Privacy

Privacy policy

1. Who is responsible for your personal data

Smart Design Stockholm AB (company reg. no. 559208-8313) is the data controller for the personal data we process about you. This means we are responsible for handling your data correctly and in line with the General Data Protection Regulation (GDPR).

Smart Design Stockholm AB
Tomtebogatan 16, 113 39 Stockholm, Sweden
info@smart-design.se

This policy describes what data we collect, why, how long we keep it and what rights you have.

2. What data we collect

We mainly collect data that you provide to us yourself. What data depends on how you are in contact with us.

When	Data	Source
You send an enquiry via the website	Name, email, phone, town, type of project, timeline, priorities, budget, images you upload and your message	You
You book a design meeting	Name, contact details, chosen time and whether the meeting is in the showroom or online	You
You receive a quote, sign an agreement and receive a delivery	Name, address, delivery address, drawings and measurements, order, agreement and payment and invoice details. Personal identity number when you sign with BankID	You
You shop in our online store	Name, email, phone, delivery and billing address and order. Card details are handled by the payment provider and never reach us	You
You contact customer service or make a complaint	Description of the matter, images and our correspondence	You
You subscribe to our newsletter	Email and, where applicable, name	You
You represent a company we work with or contact	Name, role, company and contact details	You, your company website or public company registers
You apply for a job with us	Name, contact details, CV, portfolio and anything else you include in your application	You
You visit our website	IP address, device and browser information and how you use the website	Cookies, in most cases only after your consent

We do not ask for sensitive personal data, such as health information. Please do not include such data in free-text fields.

3. Why we process the data

We only process data when we have a clear purpose and a legal basis for it.

Purpose	Legal basis
Respond to your enquiry, book a design meeting and prepare proposals and quotes	Steps prior to entering into a contract at your request
Deliver what you have ordered and handle service, warranty and complaints	Contract
Invoicing and bookkeeping	Legal obligation (Swedish Accounting Act)
Send newsletters	Consent, which you can withdraw at any time
Follow up on an enquiry that did not lead to a purchase	Legitimate interest in being able to get back to interested customers
Contact and work with companies, such as property developers and architects	Legitimate interest in developing our business
Handle your job application and recruitment	Legitimate interest in being able to recruit, and steps prior to an employment contract
Measure how the website is used and how our marketing performs	Consent via our cookie banner
Protect the website and our forms against spam and misuse	Legitimate interest in a secure website
Handle disputes and legal claims	Legitimate interest and legal obligation

Where we rely on legitimate interest, we have weighed our interest against yours. You always have the right to object, see section 8.

We only process personal identity numbers when you sign an agreement with BankID. This is needed to securely identify you as a party to the agreement.

4. How long we keep the data

We do not keep data longer than we need it. After that it is deleted or anonymised.

Data	How long
Enquiries that do not lead to a purchase	24 months after the last contact
Data needed for warranty and service: name, contact details, delivery address, drawings and order	As long as the warranty applies. We give a lifetime warranty on cabinetry, so we keep this data until you ask us to delete it
Other project material, such as inspiration images and correspondence	3 years after delivery
Job applications	24 months after the recruitment has ended, or until you ask us to delete them
Accounting records, such as invoices and agreements	7 years under the Swedish Accounting Act
Newsletter	Until you unsubscribe
Business contacts	Until you ask us to stop contacting you, or 24 months after the last contact
Cookies	According to our cookie policy

If you ask us to delete your data before the warranty period has ended, it may be harder for us to help you with warranty matters.

5. Who we share data with

We never sell your data. We only share it with suppliers who help us run our business, and only the data that is needed. These suppliers are data processors and may only use the data according to our instructions.

Recipient	Why
GoHighLevel (via ScandiClick)	Customer database, forms, meeting booking, email, text messages and newsletters
Google (Workspace)	Email, calendar and documents
GetAccept	Quotes and agreements with e-signing via BankID
Visma Spiris	Invoicing and bookkeeping
Hostinger	Website hosting
Shopify and payment providers	Online store, orders and payments
HubSpot	Customer database for business contacts
Google (Analytics, Ads, reCAPTCHA) and Meta	Web analytics, advertising and spam protection, analytics and advertising only after consent
Our kitchen manufacturers and carriers	Manufacturing and delivery of your order

For the Meta pixel, we and Meta are joint controllers for the collection on our website. Meta’s own further processing is described in Meta’s privacy policy.

We may also disclose data to authorities or advisers, such as auditors, when required by law or to defend our rights.

6. Transfers outside the EU/EEA

We primarily process data within the EU/EEA. Some of our suppliers, including GoHighLevel, Google, Meta, HubSpot and Shopify, may process data in the United States.

For such transfers we make sure there are safeguards under the GDPR. This may be the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Contact us if you want to know more about the safeguards for a specific supplier.

7. Cookies

We use cookies on the website. Necessary cookies are always stored, while cookies for statistics and marketing are only used if you accept them. You can change your choice at any time using the round cookie button at the bottom of the page. Read more in our cookie policy.

8. Your rights

You have the right to:

access the data we hold about you and receive a copy
have inaccurate data corrected
have data deleted, unless we are required by law to keep it, for example under the Swedish Accounting Act
restrict processing while we investigate an objection or correction
object to processing based on legitimate interest, and always to direct marketing
receive your data in a machine-readable format (data portability)
withdraw your consent at any time, without affecting processing that has already taken place

Contact us at info@smart-design.se to exercise your rights. We respond within one month. You can always unsubscribe from the newsletter via the link in every email.

9. Contact, complaints and changes

Do you have questions about how we handle your personal data? Contact us at info@smart-design.se or Smart Design Stockholm AB, Tomtebogatan 16, 113 39 Stockholm, Sweden.

If you are unhappy with how we handle your data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

We may update this policy, for example if we start using new services. The latest version is always available on our website.

Last updated: 4 November 2026