Privacy Policy

Who is responsible

Management of Technology Consulting Sweden AB (company registration number 556784-5010), operated by John Rickne under the Jidder brand, is the data controller for the inquiry information you submit through these forms. We decide why the data is collected and how it is used so we can review your request, reply to you, and manage potential client work.

What we collect

• Contact details such as names, email addresses and phone numbers
• Inquiry details such as dates, venue, budget, package choice, message text and inspiration links
• Technical anti-spam signals such as verification results and basic request metadata

Why we process it

We process this data to review your inquiry, reply to you, prepare next steps before any contract is signed, and keep a basic internal record of incoming requests.

Our legal bases for processing this data under the GDPR (Article 6) are: taking pre-contractual steps at your request (processing and replying to your inquiries), our legitimate interest (managing internal records, spam filtering, and assessing our business performance), and complying with legal obligations (such as retention required by Swedish accounting and tax laws once you become a client).

Where your data goes and international transfers

While our primary database is in the EU, some of the service providers we use (Supabase, Google, Discord, Cloudflare) are US-based companies. This means limited technical processing or support may involve transferring data outside the EU/EEA. We ensure these transfers are strictly safeguarded under Chapter V of the GDPR, primarily by relying on the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).

• Supabase stores the primary submission data on servers located within the EU
• Cloudflare Turnstile processes technical signals (like IP address) strictly for anti-spam verification
• Google Docs and Google Sheets store the operational copy we use to review inquiries
• Discord receives a minimal notification with form type, date, budget, and a Google Doc link. We intentionally avoid sending names, email addresses, phone numbers, or traceable IDs to Discord

How long we keep it

We automatically delete spam submissions after 30 days, cancelled inquiries after 180 days, and inactive inquiry records in workflow states such as new, reviewed, contacted or scheduled after 12 months from their latest activity.

Confirmed or completed client work is excluded from automatic deletion in this inquiry system until we have reviewed whether contractual, delivery, legal or accounting obligations require us to keep it longer.

Your rights

You can ask for access to the data we hold about you, request correction of inaccurate information, or ask us to delete your inquiry data where applicable.

Under the GDPR, you also have the right to restrict our processing of your data, object to our processing, and the right to data portability (receiving your data in a structured, commonly used and machine-readable format).

How to contact us or lodge a complaint

For privacy questions, access requests, or deletion requests, contact us at jidder.support@gmail.com. Please include enough information for us to locate your inquiry safely.

If you believe we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).