Privacy notice

Last updated:

About this notice

This notice explains how Wimly ("we", "us") handles personal data when you visit wimly.com — the Wimly marketing website.

It does not cover the Wimly Patient Intelligence platform, which processes health-related observations and has its own privacy architecture. A separate, more detailed privacy notice will be published before the platform launches.

Data controller: Wimly · Sweden · hello@wimly.com

What data we process and why

Analytics

We use Plausible Analytics to understand how visitors use this site. Plausible is privacy-by-design: it does not use cookies, does not fingerprint your browser, and does not track you across sites or sessions. The data it collects is aggregate — page views, referrer source, device type, and country (derived from your IP address, which is not stored). This data cannot identify you as an individual.

Plausible is hosted on servers in the European Union. No personal data is transferred outside the EU. Because Plausible processes no personal data, no GDPR legal basis is required for this processing.

Contact form enquiries

When you submit the contact form, your name, email address, and message are sent to hello@wimly.com. We use this information only to respond to your enquiry. We do not use it for marketing without your separate consent.

  • Legal basis: Article 6(1)(f) GDPR — legitimate interests (to handle your enquiry and respond to you)

  • Retention: Until your enquiry is resolved, plus up to 12 months

Pre-purchases

If you make a pre-purchase in the founding supporter campaign, we process your email address and purchase details (tier and amount). Payment is handled by a third-party payment service provider — we do not receive or store your payment card details.

  • Legal basis: Article 6(1)(b) GDPR — performance of a contract

  • Retention: For the duration of the pre-purchase relationship. Financial records are kept for 7 years as required under Swedish law.

Campaign updates

If you opt in to receive updates about the campaign, your email address is processed for that purpose.

  • Legal basis: Article 6(1)(a) GDPR — consent

  • Retention: Until you unsubscribe. You can unsubscribe at any time via any update email or by writing to hello@wimly.com.

Your rights

Under GDPR you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate or incomplete data

  • Erase your data where applicable

  • Restrict processing in certain circumstances

  • Object to processing based on legitimate interests

  • Portability — receive your data in a structured, machine-readable format

  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, write to hello@wimly.com. We will respond within 30 days.

Complaints

If you believe we have handled your data incorrectly, you have the right to lodge a complaint with the Swedish supervisory authority:

Integritetsskyddsmyndigheten (IMY)
imy.se

You may also contact the supervisory authority in your country of residence.