Privacy Policy

Last updated: 11 August 2026

1. Data controller

UpMe AB, company registration number 559563-7280, Stockholm, is the data controller for the processing described in this policy. Questions about personal data can be sent to info@upme.se.

2. Personal data we process

When you contact UpMe, we may process your name, email address, telephone number, organisation, role or contact category, the content of your message and subsequent correspondence. If a business relationship is established, we may also process contract, invoicing and business contact details.

3. Purposes and legal basis

We process personal data to respond to enquiries, assess and administer potential assignments, maintain business relationships and communicate about agreed services. Processing is normally based on UpMe’s legitimate interest in handling relevant business enquiries and relationships, or on steps taken at your request before entering into a contract and for the performance of a contract. Data is also processed where required to comply with legal obligations.

UpMe does not use personal data for automated decision-making or profiling and does not sell personal data.

4. How data is collected

The data is normally provided directly by you through email, telephone, SMS, the website contact form, meetings or other business correspondence. When you use the contact form, the data is transmitted through the website’s technical service providers to UpMe so that we can receive and respond to your enquiry.

5. Recipients and service providers

Personal data may be processed by service providers supplying IT, email, web hosting, form, spam and security services, administration or other necessary support services on UpMe’s behalf. Such providers may only process data in accordance with UpMe’s instructions and applicable data protection requirements. Data may also be disclosed where required by law or a binding decision from a public authority.

6. Transfers outside the EU/EEA

If a service provider processes personal data outside the EU/EEA, UpMe ensures that a permitted transfer mechanism is used, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, where required.

7. Retention period

Personal data is retained only for as long as it is needed for the relevant purpose. Enquiries that do not lead to an assignment are normally deleted no later than 12 months after the last meaningful contact, unless there is a justified need for longer retention. Data relating to contracts, invoicing or accounting is retained for the period required by applicable law or as needed to establish, exercise or defend legal claims.

8. Your rights

Depending on the circumstances, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Contact info@upme.se to exercise your rights. UpMe may need to verify your identity before handling a request.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

9. Sensitive data

Do not send health information or other sensitive personal data in an initial enquiry, through the contact form or by SMS. If an assignment requires specific processing of personal data, further information and any relevant contractual terms will be provided before the work begins.

10. Cookies and web technology

The website currently uses no analytics or marketing cookies. If such technology is introduced, this information and any required consent solution will be updated before it is used.

11. Changes to this policy

UpMe may update this policy when services, legal requirements or the processing of personal data change. The latest version will always be published on this page.