The fine print, in plain words
Your privacy, explained
What we collect, why we need it, who helps us, and how you stay in control. Written for people, not lawyers, and still complete.
Updated · Way Up North AB
At a glance
Your controls
Most of what this page promises, you can do yourself in settings.
01
Who we are
In shortWay Up North AB, a small Swedish company, runs WUN and is responsible for your data. Questions go to one inbox, read by real people.
Way Up North started in Sweden in 2015 as a gathering for wedding photographers. Today it is a conference that travels across Europe twice a year, plus a community on the web and in our app. This page covers all of it: wayupnorth.co, the community, the app, tickets, Membership and the Awards.
- Company
- Way Up North AB
- Organisation number
- 559375-4665
- VAT number
- SE559375466501
- Address
- Vikingavägen 74, 803 44 Gävle, Sweden
- Contact
- [email protected]
Under the EU General Data Protection Regulation (GDPR) and UK data protection law we are the controller of your personal data. In everyday words: we decide what is collected and why, so we answer for it. We are small enough that we do not need a Data Protection Officer, so privacy questions come straight to the team.
02
What we collect
In shortYour account, what you choose to share, your purchases, and the technical basics every website needs. Nothing hidden.
We only collect what the Service needs to work for you. Here is everything, grouped the way you would think about it:
- Account
- Your email address, the way you sign in (an email code, a password we store only as a secure hash, or Google, Apple or GitHub), your handle and display name.
- Profile
- Whatever you choose to add: photo, bio, city and country, specialties, website, social links, and your visibility choices.
- What you share
- Posts, comments, photos, videos, Stories, portfolio collections, reactions and the hashtags and people you mention.
- Connections
- Friends, follows, the Spaces you join, and the people you save, mute, block or restrict.
- Messages
- Your conversations with other members, including attachments and earlier versions of edited messages.
- Events and purchases
- Tickets, Membership, Awards entries, orders and receipts, and the billing name, address and tax ID you give at checkout. Card details go to Stripe; we never see your full card number.
- Device and technical
- IP address, browser and device type, session details and technical logs, including error reports when something breaks.
- Notifications
- Push tokens for your devices and your notification and email preferences.
- Safety
- Reports you send, reports about you, moderation decisions and appeals, and what you write to our support inbox.
- Feed signals
- Light signals such as what you have already seen, so your feed shows new things instead of repeating itself.
We never ask for sensitive data such as health, religion or political views. Please don't put it in your profile or posts unless you really want it there.
03
Why we use it
In shortTo run WUN for you, to keep it safe, and to keep the books. Marketing and featuring your work only happen if you say yes.
The law asks us to name a reason, called a legal basis, for every use of your data. These are ours:
Run your account and the community: feeds, profiles, Spaces, messages, the app
- Why we're allowed to
- It's our contract with you (GDPR Art. 6(1)(b))
Sell and deliver tickets, Membership and Awards entries
- Why we're allowed to
- Contract (Art. 6(1)(b))
Send receipts, sign-in codes, event logistics and moderation notices
- Why we're allowed to
- Contract (Art. 6(1)(b))
Keep accounting records for seven years
- Why we're allowed to
- Legal obligation under the Swedish Bookkeeping Act (Art. 6(1)(c))
Order your feed and suggest Spaces and people
- Why we're allowed to
- Legitimate interest in a useful community (Art. 6(1)(f))
Stop spam, fraud and abuse, and keep the Service secure
- Why we're allowed to
- Legitimate interest in a safe community (Art. 6(1)(f))
Review reports and enforce the house rules
- Why we're allowed to
- Legitimate interest in moderation (Art. 6(1)(f))
Understand which features work and fix errors
- Why we're allowed to
- Legitimate interest in improving WUN (Art. 6(1)(f))
Send newsletters and event announcements
- Why we're allowed to
- Only with your consent (Art. 6(1)(a))
Feature your work in our own promotion
- Why we're allowed to
- Only with your consent, asked each time (Art. 6(1)(a))
Answer valid legal requests
- Why we're allowed to
- Legal obligation (Art. 6(1)(c))
Where we rely on legitimate interest, we have weighed it against your rights. You can object at any time, see your rights.
