Trust & security

Your business and your customers' data, handled with care.

Your bookings hold your customers' names, phone numbers and visit history. That is personal data, and protecting it is part of the job. Here is who stands behind Webook and exactly how we protect what you put in it.

Certified and registered in Uganda

Webook is built and operated by Waesta Enterprises U Ltd, a Ugandan company.

Certified by NITA-U

Waesta Enterprises U Ltd is certified by the National Information Technology Authority, Uganda (NITA-U), the government body that regulates and promotes IT in the country.

NITA-U certified

PDPO data protection certificate

We hold a data protection certificate from the Personal Data Protection Office (PDPO), issued through NITA-U under Uganda's Data Protection and Privacy Act, 2019, covering how we collect, use and protect personal data.

PDPO certified

How we protect your data

Practical controls that are built into Webook, not promises on a slide.

Encrypted in transit and at rest

Everything travels over HTTPS. Integration keys and webhook secrets are encrypted in the database, and shown only once when you create them.

Passwords you can trust

Passwords are stored only as one-way hashes, so even we cannot read them. Weak and common passwords are refused, and a reset signs you out everywhere.

Every business kept separate

Each business's records are walled off from every other's. Automated tests check this on every release, so one client can never see another's bookings or customers.

Roles and least access

Owners, managers, front desk, staff and accountants each see only what their role needs. Give people their own logins and remove them when they leave.

An audit trail

Important actions, such as staff changes and settings, are recorded with who did them and when, so you can see what happened and when.

Sign-in and abuse protection

Email confirmation at sign-up, limits on repeated attempts, and strict browser security headers protect against password guessing, spam and common web attacks.

Backed up

The database is backed up regularly and we watch that backups actually run, so a problem on one day does not cost you your history.

Monitored continuously

Automated checks watch system health, scheduled jobs and failed emails, and our team follows up. Each client is tracked individually, and a failed message is retried automatically before we give up.

Your data stays portable

You can export your business's data at any time, and ask us to delete it. Nobody is locked in.

Our data protection commitments

Following the principles of Uganda's Data Protection and Privacy Act, 2019.

We never sell personal dataNot yours, and not your customers'. Customer details held for you are used only to run your bookings, never for our own advertising.

We collect only what we needWebook asks for the details required to run bookings and your account, nothing more, and we keep it only as long as it is needed.

You stay in controlYou decide who on your team has access, who receives messages, and which integrations are connected. Customers can opt out of marketing messages with one click.

We are open when something goes wrongIf a security incident affects personal data in a way that risks people, we tell the affected business and the regulator as the law requires, and help you respond.

You can exercise your rightsAccess, correction, deletion and objection requests are handled promptly. See our Privacy Policy and Terms of Service.