Privacy policy
How we handle your personal data under the EU General Data Protection Regulation (GDPR).
Last updated: 30 August 2026
1. Data controller
SHEBANG AB is the data controller for the processing of your personal data. If you have questions about this policy or your personal data, you can contact us at hello@shebang.se.
2. What data we collect
We process data you provide to us, for example via our contact forms, email or meetings:
- Name
- Email address
- Phone number (if provided)
- Company and role (if provided)
- Content of messages you send us
- Technical information about your visit (see our cookie policy)
3. Why we process the data
We process your personal data for the following purposes:
- Responding to enquiries and communicating with you
- Administering agreements and ongoing engagements
- Sending relevant information about our services when you've asked for it
- Fulfilling legal obligations, for example bookkeeping
- Recruitment, when you apply for a role with us
4. Legal basis
We process personal data based on consent (e.g. when you fill in a form and accept this policy), performance of a contract, legal obligation or legitimate interest. We never sell your personal data to third parties.
5. How long we retain the data
Data from contact forms is kept as long as needed to respond to your enquiry, but no longer than 24 months if no business relationship is established. Data linked to agreements is kept for the duration of the agreement and thereafter as long as accounting law requires. Application documents are deleted 24 months after the recruitment process ends.
6. Who we share the data with
We only share your personal data with third parties when necessary to deliver our services, for example with IT vendors, hosting partners and communication tools acting as our data processors. All processors are bound by data processing agreements and primarily process data within the EU/EEA.
7. Your rights
Under GDPR you have the right to:
- Request an extract of the data we hold about you
- Request correction of inaccurate data
- Request erasure ("the right to be forgotten")
- Object to or restrict the processing
- Withdraw consent
- Request data portability
- Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
Send your request to hello@shebang.se.
8. Security
We work with technical and organisational measures to protect your data against unauthorised access, loss and improper processing, for example encryption in transit, least-privilege access control and logging.
9. Changes to this policy
We may update this privacy policy. In case of significant changes, we'll clearly inform you on the website. The date of the latest update is shown at the top of the page.
