Last updated: 27 October 2025
Who we are (Controller)
Wishlised is operated by Agence 25 (Switzerland). This is an online service with no public office address.
Email: info@wishlised.com
Hosting: Infomaniak (Switzerland)
What data we process
- Account: email, username, password (hashed)
- Content: wishlists, item titles, links, prices, notes, tags, images
- Reservations: guest name and note added on a reservation
- Payments: PayPal transaction details and invoice IDs (no full card data on our servers)
- Usage: IP, device/browser, logs, cookie IDs
- Comms & marketing: support emails, newsletter sign-ups (Mailchimp)
Why we process it (purposes and legal bases)
- Provide the service (create lists, items, reservations) — Contract
- Payments and billing with PayPal — Contract and Legal obligation
- Security and abuse prevention — Legitimate interests
- Product analytics (Google Analytics) — Consent where required
- Ads tracking (Google/Meta) — Consent
- Email updates (Mailchimp) — Consent
- Product improvement — Legitimate interests
Where the data comes from
- You, when you sign up or add content
- Guests, when they reserve an item and leave a note
- Your device and browser (cookies and logs)
Do you have to give us data?
To make an account, we need your email and a password. Other fields are optional unless marked as required in a form.
Do we use automated decisions or profiling?
No.
Who gets the data (processors/partners)
- Hosting/CDN: Infomaniak (CH)
- Payments: PayPal
- Analytics/Ads: Google Analytics and Google Ads tags, Meta Pixel
- Email: Mailchimp (newsletters)
- Logs/monitoring: standard server logs
We share only what is needed for each tool to work. We have data terms with key vendors.
International transfers
Main hosting is in Switzerland. Some tools process data in the EEA, UK, or US. These transfers use standard safeguards (for example, Standard Contractual Clauses or an approved transfer scheme).
How long we keep data
- Account and lists: kept while your account is active
- Logs: 12 months
- Backups: 30–90 days
- Billing records: up to 7 years (per tax rules)
- Closed accounts: delete or anonymize within 30 days after your deletion request, with lawful archives kept for billing
Your rights
Under GDPR and Swiss law, you can:
- Access your data
- Fix wrong data
- Delete your data
- Limit some uses
- Get a copy (portability)
- Object to some uses
- Withdraw consent at any time (this does not change past processing)
Send requests to info@wishlised.com. We may ask you to prove it is you.
Cookies and consent
We use a consent banner. Non-essential tags (Google/Meta) load only after consent. You can change your choice at any time via the “Cookies” link in the footer.
Children
Our service is not for users under 16. If a child used the service, email us and we will remove the data.
Security
We use HTTPS, access controls, rate limits, and password hashing. No method is perfect, but we work to protect your data.
EU/UK representative
We are based in Switzerland. We do not list an EU/UK representative at this time.
Supervisory contacts
EU/EEA users can contact their local data authority. Swiss users can contact the FDPIC. You can also contact us at info@wishlised.com.
Changes to this page
When we change our data practices, we will update this page and the date above.