This policy takes effect from the 23rd May 2018


Introduction and overview

1. WPopt AB, 5591060420 is the responsible party for the processing of personal information obtained through the usage of services provided by and sold by WPopt AB. This policy describes how the information is used and your rights as a user.

WPopt AB understands the importance of your privacy and WPopt AB does everything that is technically feasible to safeguard your data. Access to your personal data is restricted to employees, and contractors who need access to the data in order to maintain the services provided by WPopt AB, and to be able to support you as a user. Anyone with access to your data is bound by strict confidentiality obligations. Your data is handled in accordance with Swedish law. WPopt AB recommends you read this policy thoroughly before submitting your personal data and creating your account.

1.1 By accepting this policy (via the checking of the box during the account signup process) you hereby acknowledge and accept that the following personal information will be gathered and stored:

  • Name
  • Address
  • Phone number (optional)
  • Company name (where relevant)
  • Email address
  • Credit card number or PayPal email address*
  • IP Address
  • VAT number (where relevant)
  • ISP name
  • Browser user-agent

* Note that if you choose to register a credit card, the number is not stored or accessible by WPopt AB. For more details see point 2 below

WPopt AB transmits address, IP address, and email address data to MaxMind, Inc at the time of account creation for the purposes of fraud detection and fraud analysis.

1.2 In addition to the above usage, your data will be used in the following ways

  • Your address details in order to calculate required tax/VAT
  • Your credit card number or PayPal email address in order to initiate the transaction process with the third-party payment service (see point 2 below)
  • Your IP address for the purpose of customer identification, support and troubleshooting, and fraud prevention
  • Your email address to send you updates regarding your account, communications regarding service changes, account and service-related announcements
  • Your company name in association with your VAT number (where relevant) to calculate relevant tax/VAT
  • Your ISP name for the purposes of fraud prevention
  • Your browser user-agent for the purposes of support and troubleshooting

1.3 WPopt AB will never request or require any sensitive information including, but not limited to personal ID number, social security number, religious preferences, and as such WPopt AB asks that you do not enter any such information in any free text entry fields on the site.

1.4 By agreeing to this policy (via the checking of the "I agree to the privacy policy" box during the account sign-up) you acknowledge and agree that your provided personal information will be processed:

  • In accordance with this policy
  • In accordance with any relevant laws in effect, such as accounting/book-keeping laws

1.5 WPopt AB does not currently participate in the EU/US Privacy Shield program, however WPopt AB may transfer personal information to third-party service providers that are certified to receive such information under the Privacy Shield program.

WPopt AB will never transfer your data outside of the EEA or outside of Privacy Shield certified third-party providers, or outside any country which has been granted adequacy status (as granted by the European Commission on the basis of article 45 of Regulation (EU) 2016/679) except in cases outlined in point 1.6 below.

1.6 WPopt AB does not rent, sell, or share personal information about you with other people or non-affiliated companies except to provide products or services you´ve requested, when we have your permission, or under the following circumstances:

  • We provide the information to trusted partners who work on behalf of or with WPopt AB under strict confidentiality agreements.
  • We respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims.
  • In the event WPopt AB is merged with or acquired by another company. In such a case, WPopt AB will notify you before information about you is transferred and you will be required to submit consent for the new privacy policy.

Payment data

2. Payments are processed via either PayPal or via Stripe Inc. Credit card information is not stored or accessible by WPopt AB - only the last 4 digits and expiry date of the registered card are visible which is used for identification and support purposes. All payments are therefore processed via PCI-DSS-Level 1 certfied partners and therefore fulfil card issuer and bank security requirements


Data retention

3. Your personal data is retained during the time you are an active customer, as well as after you cease being an active customer. The following personal data is retained for 7 years in accordance with Swedish accounting law:

  • Name
  • Company name (where relevant)
  • VAT number (where relevant)
  • Address
  • Email address

Your personal data can be used and retained for a longer period of time when such information is the subject of a legal request or investigation or other case which has the potential of causing damage to WPopt AB or you as a user.


Your Rights

3.1 You have the right to a digital copy listing the information we currently hold on you, as well as knowing where this information has come from, as well as knowing to which recipients your data has been sent to. You have the right to such an extract at no cost, without having to specify any reason, two times per year.

You have the right to request that we correct, update, or remove your personal details at any time. Such requests will be assessed on a case by case basis. Certain requests may be denied if it would mean WPopt AB will not meet the legal requirements set forth in other laws, such as accounting/book-keeping laws.

To exercise your rights, or to contact WPopt AB with any questions or complaints you can find the contact details in point 3.2 below. In the event that you do not receive a reply, or in the event that you are unable to reach an agreement with WPopt AB relating to your request, or are dissatisfied with how it has been handled you have the right to contact and complain to the relevant authorities. You can find the relevant authority for your request and its contact details here:

http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm

3.2 To exercise your rights as outlaid above please contact WPopt AB at the following address:

charles@wpopt.com