04
Who sees what
In shortMostly you decide. Visibility settings cover your profile, posts, attendance, friends list and online status.
- Your profile
- Community discovery can be Public, Signed-in members or Hidden from discovery. You choose in settings.
- Your posts
- Each post goes to the audience you pick, and you can set a default. Posts in a Space are seen by the people who can see that Space.
- Your Directory listing
- Only exists if you create one. It is free, it needs your explicit consent, and for now the Directory is visible to signed-in members only.
- Events you attend
- Friends can see that you are going unless you turn this off, for all events or for one.
- Friends and status
- You decide who can send you friend requests, who sees your friends list and whether others see when you're online.
- Messages
- Only the people in the conversation.
- Private lists
- Saves, mutes, blocks and your restricted list are visible to you alone.
A small number of WUN staff can access account data when they need to: to help you, to process a purchase or to review a report. Their access is logged. Beyond that, data only leaves WUN through the providers listed below, or when the law requires it. If WUN is ever sold or merged, we will tell you before your data falls under a different policy.
05
Your photos, and the people in them
In shortLocation and camera data are stripped from the photos people see, originals stay private, and anyone pictured can ask us to act.
Photos are the heart of WUN, and wedding photos are full of other people. We handle them with that in mind:
When you post photos of couples, guests or anyone else, you are responsible for having their permission, as our Terms explain. If you appear in something on WUN and didn't agree to it, write to [email protected] with the subject "Someone else's photo of me" and a link to the content. We will look into it and may remove it, limit who sees it or contact the member who posted it.
06
Events and tickets
In shortWe keep what we need to get you through the door, and we film and photograph our events.
07
Who helps us run WUN
In shortA short list of services helps us run WUN, from payments to email to maps. Each one gets only what its job needs.
No company runs everything itself. These are the services that help us, and what each one gets. Every provider handles data under a data processing agreement or its own terms as an independent controller, and only for the job described.
Cloudflare
- What they do
- Network and security, file storage (R2) and video streaming (Stream)
- What they receive
- Your IP address and request details, the files and videos you upload
Stripe
- What they do
- Checkout, payments, tax calculation and the billing portal
- What they receive
- Your name, email, billing address, tax ID and payment details
Resend
- What they do
- Sending our emails
- What they receive
- Your email address and the content of the email
Expo, Apple and Google
- What they do
- Delivering push notifications to the app
- What they receive
- Your device's push token and the notification text
Your browser's push service
- What they do
- Delivering web push notifications, if you turn them on
- What they receive
- An anonymous push address and the notification text
Google, Apple and GitHub
- What they do
- Signing you in, only if you choose that option
- What they receive
- That you're signing in to WUN; they send us your name and email
KLIPY
- What they do
- GIF search, when you open the GIF picker
- What they receive
- Your search words and IP address
CARTO
- What they do
- Map tiles, when you view a map
- What they receive
- Your IP address and the map area you view
YouTube, Vimeo, TikTok, Spotify and SoundCloud
- What they do
- Playing videos and music that members link to
- What they receive
- Your IP address, and whatever their own cookies collect when the player loads
OpenPanel
- What they do
- Product analytics on our website and in the app
- What they receive
- Pages and app screens you visit, your device platform and, when you're signed in, your member ID, name and email
Our main database, cache, job queue and error reporting are run by us rather than handed to a data service. Fonts are served from our own site, so loading a page does not contact Google. When you share a link, our server fetches the page once to build the preview and stores its image with us.
08
Data outside Europe
In shortSome providers work from the US. Approved EU safeguards travel with your data.
Some providers above are based in the United States or process data there. When personal data leaves the European Economic Area, it is protected by the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) and, where the provider is certified, the EU–US Data Privacy Framework. Ask us and we'll tell you which safeguard applies to which provider.
