Elias Wick AB – Privacy Policy

Last updated: 1 February 2026

This Privacy Policy (the "Policy") explains how Elias Wick AB ("Elias Wick", "we", "us", or "our") collects, uses, and protects personal data in connection with our website and any online pages that link to this Policy (collectively, the "Site"). This Policy is designed to provide clear information about our data practices. It does not constitute legal advice and does not create any contractual rights beyond those required by applicable law.

1. Scope and third-party platforms

This Policy applies to the Site and to any interactions you have with us through the Site (for example, subscribing to our newsletter or contacting us). The Site may contain links that redirect you to third-party platforms (for example, Gumroad and Epic Games Fab) where purchases are completed. Those third parties act as independent controllers for the data they collect on their services and their privacy policies govern their processing. We do not receive or process your payment card details or other checkout information collected on those platforms.

2. Roles and definitions

• Controller: For processing described in this Policy, Elias Wick AB is the controller.
• Personal data: Any information relating to an identified or identifiable natural person.
• Processor / service provider: A third party that processes personal data on our instructions (for example, an email newsletter service provider).
• Third-party controller: A third party that collects and processes personal data under its own terms and privacy policy when we use its services (for example, Google via Google Tag Manager).

3. Categories of data we process

We aim to minimize data collection. We do not operate user accounts on the Site, and we do not collect payment information.

A. Information you provide to us

• Newsletter data: If you subscribe to our newsletter, we collect your email address. This is stored in our database and used only to send you newsletters and manage your subscription.
• Communications data: If you contact us (for example, by email), we process the information you include in your message along with your contact details so we can respond.

B. Information collected through analytics

We use Google Tag Manager (GTM) and Google Analytics 4 (GA4) to support Site performance, reliability, and ongoing improvements. In doing so, limited technical and usage information may be collected, including browser and device type, operating system, referring URLs, pages visited, and general (non-precise) location data. This information is used only in aggregated form and may be securely shared with Google, which processes this data in accordance with its own Privacy & Terms.

This data is collected and stored by us for up to 14 months and, where applicable, by Google in accordance with their own privacy policies and data retention schedules.

C. Data we do not collect

We do not intentionally collect special categories of personal data (such as health, biometric, or precise geolocation data). We also do not conduct automated decision-making that produces legal or similarly significant effects.

4. Sources of data

• Directly from you (newsletter sign-ups; emails or messages you send us).
• Automatically from your device when interacting with the Site through analytics, tags, and scripts deployed via GTM.
• From service providers that operate analytics or email services on our behalf.

5. Purposes of processing and legal bases

We process personal data for the following purposes:

• Newsletter delivery and management (consent): to send you newsletters and manage your preferences.
• Operating, securing, and improving the Site (legitimate interests): to operate the Site; measure usage; prevent abuse; and diagnose, troubleshoot, and maintain security and performance. Analytics data supporting these purposes is collected and stored by third-party providers (for example, Google).
• Communications (legitimate interests or consent, as applicable): to respond to inquiries and provide information you request.
• Compliance and protection (legal obligations and legitimate interests): to comply with applicable laws, enforce our rights, and protect users, the Site, and the public against fraud, abuse, or unlawful activity.

Where we rely on consent (for example, analytics, or newsletter), you may withdraw consent at any time; see Section 9. If we rely on legitimate interests, we balance those interests against your rights and expectations.

6. Disclosures of personal data

• Processor / service provider: We use third-party services, such as Google Tag Manager and Google Analytics. These providers process data under their own privacy policies and are responsible for applying appropriate technical and organizational measures to protect personal data, in accordance with applicable data protection laws.
• Analytics data: When Google Tag Manager loads tags from providers such as Google Analytics, those providers may collect and process data directly as independent controllers in accordance with their policies. We do not control their independent processing and recommend that you review Google's Privacy & Terms for more information.
• Third-party checkout platforms: If you choose to purchase a product through Gumroad, Fab, or similar platforms, those providers collect your data directly and act as independent controllers for such processing.
• Legal: We may disclose information when required by law or legal process.
• Protection: We may disclose information to protect our rights, safety, users, or the public.
• Business transfers: We may disclose or transfer personal data in connection with a reorganization, merger, sale of assets, or similar corporate transaction involving Elias Wick AB, subject to appropriate safeguards and applicable data protection laws.

We do not sell personal data and we do not share personal data for cross-context behavioral advertising.

7. Cookies and similar technologies

The Site uses cookies and similar technologies, such as local storage, to support core functionality, maintain security, and understand how the Site is used. You can control or delete cookies and similar technologies, including local storage, at any time through your browser settings.

For more information, see our Cookie Policy.

8. International transfers

Elias Wick AB is located in Sweden. Service providers and third-party analytics vendors may process data in countries outside your own. Where applicable, they implement appropriate transfer safeguards (for example, Standard Contractual Clauses) as described in their policies. We do not control where third-party providers store or process collected data.

9. Your rights and choices

Depending on your location, you may have rights to request access to, correction of, deletion of, restriction of, or portability of your personal data, and to object to certain processing. Where processing is based on your consent (for example, newsletter), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise rights regarding newsletter data, or to make other privacy requests, contact us per Section 14.

• Unsubscribe: You can opt out of the newsletter using the link in our emails.
• Cookies: You can manage cookies through your browser settings.

10. Data retention

• Newsletter data: Retained while you remain subscribed and for a reasonable period thereafter to maintain suppression lists and comply with applicable obligations, unless a longer or shorter period is required by law or necessary to establish, exercise, or defend legal claims.
• Analytics data: Collected and stored by third-party providers in accordance with their policies and retention schedules. We retain analytics data for up to 14 months.
• Communications data: Retained as necessary to respond to and document correspondence, resolve issues, and maintain records, subject to applicable retention requirements.

11. Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal data under our control. No method of transmission over the Internet or method of storage is completely secure; accordingly, we cannot guarantee absolute security. Data processed by third-party providers is protected in accordance with their practices and policies.

12. Children's data

The Site is not directed to children under 16 years of age. We do not knowingly collect, use, or disclose personal data from children under 16, or from children below the minimum age for lawful consent in their jurisdiction. If we become aware that we have collected personal data from such a child without valid parental consent, we will delete the data without undue delay.

13. Changes to this policy

We may update this Policy from time to time. The "Last updated" date at the top indicates when it was last revised. Your continued use of the Site after changes take effect signifies your acknowledgment of the updated Policy.

14. Contact information and controller details

• Controller: Elias Wick AB (Sweden)
• Email: contact@eliaswick.com

For faster processing of privacy requests, please include "Privacy Request" in your subject line and specify the nature of your request (for example, access, deletion, unsubscribe).

15. Third-party notices

• Gumroad and Fab process your purchase and related data as independent controllers in accordance with their policies. We do not receive your payment card details from these platforms.
• Google may act as independent controllers or joint controllers, depending on the specific service, configuration, and processing context. Where joint controllership applies, the allocation of responsibilities is determined by the relevant provider's terms and privacy documentation, and such providers process personal data in accordance with applicable data protection laws.