Last updated 8 September 2026
www Holding AB, org. no. 559515-3668, Anundsgatan 22, 753 34 Uppsala, Sweden ("we"), is the data controller for the personal data described here. Contact: [email protected].
This policy covers this website, our contact with clients and partners, and payments made to us. Each product we publish has its own privacy policy that describes exactly what that product stores; where a product policy is more specific, it applies.
The site is static and sets no cookies. It uses no analytics or advertising scripts. It is served by Cloudflare, which processes your IP address to deliver the pages and to block abuse, and it loads fonts from Google Fonts, which sees your IP address when the font files are requested. Neither is stored by us. Legal basis: our legitimate interest in running a website.
If you write to us, we keep your name, email address, company and what you wrote, for as long as we are in contact and afterwards as long as needed to answer or to document what was agreed. For clients and suppliers we also keep the details needed for contracts and invoices (company, org. number, address, contact person, bank details). Invoices and related records are kept for seven years, as Swedish accounting law requires. Legal basis: performance of a contract, and our legitimate interest in handling business contacts.
Subscriptions and purchases in our products are handled by Stripe, which acts as the merchant of record: Stripe takes your card details, charges you, issues the receipt, handles VAT and sends the emails about your subscription (trial ending, upcoming renewal, a card that expired or a payment that failed). We never see or store card numbers. We store the email address you gave at checkout, your subscription status and plan, currency and amount, and Stripe's identifiers for the customer and subscription, so that we can unlock the product on your account and handle refunds and cancellations. Legal basis: performance of our contract with you.
Business invoices are paid by bank transfer; we see the payer's name and account as the bank reports it.
Where a processor handles data outside the EU, the transfer rests on the EU standard contractual clauses in that processor's data processing terms. We do not sell data and do not share it with anyone else.
Under the EU General Data Protection Regulation you can access, correct, export and delete your data, object to processing based on legitimate interest, and withdraw consent. Email [email protected] and we answer within a month. You can also complain to the Swedish Authority for Privacy Protection (IMY, imy.se).
This website and our business services are not directed at children. The age rules for each product are in that product's policy.
When this policy changes, the new version is published here with a new date.