Privacy Policy

Last updated: 18 July 2026

1. Data controller

UpMe AB, company registration number 559563-7280, Stockholm, Sweden, is the data controller for the processing described in this policy. Questions about personal data can be sent to info@upme.se.

2. Personal data we process

When you contact UpMe, we may process your name, email address, telephone number, organisation, role or contact category, the content of your message and subsequent correspondence. If a business relationship is established, we may also process contractual, invoicing and business contact information.

3. Why we process personal data and our legal basis

We process personal data to respond to enquiries, assess and administer potential assignments, maintain business relationships and communicate about agreed services. The processing is normally based on UpMe’s legitimate interest in managing relevant business enquiries and relationships, or on steps taken at your request before entering into a contract and the performance of a contract. We also process information where necessary to comply with legal obligations.

UpMe does not use personal data for automated decision-making or profiling and does not sell personal data.

4. How we receive information

Information is normally provided directly by you through email, telephone, SMS, the website’s contact form, meetings or other business correspondence. The current form opens your email application; the website itself does not store the submitted form information.

5. Recipients and service providers

Personal data may be processed by suppliers that provide IT, email, hosting, administration or other necessary support services on UpMe’s behalf. Such suppliers may only process data according to UpMe’s instructions and applicable data protection requirements. Information may also be disclosed where required by law or a binding authority decision.

6. Transfers outside the EU/EEA

If a service provider processes personal data outside the EU/EEA, UpMe will ensure that an appropriate transfer mechanism is used, such as an adequacy decision or the European Commission’s standard contractual clauses, where required.

7. Retention

Personal data is retained only for as long as it is needed for the relevant purpose. Enquiries that do not lead to an assignment are normally deleted no later than 12 months after the last meaningful contact, unless there is a justified need to retain them longer. Information connected to agreements, invoicing or accounting is retained for the period required by applicable law or necessary to establish, exercise or defend legal claims.

8. Your rights

Depending on the circumstances, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Contact info@upme.se to exercise your rights. UpMe may need to verify your identity before responding.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

9. Sensitive information

Please do not send health information or other sensitive personal data in an initial enquiry, through the contact form or by SMS. Where an assignment requires specific processing of personal data, further information and contractual arrangements may be provided before the work begins.

10. Cookies and website technology

The website currently uses no analytics or marketing cookies. If such technology is introduced, this information and any required consent mechanism will be updated before it is used.

11. Changes to this policy

UpMe may update this policy when services, legal requirements or data processing practices change. The latest version is always published on this page.