Privacy policy
In short: we only collect what we need to answer you and deliver our services. We never sell your data, we use no tracking cookies, and you can ask us to delete everything at any time.
1. Data controller
Eyrie is operated by Ilmal AB (Räfsvägen 8, 17543 Järfälla, org.nr 559589-6605, VAT number SE559589660501), which is the data controller for the processing of personal data described in this policy. Contact: hej@eyrie.se or via app.eyrie.se.
2. What data we collect
We only collect data you give us yourself, or that your browser automatically transfers when you visit the website:
- Contact details from enquiries. When you email us or order a review we collect what you provide: name, email address, company name, web address (domain) and the content of your message.
- Data you share in an engagement. During an ongoing engagement we may process contact persons' names, email and telephone numbers, and material needed for the work (access to the website's publishing, existing texts, analysis results).
- Server logs. Our hosting environment stores technical information in ordinary server logs: IP address, browser type, page fetched and time. The logs are used for security and operations, not to track individual visitors.
We measure traffic with Cloudflare Web Analytics — a cookieless analytics tool that does not use cookies, does not build individual profiles and does not follow visitors between websites. We do not use Google Analytics or similar profiling tools, and we do not collect data from third-party sources to build profiles.
3. Why we process the data (legal basis)
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Answer your enquiry — review, quote, questions | Name, email, company, domain, message | Legitimate interest (Art. 6(1)(f)) in answering enquiries received |
| Deliver agreed services — review, optimisation, monitoring, reports | Contact details, material needed for the engagement | Contract (Art. 6(1)(b)) |
| Invoicing and bookkeeping | Contact details, invoice details | Legal obligation (Art. 6(1)(c)) under the Swedish Bookkeeping Act |
| Customer account in the app — login and use of app.eyrie.se | Name, email, password (stored hashed), company details | Contract (Art. 6(1)(b)) |
| Security and abuse prevention | Server logs | Legitimate interest (Art. 6(1)(f)) in keeping the website and email secure |
We do not send newsletters and do not market to people who have merely asked about something, unless they have asked to hear more themselves.
4. How long we keep the data
- Enquiries that do not become engagements: the correspondence is normally deleted within 12 months, unless there is reason to keep it longer.
- Customer data and engagement material: kept during the ongoing engagement and afterwards for as long as necessary for the relationship and for warranties or dispute claims.
- Invoices and accounting records: kept for seven years under the Bookkeeping Act.
- Server logs: normally rolled over after 30 days.
5. Sharing with third parties
We never sell personal data and never use it for advertising purposes. The data is shared only with a few suppliers needed for operations:
- Cloudflare — protection and delivery of the website (including server logs).
- Amazon SES — sending email (for example login emails and receipts).
- Stripe — payments and subscription management.
- Invoicing and accounting service — for bookkeeping.
These suppliers process the data as data processors on our instructions. Some of the suppliers (including Amazon SES and Stripe) process data outside the EEA. Such transfers take place only with the European Commission's standard contractual clauses (or another approved safeguard) under GDPR Chapter V.
6. Cookies
This marketing site uses no cookies for tracking, and no third-party scripts for analytics beyond Cloudflare's cookieless Web Analytics (see section 5). The logged-in customer app (app.eyrie.se) sets technical session cookies required for login — they are purely functional and cannot be used to track you. The website also stores your language choice in the browser's localStorage (the key lang) — also purely functional. No consent banner is therefore needed, because we set no non-essential cookies.
7. Your rights
Under the GDPR you have the right to:
- Access — receive a copy of the personal data we process about you.
- Rectification — have inaccurate data corrected.
- Erasure — have data deleted when it is no longer needed or when the processing has no basis (does not apply to data we must keep under the Bookkeeping Act).
- Restriction — request that processing be paused while a matter is investigated.
- Data portability — receive data you have given us in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
You can also complain to the supervisory authority, the Swedish Authority for Privacy Protection (IMY), imy.se, if you believe we process your data incorrectly.
8. Contact
For questions about this policy, or to exercise any of your rights, email hej@eyrie.se. We normally reply within a few working days, and at the latest within one month, as the GDPR requires.
Questions about your data?
Email us at hej@eyrie.se and we will help you — or create an account and get started right away.
Start with a free review