Privacy Policy
Last updated: December 01, 2025
This Privacy Policy describes how WicSpot (“we”, “us”, “our”, or “the Site”) collects, uses, and shares your personal information when you visit or make a purchase from wicspot.com.
We are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union and relevant privacy and consumer protection laws in other jurisdictions, including the United States (such as CCPA/CPRA for California residents).
1. Information We Collect
1.1 Information Collected Automatically (Website Visitors)
When you visit our Site, we automatically collect certain information about your device and how you interact with the Site, including:
- IP address (which may be truncated or anonymised)
- Browser type and version
- Device type and operating system
- Pages viewed, clicks, time spent, navigation paths
- Referring website or campaign
- Cookie preferences and identifiers
Purpose: to ensure the security and proper functioning of the Site, to analyse performance and usage, and to improve our services.
1.2 Purchase & Order Information
When you purchase a digital product (such as ICS calendar files, routines, programs, PDFs) from us, we may collect:
- Full name
- Email address
- Billing address (if required by payment provider or law)
- Order details and purchase history
- Payment-related information (processed by our payment processors – we do not see full credit card numbers)
- Any other information you choose to provide during checkout
Purpose: to process your order, deliver digital products, provide invoices/receipts, comply with accounting and legal requirements, and provide customer support.
1.3 ICS Calendar Files & Digital Programs
Our ICS files and digital programs typically contain:
- Event titles and descriptions (e.g., “Hydration reminder”)
- Dates, times, and recurrence rules
These files do not normally contain personal data about you, unless you later add your own notes or personal information inside your calendar app. We do not have access to your personal calendar or your device.
1.4 Newsletter & Marketing Communications
If you choose to subscribe to our newsletter or marketing emails, we may collect:
- Email address
- Name (if you provide it)
- Information on whether you open our emails or click on links (depending on the email platform used)
Purpose: to send you updates, tips, new product announcements, and special offers related to our services. You can unsubscribe at any time by clicking the “unsubscribe” link in any email or by contacting us.
1.5 Customer Support & Communication
When you contact us via email, contact form, or other channels, we may process:
- Your name (if provided)
- Your email address
- The content of your message and our responses
Purpose: to respond to your questions, solve technical issues, handle complaints, and improve our services.
2. Legal Bases for Processing (GDPR)
Where GDPR applies (for users in the European Economic Area and similar jurisdictions), we process your personal data on the following legal bases:
- Contract: to perform our contract with you (e.g., fulfilling orders, delivering digital products).
- Consent: for certain marketing activities, newsletters, and non-essential cookies.
- Legal obligation: to comply with tax, accounting, and other legal requirements.
- Legitimate interests: to maintain the security of the Site, prevent fraud, analyse and improve our services and user experience (provided these interests are not overridden by your rights and freedoms).
3. Cookies & Analytics
We use cookies and similar technologies to operate, secure, and improve our Site. These may include:
- Essential cookies: required for the Site and checkout to function.
- Functional cookies: to remember preferences (such as language or cookie choices).
- Analytics cookies: to understand how visitors use our Site (e.g., Google Analytics or similar tools).
- Marketing cookies: only if used and only with your consent, for advertising and remarketing.
You can control cookies through your browser settings. Disabling some cookies may affect the functionality or performance of the Site.
4. How We Use Your Personal Data
We use your personal data for the following purposes:
- To operate and maintain the Site.
- To process orders and deliver digital content.
- To create and manage your customer record.
- To provide customer support and respond to enquiries.
- To send transactional emails (order confirmations, technical notices).
- To send marketing communications (where you have consented).
- To prevent fraud and abuse.
- To comply with legal and regulatory obligations.
5. Sharing Your Personal Data
We do not sell your personal information. We may share your data with trusted service providers that help us operate our business, such as:
- Website hosting and server providers.
- Payment processors (e.g., Stripe, PayPal).
- E-commerce and checkout platforms (e.g., WooCommerce, WordPress plugins).
- Email and newsletter platforms (e.g., Mailchimp or similar).
- Analytics and performance services (e.g., Google Analytics).
- Cloud storage providers (for digital file hosting).
These providers only process personal data on our behalf according to our instructions and in compliance with applicable data protection laws.
We may also share personal information where required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.
6. International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal mechanisms, in accordance with GDPR requirements.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy or as required by law. For example:
- Order and billing information is kept in line with accounting and tax law.
- Newsletter data is kept until you unsubscribe.
- Support communications are kept until issues are resolved and for a reasonable period afterward.
- Server logs and technical data are kept for a limited period for security and troubleshooting.
8. Your Rights (GDPR and Similar Laws)
If you are located in the European Union, EEA, or other jurisdictions with similar data protection laws, you have the following rights (subject to certain conditions):
- Right of access – to obtain a copy of your personal data.
- Right to rectification – to correct inaccurate or incomplete data.
- Right to erasure – to request deletion of your data in certain situations (“right to be forgotten”).
- Right to restriction of processing – to request limited use of your data.
- Right to data portability – to receive your data in a structured, commonly used, machine-readable format.
- Right to object – to object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at help@wicspot.com.
You also have the right to lodge a complaint with your local data protection authority. In the EU, this may be your national supervisory authority; in Estonia, this is the Estonian Data Protection Inspectorate.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to:
- Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Request deletion of your personal information, subject to certain exceptions.
- Request correction of inaccurate personal information.
- Request information about how we “share” or “sell” personal information (we do not sell your personal information).
- Not be discriminated against for exercising your privacy rights.
To exercise these rights, please contact us at help@wicspot.com.
Sale of personal information: We do not sell personal information as defined by CCPA/CPRA.
10. Children’s Privacy (COPPA and Other Laws)
Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete such information.
If you believe that a child under 13 has provided us with personal information, please contact us at help@wicspot.com.
11. Digital Products and Right of Withdrawal (EU)
Our products are purely digital (e.g., ICS files, routines, programs, PDFs). Under EU consumer law, your statutory right of withdrawal may not apply once the digital content has been delivered, if:
- You have given your explicit consent to immediate delivery of the digital content; and
- You have acknowledged that you lose your right of withdrawal once the digital content has been delivered.
We will ask you to confirm this consent during checkout for EU/EEA customers.
12. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorized access, loss, misuse, or alteration, including:
- Secure hosting and SSL/TLS encryption.
- Access controls and limited access to personal data.
- Regular software updates and security monitoring.
However, no internet-based service can be guaranteed to be 100% secure. We work continuously to minimise risks.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. The updated version will be indicated by a revised “Last updated” date at the top of this page.
14. Data Controller Details
The data controller responsible for your personal information is:
Legal Business Name: Wicmath OÜ
Brand Name: WicSpot
Business Address / Register Info: Reg. nr. 12189863, Madara tn 33
Contact Email: help@wicspot.com
