Privacy Policy — ACE MATES AB

Legal review notice: This policy has been prepared as a working baseline. ACE MATES AB should have this document reviewed by a qualified Swedish lawyer before the website goes live. Contact hello@acemates.se with questions.

Contents

Data controller
What data we collect
Lawful basis for processing
How we use your data
How long we keep it
Third-party processors
Your rights
Cookies and analytics
International transfers
Contact and complaints

1. Data controller

The data controller responsible for your personal data is:

ACE MATES AB
Helsingborg, Sweden
Org. nr. [pending registration]
Email: hello@acemates.se
Phone: +46 722 402 747

For data protection queries, contact Amit Sharma directly at amit_sh@acemates.org.

2. What data we collect

We collect the following categories of personal data:

Category	Examples	Source
Contact data	Name, email address, phone number	Provided by you via the contact form or direct email
Professional data	Company name, job title, industry	Provided by you via the contact form
Enquiry content	The message you send us	Provided by you via the contact form
Usage data	Pages visited, time on site, referral source	Collected automatically via Plausible Analytics (no personal identifiers)
Communication data	Email correspondence	Generated through our communication with you

We do not collect special category data (health, ethnicity, political opinions, etc.) unless you explicitly provide it in a message to us, and we do not process it for any purpose other than responding to your enquiry.

3. Lawful basis for processing

We rely on the following lawful bases under GDPR Article 6:

Processing activity	Lawful basis
Responding to enquiries submitted via the contact form	Article 6(1)(b) — necessary for steps prior to entering a contract, or Article 6(1)(f) — legitimate interests (responding to business enquiries)
Sending follow-up communications about our services	Article 6(1)(f) — legitimate interests, where you have contacted us about our services
Website analytics via Plausible	Article 6(1)(f) — legitimate interests (understanding how our website is used). Plausible collects no personal data and sets no cookies.
Legal and regulatory compliance	Article 6(1)(c) — legal obligation

Where we rely on legitimate interests, you have the right to object. See Section 7 for your rights.

4. How we use your data

We use your personal data for the following purposes:

Responding to your enquiry — this is the primary purpose for which contact form data is collected
Following up on business conversations you have initiated with us
Understanding which pages and content are most useful to visitors (analytics — no personal data involved)
Complying with legal and regulatory obligations

We do not use your data for automated decision-making or profiling. We do not add you to marketing lists without your explicit consent. We do not sell your data to any third party.

5. How long we keep your data

Data type	Retention period	Reason
Contact form submissions — no engagement	12 months	Sufficient to follow up and assess fit
Contact form submissions — active engagement	Duration of engagement + 3 years	Business relationship management
Client correspondence	5 years from end of engagement	Legal and contractual obligations
Website analytics	Indefinite — aggregated, no personal data	Plausible analytics contain no personal identifiers

At the end of the applicable retention period, personal data is securely deleted or anonymised.

6. Third-party processors

We share your data with the following categories of third-party processors, each under a Data Processing Agreement:

Processor	Purpose	Location
Email hosting provider	Receiving and storing contact form submissions and email correspondence	EU / EEA
Plausible Analytics	Website usage analytics. Plausible is privacy-preserving and collects no personal data, sets no cookies, and does not track individuals.	EU (Estonia)
Cal.com (if used)	Booking calendar for discovery calls	EU / USA — standard contractual clauses apply

We do not share your personal data with any other third parties except where required by law or as necessary to provide services you have explicitly requested.

7. Your rights

Under GDPR, you have the following rights regarding your personal data:

Right of access (Article 15) — You can request a copy of the personal data we hold about you.
Right to rectification (Article 16) — You can ask us to correct inaccurate data.
Right to erasure (Article 17) — You can ask us to delete your data, subject to legal retention requirements.
Right to restriction of processing (Article 18) — You can ask us to limit how we use your data in certain circumstances.
Right to data portability (Article 20) — You can ask for your data in a machine-readable format.
Right to object (Article 21) — You can object to processing based on legitimate interests. We will stop processing unless we have compelling legitimate grounds.
Right not to be subject to automated decision-making (Article 22) — We do not use automated decision-making or profiling.

To exercise any of these rights, contact us at hello@acemates.se. We will respond within 30 days. There is no charge for exercising your rights.

8. Cookies and analytics

This website uses Plausible Analytics, a privacy-preserving analytics tool. Plausible does not use cookies, does not collect personal data, does not track individuals across sessions or devices, and is fully compliant with GDPR, PECR, and CCPA without requiring a consent banner.

If we add any other analytics or tracking tools in the future, this policy will be updated and appropriate consent mechanisms will be implemented before deployment.

See our Cookie Policy for full details.

9. International data transfers

ACE MATES AB operates a blended Nordic-India delivery model. Where personal data is processed by team members or systems outside the EU/EEA, we ensure appropriate safeguards are in place under GDPR Chapter V, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements with all processors
Access controls limiting which team members can access personal data

Client personal data is never shared with third-country processors without your knowledge and appropriate contractual protections.

10. Contact and complaints

For any questions about this privacy policy or our data processing practices, contact:

ACE MATES AB
Email: hello@acemates.se
Phone: +46 722 402 747

If you are not satisfied with our response, you have the right to lodge a complaint with the Swedish supervisory authority:

Integritetsskyddsmyndigheten (IMY)
Website: www.imy.se
Email: imy@imy.se
Phone: +46 8 657 61 00

Last updated: May 2025. This policy will be reviewed annually and updated when our processing activities change.