Privacy and cookies

1. Data controller

Optifirm AB, company registration number 559237-2400, is the data controller for the processing of personal data on www.optifirm.se and in the client portal. Send privacy questions to info@optifirm.se.

2. What data we process

We process the data you provide to us and data generated when you use our services.

• Contact details – name, company, email and phone.
• Data in the client portal – projects, quotes, invoices and documentation.
• Payment data – card payments are handled by Stripe. We never store full card numbers.
• Technical data – for example IP address, browser and cookies.
• Information about how you use the website and which campaign or ad you came from – only if you have consented to analytics or marketing.
• When you send an enquiry, an encrypted (hashed) version of your email address may be sent to advertising platforms to measure campaigns – only if you have consented to marketing.

3. Purposes and legal basis

4. How long we keep the data

Inquiries are kept for at most twelve months. Client data is kept for the duration of the contract. Accounting records are kept for seven years under the Swedish Bookkeeping Act.

5. Recipients

We share data with suppliers who help us run and market our services: Google (hosting on Google Cloud, email on Google Workspace, Google Analytics and Google Ads), Stripe (payments), Microsoft (Clarity and Microsoft Advertising), Meta (Facebook and Instagram), LinkedIn and Leadfeeder. The analytics and marketing services only receive data if you have consented. Several of the suppliers are based in the USA. Transfers there are made under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

6. Your rights

You have the right to request access to, correction or erasure of your data, to request restriction, to object to processing and to receive the data in a machine-readable format (data portability). You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

7. Cookies

We use cookies to make the website and My pages work and – if you consent – to understand how the website is used and to target and measure our marketing. No analytics or marketing cookies are set before you have made a choice.

Cookies we use

Retention periods are the suppliers’ defaults and may be changed by them. The third-party suppliers’ own terms apply to their processing.

8. Contact

If you have questions about how we process personal data, you are welcome to contact us at info@optifirm.se.