Last updated: 27 October 2025

Who we are

Wishlised is an online service operated by [Agence 25] (“we”, “us”).
Contact: info@wishlised.com
Registered in Switzerland. We do not keep a public office address. You can reach us by email.

Hosting: Infomaniak, data centers in Switzerland.

What this covers

This policy explains what we collect, how we use it, who we share it with, where we store it, how long we keep it, and your choices under GDPR and the Swiss nFADP.

Data we collect

Account – Email, username, password (hashed).
Profile & content – Wishlists, item titles, links, images, notes, tags.
Reservations – Guest name and note added on a reservation.
Payments – PayPal payment status, invoice IDs, and tokens. We do not store full card data.
Usage & device – IP (at edge), device/browser info, logs, cookies.
Comms – Emails you send to support or newsletter sign-ups (Mailchimp).

How we use data

Notes on GA4: GA4 does not log or store IP addresses and uses EU domains/servers for EU users.

Legal bases (EEA/UK/CH)

Sharing with service providers

We share data with vendors that help us run Wishlised:

We sign data terms where offered and share only what is needed.

Public, unlisted, and private lists

If you post a public list or share a link, others can see that content.

Cookies and tracking

You can change consent any time via the banner link in the footer.

Marketing

If you opt in, we send product tips and news via Mailchimp. You can unsubscribe in any email. Transfers to Mailchimp follow the Data Privacy Framework and/or SCCs.

Payments

Payments are handled by PayPal. PayPal may act as a controller for some data in a transaction. Read PayPal’s privacy statement for details.

Data location and transfers

Primary hosting is in Switzerland (Infomaniak). Some tools process data in the EEA, the UK, or the US. When data moves, vendors use EU safeguards (DPF and/or SCCs).

Retention

Your rights

Depending on where you live, you can request: access, correction, deletion, restriction, portability, and objection. You can withdraw consent at any time. Contact info@wishlised.com. Learn more on the EDPB site.

Children

Wishlised is not for users under 16. If a child used the service, email us and we will remove the data.

Security

We use HTTPS, access controls, and password hashing. No method is perfect, but we work to protect your data.

EU/UK representative

We are based in Switzerland and have no EU/UK representative at this time. If that changes, we will update this page.

Changes

We will update this page when our practices change and adjust the date at the top.

Contact

Questions or requests: info@wishlised.com