Privacy policy

How we handle your personal data

Last updated 28 October 2026

Who is responsible?

Nordlyft (sole proprietorship, Sweden) is the data controller for the data described here. Contact us at [email protected].

What data do we collect?

  • When you use the contact form: name, company, email, phone (optional), what you're interested in and your message.
  • When you book a call: name, email and the time you choose. Bookings are handled through Google Calendar.
  • When you email us: your email address and what you write.
  • If you become a customer: contact details, contracts, invoices and our communication with you.

Why, and on what legal basis?

  • To reply to your enquiry and book calls – our legitimate interest in responding to people who contact us.
  • To deliver what you've bought – to perform our contract with you.
  • To keep invoices in our accounts – to comply with Swedish bookkeeping law.

How long do we keep it?

  • Enquiries that don't lead to a collaboration are deleted no later than 12 months after the last contact.
  • Customer data is kept while the contract is active and then as long as needed, at most 24 months.
  • Invoices and accounting records are kept for 7 years as required by law.

Who helps us?

  • We use a small number of carefully chosen providers that process data on our behalf: Cloudflare (website and contact form) and Google (email, calendar and video calls).
  • These providers may in some cases process data outside the EU/EEA. When they do, it is based on the EU Commission's adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
  • We never sell your data.

Cookies

This website uses no tracking or analytics cookies and loads no advertising tools. Fonts and images are served from our own server.

Your rights

  • You have the right to access your data, have it corrected or erased, object to processing and request that it be restricted.
  • Email [email protected] and we'll help you, normally within one month.
  • If you're unhappy, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.