09
How long we keep things
In shortAs long as your account is open, and shorter wherever we can. Only accounting records must stay longer, by law.
Your account and profile
- How long
- While your account is open. When you delete it, you get 30 days to change your mind; after that it is erased, and anything that has to stay readable in a thread shows as "Deleted member".
Posts and comments
- How long
- Until you delete them. They then leave our live systems within 24 hours.
Messages
- How long
- Until they're deleted. A deleted message disappears for everyone in the conversation. Earlier versions of edited messages are kept with the message for moderation.
Backups
- How long
- 30 days after the data left our live systems, then overwritten.
Orders, receipts and tax records
- How long
- Seven years after the end of the year of purchase, as the Swedish Bookkeeping Act (1999:1078) requires.
Moderation records
- How long
- Up to 12 months after an account closes, so repeat abuse can be stopped.
Feed signals
- How long
- Up to 90 days in detail, then aggregated so they no longer point to you.
Technical and security logs
- How long
- 12 months.
Support conversations
- How long
- 24 months after the question is resolved.
Data export downloads
- How long
- The link works for 15 minutes, in the session that asked for it.
10
Keeping it safe
In shortEncryption, limited and logged staff access, and a plan for when things go wrong, including telling you.
No system is perfectly secure. If a breach puts your data at risk, we report it to the Swedish Authority for Privacy Protection (IMY) within 72 hours where the law requires it, and we tell you without undue delay when the risk to you is high.
11
Your rights
In shortSee, correct, download or delete your data, and object to how we use it. Most of it takes a few clicks.
You can use any of these rights by writing to [email protected]. Several you can use yourself, right now, in settings.
- See your data
- Download a portable archive of your account, content and files from Privacy settings, or ask us for anything it doesn't cover.
- Correct it
- Edit your profile and settings any time. For anything else, ask us.
- Delete it
- Delete your account from Privacy settings. You have 30 days to change your mind. A few records stay longer, as listed under How long we keep things.
- Take it with you
- Your export is machine-readable, so you can move it elsewhere.
- Pause or object
- Ask us to pause use of your data while a question is sorted out, or object to anything we do on the basis of legitimate interest.
- Change your mind
- Withdraw any consent, such as newsletters, at any time. It doesn't undo what was done before.
- A human decides
- We never make decisions with legal or similarly serious effects about you by automated means alone.
We answer within 30 days. If a request is complex we may need up to two more months, and we'll tell you why. Asking is free.
12
Emails and notifications
In shortAccount and order emails always arrive. Everything else is your choice, and one click turns it off.
Some emails are part of using WUN: sign-in codes, receipts, ticket and event details, security alerts and moderation notices. We send those whatever your marketing choices.
Activity emails, such as digests of what happened in your community, can be turned off in Notification settings or with the unsubscribe link at the bottom of each one. Newsletters and event announcements only reach you if you have opted in, and every one has an unsubscribe link.
Push notifications start only after you allow them on your device. You can choose which kinds you get in the app's settings, and switch them off in your device settings at any time.
13
Age
In shortWUN is for everyone, including younger members.
WUN welcomes people of all ages. If you have a question or concern about a younger member's personal data, contact us at [email protected].
14
When this page changes
In shortSmall fixes appear here. Real changes reach your inbox 30 days ahead.
When we change how we handle data, we update this page and the date at the top. If a change matters to you, for example a new kind of data or a new purpose, we email you at least 30 days before it takes effect.
15
Not happy?
In shortTell us first. You can always go to a data protection authority too.
Please talk to us first at [email protected]; most things are quickly sorted. You can also complain to the Swedish Authority for Privacy Protection (imy.se), to the data protection authority where you live in the EEA, or, in the UK, to the Information Commissioner's Office (ico.org.uk).
Still wondering about something?
Write to us. A real person on the WUN team reads every message, and we usually reply within a few working days.