WaveGo Data Processing Terms

Version 2026-09-20

WaveGo is operated by Växthuset Utemiljö i Täby AB (org. no. 5565899167).

These terms explain how your customers' personal data is shared when you activate a supplier and fulfil orders through WaveGo. WaveGo is only a technical intermediary that connects your store with the supplier — the sale is between you and your customer, and fulfilment is between you and the supplier. You accept these terms when you activate a supplier. They apply in addition to our Privacy Policy.

1. Who does what

• You (the retailer) are the data controller for your customers' personal data. You decide what you sell and to whom, and you are responsible for having a lawful basis and your own privacy notice toward your customers.
• The supplier is responsible for the delivery details it receives and uses them to pack and ship the order directly to your customer.
• WaveGo acts as a processor when processing end-customer order and delivery data on the Retailer's documented instructions. WaveGo is responsible for processing and security within the parts of the platform and infrastructure under WaveGo's control. The Retailer and Supplier remain responsible for processing they independently determine and perform.

2. What data is shared with the supplier

When an order is placed in your store and fulfilled through WaveGo, the following details of your end customer are shared with the activated supplier:

• Full name
• Delivery address (street, postal code, city, country)
• Phone number (used by the carrier for delivery)
• The products and quantities ordered
• Where needed, your own company details from My Company (e.g. name, VAT/registration number and address) for the supplier's invoicing

No payment card details are shared with the supplier. Payments are handled separately.

3. Why it is shared

This transfer is necessary to fulfil the purchase contract between you and your customer — the supplier cannot ship the order without the customer's name and delivery address. Data is used only for order fulfilment, delivery and related support, and not for the supplier's own marketing.

4. Where data is processed

WaveGo uses third-party infrastructure and service providers to operate the platform, including database hosting and backend hosting. These providers process personal data only to the extent necessary to provide their services to WaveGo. Information about relevant service providers, processing locations and applicable safeguards is maintained by WaveGo. Where personal data is transferred outside the EU/EEA, an applicable transfer mechanism under the GDPR must be used.

5. Retention

WaveGo retains identifiable personal data only for as long as necessary for order fulfilment, support, disputes, security and applicable legal obligations. Requests for access, correction or deletion are handled in accordance with applicable data-protection law. Certain transaction, contractual and audit records may be retained where required by law or necessary to establish, exercise or defend legal claims. Uninstalling WaveGo does not require the deletion of information that WaveGo is legally entitled or required to retain.

6. Your responsibilities

• Inform your own customers (for example in your store's privacy policy) that orders are fulfilled by a third-party supplier and that their delivery details are shared for that purpose.
• Only pass on customer data through WaveGo for the purpose of fulfilling their orders.
• Handle your customers' data-subject requests (access, correction, deletion), including with the supplier where the data sits with them.

7. Acceptance

By ticking the agreement box and activating a supplier, you confirm that you have read and accept these Data Processing Terms and the Data Processing Agreement, and you instruct WaveGo to transmit the order and delivery details necessary to fulfil confirmed orders to that supplier. This is contractual acceptance and a processing instruction — not a separate, revocable GDPR consent — because the processing is necessary to fulfil the order.

8. Data-protection enquiries

Data-protection enquiries: info@wavego.eu