Privacy policy

Who is responsible

ZeroStack is the data controller for everything described here. For questions, or to exercise any of the rights below, email [email protected].

What we collect

Only what you send us, plus the technical information any website visit produces.

• Contact form: name, email address, phone number and your message.
• Quote request: name, email address, phone number, company name, industry, the choices you made in the site builder, and any notes you added.
• Visitor statistics, only if you consented: which pages are viewed, approximate location, device, and how you found us.
• Technical data: IP address and browser information in the web server logs.

Why, and on what legal basis

Each purpose has its own basis under the GDPR.

• To answer your enquiry and prepare a quote — legitimate interest and steps taken prior to a possible contract.
• To understand how the site is used and what needs improving — your consent, which you can withdraw at any time.
• For operation and security, such as seeing when something breaks or the site is attacked — legitimate interest.

Who we share it with

We never sell personal data and never pass it on for marketing. These providers process data on our behalf, and only on our instructions:

• Hostinger — runs the website and the database where form submissions are stored.
• Cloudflare — all traffic to zerostack.se passes through the Cloudflare network, which therefore handles IP addresses for security and performance.
• Resend — sends the confirmation email to you and the notification to us.
• Google Ireland Limited — Google Analytics, only if you consented. Data may be transferred to the United States under the terms of the EU adequacy decision.

How long we keep it

No longer than needed.

• Enquiries and messages: for as long as the matter is open, then at most 24 months so we can follow up. You can ask us to delete them sooner.
• Visitor statistics: at most 14 months in Google Analytics, after which they are deleted automatically.
• Server logs: a short period at our provider, as part of normal operation.

Your rights

At any time you may:

• Ask what data we hold about you, and receive a copy.
• Have incorrect data corrected.
• Have your data erased.
• Object to our processing, and ask for it to be restricted.
• Withdraw your consent to visitor statistics — this does not affect what was already collected.
• Complain to the Swedish Authority for Privacy Protection (IMY, imy.se) if you think we have got it wrong.

Cookies

The site works entirely without cookies. The only one that ever appears is Google Analytics, and it is not loaded at all until you say yes — choose no and Google is never contacted. Your answer is stored locally in your browser, not as a cookie, and is never sent to us or anyone else.