Privacy policy
Privacy policy
Last updated: 26 September 2026
This privacy policy describes how Wubs Agency AB, which operates Mysteriejakten.se, collects, uses, shares and protects your personal data when you visit the website, make a purchase or contact us.
1. Data controller
Wubs Agency AB is the controller responsible for processing your personal data.
Wubs Agency AB
Company registration number: 559428-5628
Bondegatan 9
702 25 Örebro, Sweden
Email: hej@mysteriejakten.se
2. Personal data we process
Depending on how you use our website, we may process:
• your name, email address, phone number, and billing and delivery addresses;
• order details, purchase history, returns and customer service enquiries;
• payment status, your chosen payment method and transaction references; full card details are handled by the payment provider;
• information you provide when contacting us or creating a customer account;
• technical information, such as your IP address, device and browser information, and cookie identifiers.
3. Why we process your data
We process personal data to:
• handle purchases, payments, delivery, returns and complaints — processing is necessary to perform our contract with you;
• provide customer service and answer questions — on the basis of our contract or our legitimate interest in helping our customers;
• meet accounting and other legal obligations — on the basis of a legal obligation;
• prevent fraud and protect the website — on the basis of our legitimate interest in operating a secure business;
• improve the website and analyse how it is used — on the basis of consent where required;
• send marketing — on the basis of consent or legitimate interest where permitted by law. You can unsubscribe at any time.
4. Who we share your data with
We do not sell your personal data. We may share necessary information with suppliers that help us operate the store and fulfil your purchase, including:
• Shopify, which provides our e-commerce platform and technical operations;
• the payment providers shown at checkout;
• PostNord and other delivery partners;
• IT, customer service, analytics and marketing providers, depending on the services and cookie choices used;
• public authorities or other recipients where required by law or where necessary to protect our rights.
Suppliers may only process data for the agreed purposes and with appropriate safeguards.
5. Transfers outside the EU/EEA
Some of our suppliers may process personal data outside the EU/EEA. Where this happens, we or the relevant supplier use a lawful transfer mechanism, such as the European Commission’s standard contractual clauses or an adequacy decision.
6. How long we retain your data
We retain personal data only for as long as it is needed for the purpose for which it was collected. Order and accounting records are retained for as long as required by accounting legislation, normally seven years. Customer service enquiries and account details are retained for as long as necessary to handle the enquiry, the relationship or any legal claims. Data processed on the basis of consent is deleted or anonymised when consent is withdrawn, unless we have another lawful basis for continuing to process it.
7. Cookies
We use necessary cookies to make the website and checkout work. Analytics and marketing cookies are used only in accordance with the choices you make in our cookie management tool. You can change your choices through the website’s cookie settings. Information about individual cookies is provided in the cookie management tool.
8. Your rights
Depending on the circumstances, you have the right to:
• receive information about and access your personal data;
• request correction of inaccurate information;
• request erasure or restriction of processing;
• object to processing based on legitimate interests and to direct marketing;
• receive certain data in a structured format and transfer it to another provider;
• withdraw consent where processing is based on consent.
Contact us at hej@mysteriejakten.se to exercise any of your rights. We may need to verify your identity before handling your request.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
9. Security
We use appropriate technical and organisational safeguards to protect personal data against unauthorised access, loss, alteration and disclosure.
10. Changes to this policy
We may update this policy when our practices or legal requirements change. The latest version is always published on the website, and the date above shows when the policy was last updated.