Privacy Notice
Last updated: March 2026
1. Controller
HiPrivacy AB, org. nr [to be added], Stockholm, Sweden ("HiPrivacy", "we", "us") is the controller for the processing of personal data described in this notice.
Contact: hi@hiprivacy.io
2. What data we collect and why
This notice covers our website hiprivacy.io and the waitlist registration form.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Work email | Process your access request and communicate about launch | Art. 6.1(b) — necessary to take steps at your request prior to entering into a contract | Until you withdraw or 12 months after last contact |
| Consent checkbox | Send product updates and privacy tips (only if checked) | Art. 6.1(a) — consent | Until consent is withdrawn |
| Technical data (IP, browser) | Website functionality and security | Art. 6.1(f) — legitimate interest (security) | 30 days |
3. Recipients
Your data may be shared with the following categories of recipients, all of which process data on our behalf under data processing agreements:
- HubSpot Inc. (CRM and form handling) — EU data processing, DPA in place
- Netlify/Cloudflare (website hosting) — EU/US with adequate safeguards
We do not sell your data to third parties.
4. Transfers outside the EU/EEA
Where data is transferred outside the EU/EEA, we rely on EU Standard Contractual Clauses (SCCs) or adequacy decisions as the transfer mechanism. HubSpot processes data in the EU.
5. Your rights
Under GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7.3)
To exercise any of these rights, contact us at hi@hiprivacy.io. We will respond within 30 days.
6. Supervisory authority
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): imy.se
7. Cookies
This website does not use tracking cookies. We use only technically necessary cookies for website functionality. No cookie consent banner is needed.
8. Changes
We may update this notice as our services develop. The date at the top of this page indicates the latest revision.