WeBringCode

Privacy policy

Last updated: 2026-10-20

This page explains what personal data we collect when you visit webringcode.com or get in touch with us, why we do it and what rights you have.

Who is responsible

WeBringCode AB (company reg. no. 559388-3969), Torggatan 17C, 541 30 Skövde, Sweden, is the data controller. If you have questions about how we handle your data, email admin@webringcode.com or call +46 10 660 04 20.

When you get in touch

When you send the form, we store your name, your email address, your company if you give it, and your message, along with the page and language you sent it from. We need your name, email and message to be able to reply. Without them you cannot send the form, but you can always email or call us instead.

We use the data to reply to you and follow up on your enquiry. The legal basis is our legitimate interest in answering enquiries and discussing a possible assignment with you. The same applies if you email or call us.

The data is stored in our own database and in our CRM, HighLevel. In the database we keep it for 24 months after your latest enquiry through the form, and then delete it. In HighLevel it is deleted after 24 months without any activity involving you, such as an enquiry, an email or a call. Deleted data can remain in our backups for up to four weeks before it is overwritten.

Spam protection

The form is protected by Cloudflare Turnstile, which checks that a human is sending it. Turnstile processes technical data about your browser and connection, such as your IP address. The legal basis is our legitimate interest in avoiding spam. Cloudflare also uses the data to improve its own bot detection and is responsible for that part itself. Read more in Cloudflare’s Turnstile privacy policy.

Cookies

NEXT_LOCALE is stored when you change language, so the site remembers your choice. consent_flags is stored when you make a choice in the cookie banner, so we know what you have agreed to. Both are kept for one year.

The rest are only used if you agree to them, one category at a time:

  • Analytics: Google Analytics 4, via Google Tag Manager, shows how the site is used, for example which pages are visited. Google sets cookies called _ga and _ga_*, which are kept for up to two years. We keep analytics data in Google Analytics for 14 months.
  • Marketing: Meta Pixel measures whether our ads on Facebook and Instagram lead to people getting in touch. Meta sets a cookie called _fbp, which is kept for three months. LinkedIn Insight Tag measures in the same way whether our ads on LinkedIn lead to people getting in touch. LinkedIn sets cookies including bcookie, lidc, UserMatchHistory, lms_ads and lms_analytics, which are kept between 24 hours and one year.

The legal basis is your consent. You can change or withdraw it at any time via Cookie settings at the bottom of the page. Withdrawing it does not affect what happened before you did.

Measuring enquiries

If you have agreed to analytics or marketing and send the form, we also store how you found us, to understand which visits and ads lead to enquiries. With analytics: campaign details in the link you came from (UTM) and your Google Analytics client ID. With marketing: click IDs from Google and Meta ads, and Meta’s browser ID (_fbp). It is stored together with the enquiry, in our database and in HighLevel.

We also tell Google Analytics and Meta that an enquiry has come in, from our server and only for the categories you have agreed to. To Meta we send a hash (SHA-256) of your email address, so that Meta can link the enquiry to an ad you have seen. A hash is still personal data. The legal basis is your consent.

Who has access

We never sell your data. The following companies process data on our behalf:

  • DigitalOcean: the server and database the site runs on, in Frankfurt, Germany
  • HighLevel: our CRM
  • Google: analytics, if you have agreed to it
  • Sentry: error reports when something breaks on the site, so we can fix it (legitimate interest). Sentry does not store your IP address and sets no cookies. Data is stored in Germany

Cloudflare (spam protection), plus Meta and LinkedIn (ad measurement, if you have agreed to it), also use the data for their own purposes, and are responsible for that themselves. We also disclose data where the law requires it.

Transfers outside the EU

HighLevel, Cloudflare, Google, Meta, LinkedIn and Sentry are US companies, so your data may be processed in the United States. All six are certified under the EU-US Data Privacy Framework, which the European Commission has approved. You can check this at dataprivacyframework.gov.

Your rights

Which rights you can use depends on why we process the data. You have the right to:

  • find out what data we hold about you and get a copy
  • have incorrect data corrected
  • have your data deleted
  • restrict how we use it
  • object to processing based on legitimate interest
  • receive data you have given us, in a format other systems can use, where we process it based on your consent
  • withdraw your consent at any time

Email admin@webringcode.com and we will reply within one month. If the request is complex it can take up to two more months, and in that case we will let you know within the first month and explain why.

If you think we are handling your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.

Security

All traffic to the site is encrypted (HTTPS). Access to the database and the CRM is limited to the people who need it to handle your enquiry.

Changes

If we change anything in this policy, we update the date at the top. If we want to use your data for something new, we tell you first and ask for consent where it is required.