Swedish Project is a trading name of Space in the Making AB ("we," "our," or "us"), the data controller responsible for the processing of your personal data. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or engage with our services.
We may collect the following types of information:
We use the information we collect to:
Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you use our site. You can manage your cookie preferences at any time through the cookie banner or your browser settings.
These cookies are essential for the website to function properly. They cannot be disabled.
| Cookie Name | Purpose | Duration |
|---|---|---|
| nordic-ips-cookie-consent | Stores your cookie preference | 1 year |
| sb-*-auth-token | Authentication session (Service Hub) | Session |
| sidebar:state | Remembers sidebar open/closed state | 7 days |
These cookies help us understand how visitors interact with our website. They are only set if you accept analytics cookies.
| Cookie Name | Purpose | Duration |
|---|---|---|
| No analytics cookies are currently in use. This section will be updated if analytics services are added in the future. | ||
To run our website and The Hub, we use a small number of carefully selected service providers (sub-processors). Each is bound by a data processing agreement in line with GDPR Article 28. Where data is transferred outside the EU/EEA, it is protected by the EU Standard Contractual Clauses (SCCs) or an equivalent safeguard.
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Lovable (Lovable Cloud), hosted on Amazon Web Services | Application hosting, database, user accounts and file storage | EU/EEA or under SCCs | Encryption in transit and at rest; database-level access control |
| Cloudflare | Website delivery, network security and DDoS protection | Global network, SCCs | TLS encryption; no storage of Hub content |
| Resend | Transactional email (invitations, sign-in codes, notifications) | EU/US, SCCs | Only recipient address and message content |
| Lovable AI Gateway (with underlying AI model providers) | AI-assisted document reading and in-app assistance | EU/US, SCCs | Customer data is not used to train AI models |
Drawings, contracts, invoices, photos and other files uploaded to The Hub are stored in private storage. They are never publicly accessible and can only be opened by authorised users through short-lived, signed links.
Business customers can request our data processing agreement (DPA) and will be notified before a new sub-processor is added. Contact us at info@swedishproject.com.
Project data entered in The Hub (such as project type, area, timelines and cost categories) may be used in anonymised and aggregated form to produce industry benchmarks. Before use, names, companies, contact details and individual figures are removed, and results are only shown when combined with data from several projects, so no person, company or project can be identified. This processing is based on our legitimate interest in improving our services. Enterprise customers may opt out by contacting us.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Under GDPR and applicable data protection laws, you have the right to:
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Below are our standard retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Contact form submissions | 2 years | Business correspondence |
| Service Hub account data | Duration of account + 2 years | Service delivery & legal obligations |
| Proposals and invoices | 7 years | Legal and accounting requirements |
| Work orders and field reports | 7 years | Legal and warranty obligations |
| Website analytics (if enabled) | 26 months | Website improvement |
When your data is no longer needed, we will securely delete or anonymize it. You may request earlier deletion of your personal data by contacting us, subject to any legal obligations that require us to retain certain information.
If you have any questions about this privacy policy or wish to exercise your rights, please contact us:
Swedish Project
Smedsbacksgatan 7
SE-115 39 Stockholm, Sweden
Email: info@swedishproject.com
Phone: +46 8 667 97 30
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.