Terms of Service

Weya AB, registration number 559475-4961 ("Weya," "we," "us," or "our"), is committed to protecting your privacy and ensuring the security of your personal data in compliance with applicable regulations, including the European Union's General Data Protection Regulation (GDPR) and relevant U.S. state laws such as the California Consumer Privacy Act (CCPA).

This privacy policy explains how we collect, use, and protect the personal data you provide when signing up for our waitlist ahead of Weya’s launch in April 2025.

What Data Do We Collect?

When you sign up for our waitlist, we may collect and process the following data:

  • Name
  • Email address
  • Any other information you voluntarily provide during registration

Our collection of this data is based on your consent under Article 6(1)(a) GDPR and relevant provisions of CCPA and other applicable laws.

How Do We Use Your Data?

We collect and process your personal data to:

  • Confirm your place on the waitlist and inform you about the launch
  • Send updates, offers, and relevant information about Weya
  • Analyze and improve our communication and services
  • Comply with any legal obligations
  • We commit to using your data only for the purposes stated above and will never use it for unrelated purposes without obtaining your consent first.

Legal Basis Under GDPR

Weya processes your personal data based on:

  • Consent (Article 6(1)(a) GDPR): By signing up for the waitlist, you grant us permission to process your data for communication regarding the launch.
  • Legitimate interest (Article 6(1)(f) GDPR): We may analyze anonymized data to improve our service.

How Do We Protect Your Data?

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or misuse.

  • Data Security: We use encryption and secure storage solutions.
  • Access Control: Only authorized personnel have access to your data.
  • Third-Party Providers: We ensure our service providers comply with GDPR and CCPA through data processing agreements.

Transfer of Data Outside the EU

If we transfer your personal data outside the EU/EEA, for example, to the United States, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Binding Corporate Rules (BCRs), where applicable
  • Certification under the EU-U.S. Data Privacy Framework

These measures ensure that your data remains protected at the same level as within the EU.

Your Rights Under GDPR and CCPA

You have the following rights regarding your personal data:

Under GDPR (EU/EEA):

  • Right to access (Article 15 GDPR): You can request a copy of the data we hold about you.
  • Right to rectification (Article 16 GDPR): You can request corrections to inaccurate data.
  • Right to erasure (Article 17 GDPR): You can request that we delete your data.
  • Right to object (Article 21 GDPR): You can object to our processing of your data.

Under CCPA (for residents of California, USA):

  • Right to know what data we collect about you.
  • Right to request deletion of your personal data.
  • Right to opt out of the sale of your data. (Weya does not sell personal data.)

How Long Do We Store Your Data?

We store your data only as long as necessary to fulfill the purpose of collection or as required by law.

  • If you unsubscribe from the waitlist, we will delete your data within 30 days.
  • If you request deletion under GDPR or CCPA, your data will be erased within the legally required timeframe.

Third Parties and Data Sharing

We never share your data with third parties without your explicit consent, except:

  • When required by law (e.g., for law enforcement investigations).
  • When necessary to provide our service (e.g., email service providers).
  • Our third-party service providers comply with GDPR and CCPA through binding data processing agreements.

Changes to the Privacy Policy

We may update this policy as needed. The latest version will always be available on our website. We will notify you of significant changes that affect how we process your personal data.

Contact

If you have any questions about this privacy policy or wish to exercise your rights.

Please contact us at customerservice@weyabeauty.com.

Legal name: Weya AB
Registration number: 559475-4961
Registered postal address: Box 24208, 104 51 Stockholm, Sweden
Phone number: +46853523269

If you reside in the EU and have concerns about our handling of your data, you may also contact the Swedish Authority for Privacy Protection (IMY) or the relevant supervisory authority in your country.

For California residents in the USA, complaints can be filed with the California Attorney General’s Office.