Last Updated On 26-Oct-2026 Effective Date 26-Oct-2026 This Privacy Policy describes the policies of Pikus Media AB, Stjärnbildsgatan 120 lgh 1002, 415 67 Göteborg, Sweden, org. nr.: 559478-7821, VAT-EU: SE559478782101, email: hej@pikus.media, phone: +46 76 109 52 40 on the collection, use and disclosure of your information that we collect when you use our website (https://pikus.media). (the “Service”). By accessing or using the Service, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service. We may modify this Privacy Policy at any time without any prior notice to you and will post the revised Privacy Policy on the Service. The revised Policy will be effective 180 days from when the revised Policy is posted in the Service and your continued access or use of the Service after such time will constitute your acceptance of the revised Privacy Policy. We therefore recommend that you periodically review this page. Information We Collect: We will collect and process the following personal information about you:

1. Name
2. Email
3. Mobile
4. Social Media Profile
5. Address
6. Payment Info
7. Messages you write in our website chat and the details of quotes you prepare there

How We Collect Your Information: We collect/receive information about you in the following manner:

1. When a user fills up the registration form or otherwise submits personal information
2. Interacts with the website
3. When a user writes in our website chat or prepares a quote with the chat assistant
4. From public sources

How We Use Your Information: We will use the information that we collect about you for the following purposes:

1. Marketing/ Promotional
2. Creating user account
3. Testimonials
4. Customer feedback collection
5. Processing payment
6. Support
7. Administration info
8. Manage customer order
9. Answering your questions in the website chat, preparing quotes and contacting you when you ask us to

If we want to use your information for any other purpose, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law. How We Share Your Information: We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:

1. Advertising: Meta Platforms Ireland Limited (Meta Pixel and Conversions API), only with your consent
2. Analytics: Google Ireland Limited (Google Analytics 4), only with your consent
3. Payments: Stripe
4. Newsletter: MailerLite, when you subscribe
5. Data collection & process
6. AI service provider for the website chat (OpenAI)
7. Bot protection (Google reCAPTCHA)

We require such third party’s to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling the said purpose. We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If the Service or our company is merged or acquired with another company, your information will be one of the assets that is transferred to the new owner. Retention Of Your Information: We will retain your personal information with us for 90 days to 2 years after users terminate their accounts or for as long as we need it to fulfill the purposes for which it was collected as detailed in this Privacy Policy. Website chat conversations are deleted automatically after 365 days. We may need to retain certain information for longer periods such as record-keeping / reporting in accordance with applicable law or for other legitimate reasons like enforcement of legal rights, fraud prevention, etc. Residual anonymous information and aggregate information, neither of which identifies you (directly or indirectly), may be stored indefinitely. Your Rights: Depending on the law that applies, you may have a right to access and rectify or erase your personal data or receive a copy of your personal data, restrict or object to the active processing of your data, ask us to share (port) your personal information to another entity, withdraw any consent you provided to us to process your data, a right to lodge a complaint with a statutory authority and such other rights as may be relevant under applicable laws. To exercise these rights, you can write to us at hej@pikus.media. We will respond to your request in accordance with applicable law. You may opt-out of direct marketing communications or the profiling we carry out for marketing purposes by writing to us at hej@pikus.media. Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought. Website Chat Assistant: Our website has a chat assistant powered by artificial intelligence. It answers questions about our services and can prepare a quote together with you. Your messages and the answers are sent to OpenAI (OpenAI, L.L.C., USA), which generates the answers on our behalf; messages written in other languages may also be translated for our team. When you write in the chat, it can see which products and how many of each are in your shopping cart, so it can suggest products that go well with them; it does not see your name, address or payment details. To protect the chat from bots we use Google reCAPTCHA (Google Ireland Limited), which processes technical data about your device and how you use the page. If you choose to give your name, email address, phone number or other details in the chat, for example to receive a quote or a call back, we save them and send them to our team by email so we can contact you. We do this only when you agree in the chat (your consent and steps prior to entering into a contract, Art. 6(1)(a) and (b) GDPR). Conversations are stored in our website database and deleted automatically after 365 days; quotes and contact requests are kept like other customer enquiries described above. Short keywords from questions the assistant could not answer are kept for up to 90 days, without your name or contact details, so we can add the missing information. When you open the chat, an identifier (pmcai_token) is stored in your browser so the conversation continues on other pages; if the site shows you a product suggestion, a note that it was shown (pmcai_nudged) is kept only until you close the browser. You can ask us to access or delete your chat data at hej@pikus.media. Cookies and Similar Technologies: We use PMS Cookie Banner to ask for your consent. Necessary technologies work without consent because the site needs them: your consent choice (pmcb_consent_v1 and pmcb_privacy_v1 in your browser), the pmcb_state cookie that tells our server which categories you chose (it contains no identifier), the shopping cart and currency, account login, payment fraud prevention by Stripe and bot protection by Google reCAPTCHA. The chat stores pmcai_token and pmcai_nudged as described above. Optional technologies start only after you allow their category:

• Analytics: Google Analytics 4 (Google Ireland Limited) measures how the site is used; WooCommerce order attribution (sbjs_* cookies) remembers how you found us; WooCommerce and Automattic usage statistics.
• Marketing: Meta Pixel and Meta Conversions API (Meta Platforms Ireland Limited), set up with PixelYourSite, measure our ads and the actions taken after seeing them; PixelYourSite cookies (pys_*, pbid, traffic source and landing page) link visits to campaigns. Events sent from our server to Meta are also sent only after you allow marketing.

Until you decide, Google receives the Consent Mode v2 signals “denied”. Meta and Google may process data in the USA; both are certified under the EU–US Data Privacy Framework. Every cookie with its provider and duration is listed in the privacy settings panel. You can change or withdraw your choice at any time with the cookie button in the bottom-left corner of every page. Security: The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk. Third Party Links & Use Of Your Information: Our Service may contain links to other websites that are not operated by us. This Privacy Policy does not address the privacy policy and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on the Service. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services. Grievance / Data Protection Officer: If you have any queries or concerns about the processing of your information that is available with us, you may email our Grievance Officer at Pikus Media AB, Stjärnbildsgatan 120 lgh 1002, 415 67 Göteborg, Sweden, email: hej@pikus.media. We will address your concerns in accordance with applicable law.