Legal

Privacy Policy

Last updated · March 2026

1. Introduction

Jovian Creative AS ("we", "us", or "our") operates the website wisewithgold.com ("the Website"). We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our Website. It has been drafted in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Norwegian Personal Data Act (personopplysningsloven).

By using our Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Website.

2. Data Controller

The data controller responsible for your personal data is:

Jovian Creative AS
Email: privacy@wisewithgold.com

For all privacy-related inquiries, please contact us using the email address above. We will respond to your request within 30 days, as required by the GDPR.

3. Information We Collect

3.1 Information You Provide Voluntarily

We collect personal information that you voluntarily submit to us through the Website, including:

  • Newsletter subscription: Your email address when you subscribe to our newsletter.
  • Contact form: Your name, email address, and message content when you submit an inquiry through our contact form.

You are under no obligation to provide this information, but certain features of the Website may not be available without it.

3.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through standard web technologies:

  • IP address (anonymized for analytics purposes)
  • Browser type and version
  • Operating system
  • Referring URLs (the page that directed you to our Website)
  • Pages visited on our Website and navigation paths
  • Date and time of access
  • Approximate geographic location (derived from anonymized IP address, country-level only)

3.3 Cookies and Tracking Technologies

We use a limited number of cookies to operate the Website and analyze usage. For comprehensive information about which cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

4. Legal Basis for Processing (Article 6 GDPR)

We process your personal data only when we have a valid legal basis to do so. The specific legal basis depends on the purpose of processing:

  • Consent (Art. 6(1)(a)): We rely on your freely given consent for newsletter subscriptions and for setting analytics cookies. You can withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
  • Legitimate Interest (Art. 6(1)(f)): We process certain data based on our legitimate interest in understanding how visitors use our Website so that we can improve its content and performance, and in maintaining the security and integrity of the Website. We have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms.
  • Contract (Art. 6(1)(b)): When you submit an inquiry through our contact form, we process your data as necessary to respond to your request and fulfill the communication you initiated.
  • Legal Obligation (Art. 6(1)(c)): In certain circumstances, we may be required to process or retain personal data to comply with applicable laws, such as Norwegian tax and accounting regulations.

5. How We Use Your Information

We use the personal data we collect for the following purposes:

  • Operate, maintain, and improve the Website and its content
  • Send newsletters and educational updates to subscribers who have opted in
  • Respond to inquiries submitted through our contact form
  • Analyze website usage patterns to improve navigation, content relevance, and user experience
  • Ensure the security and technical integrity of the Website
  • Comply with applicable legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling.

6. Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to analyze how visitors interact with our Website. Google Analytics uses cookies to collect information about your visits, including pages viewed, time spent on the site, and navigation paths.

We have configured Google Analytics with the following privacy safeguards:

  • IP anonymization: Your IP address is anonymized before being stored or processed by Google, so your full IP address is never recorded.
  • Data retention: Analytics data is set to be automatically deleted after 14 months.
  • No advertising features: We do not use Google Analytics advertising features, remarketing, or demographic reports.
  • Data processing agreement: We have a data processing agreement with Google in accordance with Article 28 GDPR.

You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On.

For more information, please review the Google Privacy Policy.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

We may share your data with the following categories of service providers who process data on our behalf:

  • Google (analytics): Receives anonymized website usage data through Google Analytics, as described above — only after you accept analytics cookies.
  • Google (fonts): Web fonts are served from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). When your browser requests a font file, Google receives your IP address as part of that request. Google states that font requests are not used for profiling.
  • MailerLite (newsletter delivery): When you submit a signup form, your email address (and optional first name) is sent to MailerLite, our email service provider, for the sole purpose of delivering the newsletter or guide you requested. MailerLite acts as a data processor under a data processing agreement in accordance with Article 28 GDPR.
  • Cloudflare (hosting & delivery): The site is served via Cloudflare Pages; like any web host, Cloudflare processes connection data (such as your IP address) to deliver pages and protect against abuse.
  • Live price data (gold-api.com): Pages with live spot-price displays fetch current metal prices directly from your browser. The request carries your IP address, as any web request does; no personal information is sent.
  • Lemon Squeezy (shop checkout): The shop pages load Lemon Squeezy's checkout script. If you purchase a digital guide, payment is processed entirely by Lemon Squeezy as merchant of record — we never see or store your payment details.

