated purpose without an appropriate legal basis or any required notice or consent.
4. Legal grounds for processing
Where applicable law requires a legal basis for processing personal information, the basis may include providing a requested service, complying with a legal obligation, pursuing legitimate interests that do not override applicable rights, or obtaining consent where consent is required.
The applicable basis depends on the information, purpose, and jurisdiction. Where processing relies on consent, you may have the right to withdraw that consent, subject to applicable law.
7. Data retention
We should retain personal information only for as long as needed for the purpose for which it was collected, including providing services, resolving disputes, maintaining appropriate records, and meeting legal obligations.
Retention periods depend on the type of record, the reason it is held, and applicable law. Information may be deleted, anonymized, or securely disposed of when it is no longer required, subject to lawful retention obligations.
8. Data security
Appropriate technical and organizational safeguards should be used to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.
Safeguards may include access controls, secure authentication, encrypted connections, appropriate secret management, backups, and security monitoring. No online service can guarantee absolute security.
Security incidents should be handled under an appropriate response process, including notices to affected people or authorities where required by law.
9. Your privacy rights and choices
Depending on the law that applies to you, you may have rights to request access to personal information, correction of inaccurate information, deletion, a copy or transfer of certain information, restriction or objection to particular processing, or withdrawal of consent.
You may also be able to close your account or change certain communication and cookie preferences. Some records may need to be retained where the law permits or requires it.
To make a privacy request, use our Contact page. We may need to verify your identity and will respond according to applicable legal deadlines.
10. International data transfers
Some service providers may process information in countries different from the country in which you live. Where such transfers are subject to legal restrictions, appropriate safeguards and required transfer mechanisms should be used.
The final version of this policy should identify relevant international processing arrangements where legally required.
11. Children's privacy
The Platform is intended for users who meet its published age requirements and can legally enter into the relevant agreements. We do not knowingly seek to collect personal information from children in violation of applicable law.
If you believe a child has provided personal information in appropriately, contact us so the situation can be reviewed and appropriate action taken as required by law.
12. Third-party websites and services
The Platform may link to external websites or use third-party services. Those services may have their own privacy policies and practices. Review their terms before providing personal information.
We are not responsible for independent privacy practices outside our control, subject to any responsibilities imposed by applicable law.
13. Changes to this policy
We may update this policy when our services, technologies, or legal obligations change. The latest version should be published on this page with an updated revision date.
Where required, we will provide notice or obtain consent before implementing changes that require it.
14. Contact us about privacy
For questions or requests relating to personal information, visit our Contact page.
Before launch, add the official name and contact details of the entity responsible for the Platform's data processing, together with any required privacy or data-protection contact information.