Privacy Policy
Last updated: March 2026
LELAPA S.A.S.U. (“Lelapa”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our website (https://lelapa.co), our services, or communicate with us through any channel, including WhatsApp.
LELAPA S.A.S.U. is a company registered in France (SIREN: 810366559) with its registered office at 45 Rue Custine, Paris 18, 75018, France.
1. Information We Collect
We may collect the following categories of personal data:
Information you provide directly: your name, email address, phone number, company name, job title, country of residence, and any other information you submit through our website forms, membership applications, or communications with us.
Information collected through messaging platforms: when you communicate with us via WhatsApp or other messaging services, we may collect your phone number, message content, and any files or media you share with us.
Information collected automatically: when you visit our website, we may collect your IP address, browser type, device information, pages visited, and referring URLs through cookies and similar technologies.
2. How We Use Your Information
We use your personal data for the following purposes: to provide, maintain, and improve our services, including the WAI Group membership platform and related programmes; to communicate with you about our services, events, and updates through email, WhatsApp, or other channels you have opted into; to process membership applications and manage member accounts; to comply with legal obligations and protect our legitimate interests; and to send you relevant updates, event invitations, and information about our initiatives, but only where you have given your consent or where we have a legitimate interest to do so.
3. WhatsApp Messaging
We use the WhatsApp Business Platform to communicate with our members and community. By providing your phone number and opting in to receive messages from us on WhatsApp, you consent to receiving communications through this channel. These may include service updates, event notifications, membership information, and community announcements.
Opt-in: We will only send you WhatsApp messages if you have explicitly opted in to receive them, either through our website, a membership form, or by initiating a conversation with us on WhatsApp.
Opt-out: You may opt out of receiving WhatsApp messages from us at any time by replying “STOP” to any message we send, or by contacting us at elizabeth@lelapa.co. We will process your opt-out request promptly and remove you from our WhatsApp messaging list.
Message data: Messages sent through the WhatsApp Business Platform are processed by Meta Platforms, Inc. in accordance with their own privacy policy. We encourage you to review WhatsApp’s privacy policy at https://www.whatsapp.com/legal/privacy-policy.
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on one or more of the following legal grounds:
Consent: where you have given us clear consent to process your personal data for a specific purpose, such as receiving WhatsApp messages or marketing communications.
Contract: where processing is necessary for the performance of a contract with you, such as managing your WAI Group membership.
Legitimate interest: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Legal obligation: where processing is necessary to comply with applicable laws and regulations.
5. Data Sharing
We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and services, including hosting providers, messaging platforms (such as WhatsApp/Meta), payment processors, and analytics services. These providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.
We may also disclose your information if required by law or in response to a valid legal request from a public authority.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws. When your data is no longer needed, we will securely delete or anonymise it.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may request that we correct any inaccurate or incomplete data.
Right to erasure: you may request that we delete your personal data, subject to certain legal exceptions.
Right to restrict processing: you may request that we limit the processing of your data in certain circumstances.
Right to data portability: you may request a copy of your data in a structured, machine-readable format.
Right to object: you may object to the processing of your data for direct marketing purposes or on grounds relating to your particular situation.
Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, please contact us at elizabeth@lelapa.co. We will respond to your request within 30 days.
8. Cookies
Our website uses cookies to improve your browsing experience and analyse website traffic. You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place to protect your data, including standard contractual clauses approved by the European Commission.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated policy on this page with a revised “Last updated” date. We encourage you to review this page periodically.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
LELAPA S.A.S.U.
45 Rue Custine
Paris 18, 75018
France
Email: elizabeth@lelapa.co
Phone: +33 6 77 69 43 07
You also have the right to lodge a complaint with the French data protection authority (CNIL) at https://www.cnil.fr if you believe your data protection rights have been violated.