Privacy policy – how we handle personal data.

1. Who is responsible?

WiseStellar (a Sweden-based web agency) is the controller for the personal data we process in connection with our website, contact forms, waitlists, estimators and customer relationships.

If you need our full legal details (company name, organisation number, address), please see the Swedish privacy policy or ask us directly.

2. What data we collect and why

We only collect the data we reasonably need to communicate with you and deliver our services. Typical examples:

• • Contact and waitlist forms: name, email, company, phone (optional) and your message.
• • Estimator and referrals: email and high-level project information, so we can follow up and improve our services.
• • Technical logs: IP address and basic browser/usage data for security, troubleshooting and to protect our systems from abuse.

We do not collect sensitive personal data via our standard forms and we do not sell your data to third parties.

3. Legal basis (GDPR)

Under the GDPR, we mainly process personal data on the basis of:

• • Legitimate interest – for example when you contact us and we need to handle your message, follow up on an estimate or protect our systems from abuse.
• • Agreement – when we enter into or prepare a customer agreement, we need to process contact details and related information.
• • Consent – where applicable (for example certain cookies or newsletter signups), we rely on your consent, which you can withdraw at any time.

4. How long we keep data

We keep personal data for as long as it is reasonably needed for the purpose it was collected:

• • Contact messages and estimates are typically stored while a conversation is active and for a reasonable period afterwards, for reference and follow-up.
• • Customer-related data is stored for as long as needed to manage the customer relationship and fulfil legal obligations (for example accounting rules).
• • Technical logs are usually kept for shorter periods unless needed for security investigations.

5. Sharing and processors

We sometimes use trusted service providers (data processors) to host our systems, send emails, provide analytics or similar functions. When we do, they are only allowed to process your data on our behalf and according to our instructions.

We do not sell personal data to third parties. We only share data when necessary for our services, when required by law or when you explicitly ask us to.

6. Your rights

Under the GDPR, you have several rights, including:

• • Right to access (get a copy of your data).
• • Right to correction (if something is wrong or incomplete).
• • Right to erasure (in certain situations, for example if the data is no longer needed).
• • Right to object to certain processing and to withdraw consent where processing is based on consent.

To exercise your rights, contact us and clearly state who you are and what your request concerns. For security reasons, we may need to verify your identity.

7. Cookies and analytics

We aim to keep tracking reasonable and respectful. When we use cookies or similar technologies for analytics, we focus on aggregate usage rather than individual profiling. Details about which tools we use and how long data is stored are described in more detail in the Swedish privacy and cookie information.

8. Contact regarding privacy

If you have any questions about this policy, how we handle personal data or if you want to exercise your rights, you are welcome to contact us.

You can also read the full Swedish privacy policy here:

Swedish privacy policy