Privacy Policy

Updated: 27/10/2024

1. Introduction

WhyWay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our sustainability strategy platform.

2. Information We Collect

We collect information that you provide directly to us, including:

Personal information (such as name, email address, company name)
Company information related to sustainability strategies
User-generated content within the platform

2.1 Analytics and Tracking

We use Google Analytics and Google Tag Manager to collect and analyze information about how visitors use our website. These tools may collect information such as:

Pages you visit and time spent on each page
Device information (browser type, operating system)
Geographic location (country and city level only)
Referral source (how you found our website)
Basic usage patterns and interactions

This data is collected in an anonymized form and is used to improve our website and services. You can control your cookie preferences through our Cookie Settings, which are accessible at any time through the footer of our website.

Google Analytics and Tag Manager data is processed in accordance with Google's Data Processing Terms. You can learn more about how Google uses this information by visiting How Google uses data when you use our partners' sites or apps.

2.2 Your Choices Regarding Analytics

You have several options to control or opt out of analytics tracking:

Use our Cookie Settings to disable analytics cookies (accessible through the footer)
Install the Google Analytics Opt-out Browser Add-on
Use your browser's built-in privacy or incognito mode

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Service
Communicate with you about our Service
Monitor and analyze trends, usage, and activities in connection with our Service
Personalize and improve the Service and provide content or features that match user profiles or interests

4. Sharing of Information

WhyWay is committed to protecting your privacy and maintaining the confidentiality of your information. We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

4.1. Service Providers

We may share your information with carefully selected third-party service providers who perform services on our behalf, such as hosting, data analysis, and customer service. These providers are contractually obligated to protect your information and may only use it for the specific services they provide to us.

4.2. Legal Compliance

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). We will only disclose the specific information required by the relevant legal process.

4.3. Protection of Rights

We may share information to protect the rights, property, or safety of WhyWay, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. Such sharing will be done only to the extent reasonably necessary to protect our interests.

4.4. Business Transfers

If WhyWay is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

4.5. With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

In all cases, we will ensure that your information is protected by appropriate safeguards and is only used in accordance with this Privacy Policy and applicable data protection laws.

5. Data Security

5.1. Security Measures

We implement a variety of security measures to maintain the safety of your personal information, including:

SSL/HTTPS encryption for all data in transit
AES-256 encryption for all data at rest
Web Application Firewall (WAF) to protect against common web vulnerabilities
Regular security scans and maintenance checks for malicious code and vulnerabilities
Comprehensive logging practices for system monitoring and security incident detection

5.2. Authentication

We use secure authentication methods, including strong password requirements for all users and mandatory two-factor authentication (2FA) for administrators.

5.3. Data Centers

Our back-end services are hosted in secure data centers located in Stockholm, Sweden. This ensures compliance with European data protection regulations, including GDPR, and provides an additional layer of data sovereignty for our users.

5.4. Backups

We perform daily backups of all data to ensure recoverability in case of any incidents.

6. Data Retention and Deletion

6.1. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected or to comply with legal requirements.

6.2. Data Deletion

You have the right to request deletion of your personal data at any time. We will comply with these requests within one week, provided there are no legal reasons to retain the data.

6.3. Inactive Account Handling

If your account remains inactive for more than 12 months, we will contact you to confirm whether you wish us to continue storing your data.

6.4. Account Termination

Upon termination of your account, you have the right to request a copy of all your personal data in a structured, commonly used, and machine-readable format.

7. Security Incident Reporting

We maintain clear communication channels and reporting protocols to ensure that all security incidents are documented, investigated, and appropriately resolved in accordance with our established incident response procedures.

8. Your Choices

You may update, correct, or delete your account information at any time by logging into your online account or by contacting us.

9. Changes to this Privacy Policy

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the "Last Updated" date at the top of this policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@whyway.co