Privacy Policy

SwedQ AB is the data controller responsible for the personal data described in this policy. You can reach us using the details below.

We only collect data that we need for a clearly defined purpose:

• Contact details you provide. Name, email address, phone number, company, and the content of your message when you use our contact form or email us.
• Recruitment data. Application details, CV, and correspondence if you apply for a role with us.
• Client engagement data. Business contact details and correspondence necessary to deliver and administer our services.
• Technical and usage data. IP address, browser type, device information, referring page, and aggregated analytics about how our website is used.

We do not intentionally collect special categories of personal data, and we do not knowingly collect data from children under 16.

Under the GDPR we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f)). Responding to enquiries, maintaining business relationships, securing our website, and improving our services.
• Performance of a contract (Art. 6(1)(b)). Delivering consultancy, managed cloud, and data platform services to our clients.
• Consent (Art. 6(1)(a)). Non-essential cookies and analytics, and any marketing communications. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)). Accounting, tax, and other statutory record-keeping requirements.

We use a small number of cookies and privacy-friendly analytics to understand how our site is used. Non-essential cookies are only set after you consent via our cookie banner. Full details are available in our Cookie Policy.

We never sell your personal data. We share it only with service providers who process data on our behalf under a data processing agreement, including hosting and infrastructure providers, analytics providers, recruitment tooling, and email and CRM systems. We may also disclose data where required by law.

We aim to keep personal data within the EU/EEA. Where a provider processes data outside the EEA, we ensure an appropriate safeguard is in place, such as an EU adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary technical measures where necessary.

We retain personal data only as long as necessary for the purpose it was collected. Contact enquiries are normally kept for up to 24 months, recruitment data for up to 24 months after the process ends, client records for the duration of the engagement plus the statutory retention period, and accounting records for seven years as required by Swedish law.

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data where no legal basis for retention applies
• Request restriction of processing, or object to processing based on legitimate interests
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, without affecting processing already carried out

To exercise any of these rights, email info@swedq.se. We will respond within one month. If you believe we have handled your data improperly, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls on a least-privilege basis, logging and monitoring, and regular review of our suppliers. Our operations are supported by our ISO 9001, ISO 14001, ISO 27001, and ISO 45001 certified management systems.

We may update this policy to reflect changes in our services or legal obligations. The date at the top of this page always shows when it was last revised, and material changes will be communicated on our website.