Privacy Policy

Updated: 13 October 2026

Who is responsible

Yuventa Services LTD, registration number 118725, operates we-translate.biz and is the controller of personal data used to manage this website, customer accounts, orders and payments. Our registered address is Suite 3, Watergardens, Block 4, Gibraltar, GX11 1AA. Contact us about privacy at [email protected] or through Contact us. This notice covers this website and its translation services; another website may have its own privacy notice.

Information we process

Depending on your use of the service, we process account and contact details, such as your name, username, email address and language preferences; order details, such as the language pair, service type, word count, price and status; documents, source text and completed translations; payment references, amounts, currencies, dates, statuses and refunds; and correspondence with support.

We also process technical information needed to operate and protect the service, including IP addresses, session information and access logs. We receive data from you, from your use of the website, from translators completing your order and from payment organisations reporting payment results. We do not require every category for every customer.

Purposes and lawful bases

We use necessary account, order and document information to perform the translation contract or take steps you request before an order. Necessary payment information supports charging for services and administering the agreed balance and refunds.

Where applicable, we rely on legal obligations for accounting, tax or legally required disclosures. For security, fraud prevention, payment disputes and justified payment-provider reviews, we assess our or a third party's legitimate interests, the necessity of the processing and its effect on your rights. A provider's contractual request does not by itself establish a legal obligation imposed on us.

Where consent is the appropriate basis, we ask for specific, informed consent and allow you to withdraw it. Accepting the Terms, using the website or acknowledging a cookie notice is not blanket consent to every use of your personal data. Necessary service messages are distinct from optional marketing.

Payment processing and reviews

We may disclose relevant information to payment organisations, acquiring banks and payment systems to process payments and refunds, address disputes, prevent fraud or respond to justified transaction and compliance reviews. We verify the purpose and recipient, identify a lawful basis and limit disclosure to what is necessary.

Depending on the review, this may include customer identification and contact details, account identifiers, the relevant transaction history, order descriptions, invoices and records evidencing service delivery. Reviews do not automatically permit a full account export or disclosure of unrelated transactions. We do not publish your email address; necessary disclosure to an authorised recipient is different from making it public.

Identity and source-of-funds verification

We do not automatically treat every customer as having completed identity or source-of-funds verification. If additional verification is justified, we may ask for the minimum necessary information after explaining its purpose, lawful basis, recipients and relevant consequences of not providing it.

We may use or disclose identity, address or funds evidence only where it has been lawfully obtained and its use for that purpose is lawful and necessary. A passport or bank statement submitted for translation is not automatically a KYC or source-of-funds document. A card payment identifies the payment method, not necessarily the economic origin of the money.

Confidential documents and translations

Source files, translation text, completed work and private support correspondence are confidential. Translators and relevant service contractors may access the information needed to fulfil an order under confidentiality and data-protection obligations.

We do not routinely send document contents to payment organisations. A proposed disclosure of contents requires a separate necessity and legal assessment, including confidentiality obligations, information about other people and any additional conditions applicable to sensitive data. Where transaction metadata or redacted delivery evidence is sufficient, we use it instead. Documents revealing health, beliefs or other special-category information require additional protections.

Other recipients

Necessary information may be available to hosting, technical support and communications contractors, professional advisers, and authorities where disclosure is lawfully required or otherwise justified under an applicable legal basis. Contractors processing data on our behalf are subject to appropriate contractual obligations. A payment organisation or authority may act as an independent controller for its own legal responsibilities.

A lawful business transfer may involve the necessary records, subject to appropriate safeguards and information requirements. We do not sell identifiable customer data for third-party marketing. Properly anonymised statistics may be used for service analysis.

International data transfers

Our company is established in Gibraltar. Recipients or service infrastructure may be outside Gibraltar. For a transfer of personal data, we identify the destination and use an applicable mechanism under the relevant data-protection law, such as an adequacy provision or appropriate contractual safeguards. Article 45 of the Gibraltar GDPR permits transfers of personal data to the United Kingdom and EU Member States; data transfers elsewhere require the applicable conditions to be assessed. A permitted destination does not remove the need for a lawful basis or data minimisation.

Contact [email protected] for information about the recipients, destinations and safeguards relevant to your data. Additional requirements may apply where processing is also subject to EU or other applicable data-protection law.

Retention and deletion

Account records are retained while needed to administer an account and related service obligations. Order documents and translations may remain in the service archive for delivery, customer access, corrections and relevant disputes; they are not treated as public records. We assess continued necessity and applicable deletion requests.

Financial and transaction records are retained for applicable accounting, tax and legal requirements and for necessary dispute or claim handling. Closing an account does not automatically require destruction of records that must lawfully be retained. Technical and support records are kept according to their operational or security purpose. The applicable legal period, the ongoing relationship, outstanding orders or claims and the need for the record determine retention, rather than an unlimited right to keep everything.

Deletion may be subject to lawful exceptions and the ordinary removal or replacement of backup copies. Ask [email protected] about the retention criteria applicable to a particular record or to request deletion.

Cookies and security

Cookies and similar storage support sign-in, sessions and language preferences. You can manage cookies through browser settings; disabling necessary cookies may affect the service. Optional cookie use must have an appropriate lawful basis and consent where required; a general statement that you continue browsing is not blanket consent.

We use appropriate technical and organisational safeguards, including controls on access and suitable protection when data is transmitted. No system is completely risk-free, but this does not remove our responsibilities to protect data or make private documents publicly accessible.

Your rights and complaints

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Rights have legal conditions and exceptions; for example, deletion does not override a valid record-keeping obligation.

Send requests to [email protected]. We may ask for proportionate information to confirm your identity and protect other people's data. We respond within the applicable statutory period, ordinarily one month, and explain any lawful extension or refusal. You may complain to the Gibraltar Regulatory Authority at Gibraltar Regulatory Authority (GRA), and to another competent authority where applicable.

Changes to this notice

We identify the current version by its update date and preserve earlier editions. We provide appropriate notice of material changes. Before using existing data for a new purpose, we assess its lawfulness and provide the required information, subject to applicable legal exceptions. A new notice does not retrospectively create consent or legalise an earlier disclosure.