Privacy policy
Last updated: 19 March 2026
Wipick AB ("Wipick", "we", "us" or "our") processes personal data in accordance with GDPR and Swedish law. This policy explains how data is collected, used, shared, and protected.
1. Data controller
Wipick AB
Registration number: 559554-5004
Address: Mariagatan 8 a, 172 30 Sundbyberg, Sweden
Email: support [at] wipick.se
2. Personal data we process
We only process data needed to provide and improve the service securely.
- Contact and order data (for example name, email, phone, address).
- Technical data (for example IP address, browser, device, logs).
- Usage data (clicks, selections, searches, service interactions).
- Consent data for cookie categories and choices.
3. How we collect data
Data is collected when you use the website, complete forms, or contact us.
- Directly from you through forms and order steps.
- Automatically through necessary technical logs and cookies.
- From providers/partners when you ask us to facilitate an order.
Analytics processing is activated only when consent exists through Google Analytics (gtag.js), Microsoft Clarity, and/or matching GTM tags. Marketing processing is activated only when consent exists and matching GTM tags/services are active.
When Microsoft Clarity is active, we may collect behavioral metrics, heatmaps, and session replay to understand how the website is used and improve content, functionality, and user experience.
4. Purposes, legal basis, and retention
The table shows why we process personal data, the legal basis used, and the main retention approach.
| Purpose | Personal data | Legal basis | Retention |
|---|---|---|---|
| Show available services and comparisons | Address, postal code, in-product choices | Contract (GDPR Art. 6(1)(b)) | As needed for the service, plus up to 12 months for case history. |
| Handle enquiries and order flows | Name, email, phone, address, order details | Contract and legitimate interests (GDPR Art. 6(1)(b)/(f)) | Up to 12 months after case closure unless law requires longer. |
| Security, troubleshooting and abuse prevention | IP address, technical logs, user agent | Legitimate interests (GDPR Art. 6(1)(f)) | Normally up to 6 months. |
| Website analytics | Cookie IDs, usage data, behavioral metrics, technical device data | Consent (GDPR Art. 6(1)(a) and Swedish LEK Chapter 9 Section 28) | According to the cookie policy and each tool's standard settings. |
| Marketing and campaign measurement | Cookie IDs, ad interactions, technical data | Consent (GDPR Art. 6(1)(a) and Swedish LEK Chapter 9 Section 28) | According to the cookie policy and each tool's standard settings. |
| Legal obligations | Data required under applicable law | Legal obligation (GDPR Art. 6(1)(c)) | As required by law. |
5. Recipients of data
We may share data with providers you select, technical hosting/service vendors, analytics/marketing vendors such as Google and Microsoft (where consent applies), and other processors needed to operate the service.
We use data processing agreements where required and limit sharing to what is necessary.
More information about Microsoft's data processing is available in the Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement
6. Transfers outside the EU/EEA
Some vendors may process data outside the EU/EEA. In such cases, we use appropriate safeguards such as EU Standard Contractual Clauses (SCCs), with supplementary measures where needed.
7. Your rights
You have the right to access, rectify, erase, restrict, and object to certain processing, and to data portability where applicable. If processing is based on consent, you may withdraw consent at any time.
If you believe our processing violates data protection law, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
8. Security
We apply technical and organizational safeguards such as access controls, logging, and security procedures to protect personal data.
9. AI chat
If you use our chat feature, messages and technical metadata may be processed to provide responses and improve the feature. Please avoid entering sensitive personal data in chat.
10. Changes to this policy
We may update this policy. The latest version is always published at /integritetspolicy.