All third-party processors are contractually bound to process your data only as instructed by us, to maintain appropriate security measures, and to comply with applicable data protection laws.

We may also disclose personal data if required by law, regulation, court order, or governmental authority.

8. International Data Transfers

Some of our service providers, particularly Google, may process your data on servers located outside the European Economic Area (EEA). When your data is transferred outside the EEA, we ensure it is protected by appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs): Approved by the European Commission, these contractual provisions require the data recipient to protect your data to EU standards.
  • EU-US Data Privacy Framework: Where applicable, we rely on our providers' participation in the EU-US Data Privacy Framework, which the European Commission has recognized as providing adequate data protection.

You may request more information about the specific safeguards applied to your data by contacting us at privacy@wisewithgold.com.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The specific retention periods are as follows:

Data Category Retention Period
Newsletter subscriber data (email address) Until you unsubscribe, plus 30 days for processing removal
Contact form submissions (name, email, message) 12 months from date of submission
Google Analytics data 14 months (per our GA4 data retention setting)
Server access logs 90 days

After the applicable retention period expires, your data is securely deleted or anonymized so that it can no longer be associated with you.

10. Your Rights Under GDPR

Under the GDPR, you have the following rights with respect to your personal data:

  • Right of access (Art. 15): You have the right to request a copy of the personal data we hold about you and information about how it is processed.
  • Right to rectification (Art. 16): You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
  • Right to erasure (Art. 17): Also known as the "right to be forgotten", you have the right to request deletion of your personal data when it is no longer necessary for the purpose it was collected, or when you withdraw your consent.
  • Right to restriction of processing (Art. 18): You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest its accuracy.
  • Right to data portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
  • Right to object (Art. 21): You have the right to object to processing of your personal data that is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
  • Right to withdraw consent (Art. 7(3)): Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
  • Right to lodge a complaint with a supervisory authority: If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

To exercise any of your rights, please contact us at privacy@wisewithgold.com. We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days, and we will inform you if such an extension is necessary.

If you wish to lodge a complaint with the supervisory authority, you may contact:

Datatilsynet (Norwegian Data Protection Authority)
Postboks 458 Sentrum
0105 Oslo, Norway
Email: postkasse@datatilsynet.no
Website: www.datatilsynet.no

11. Email Communications & Newsletter

If you subscribe to our newsletter, we will send you periodic emails containing educational content about gold investment. Each email includes a clear and easy-to-use unsubscribe link at the bottom.

You can unsubscribe from our newsletter at any time by:

Upon receiving your unsubscribe request, we will remove your email address from our mailing list within 30 days. You may receive emails that were already scheduled during this processing period.

12. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption: All data transmitted between your browser and our Website is encrypted using TLS (Transport Layer Security).
  • Access controls: Access to personal data is restricted to authorized personnel who need it to perform their duties.
  • Regular security reviews: We periodically review and update our security practices to address emerging threats and vulnerabilities.

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you transmit data at your own risk.

13. Children's Privacy

Our Website is not directed at children under the age of 16 (the age threshold established by the GDPR and adopted by Norwegian law). We do not knowingly collect personal data from children under 16 years of age.

If we become aware that we have inadvertently collected personal data from a child under 16, we will take prompt steps to delete that data. If you believe we have collected data from a child, please contact us at privacy@wisewithgold.com and we will investigate immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or business operations. When we make changes, we will update the "Last updated" date at the top of this page.

For material changes that significantly affect how we process your personal data, we will make reasonable efforts to notify you, such as by displaying a prominent notice on our Website. Your continued use of the Website after any changes to this Privacy Policy constitutes your acknowledgement of the updated terms.

15. Contact

If you have questions, concerns, or requests related to this Privacy Policy or our data processing practices, please contact us:

For more information, please also see our related legal documents: