PRIVACY
Privacy Policy
This policy explains how personal data is processed when you contact VästWebb Studio through the website’s contact form or in subsequent communications.
1. Introduction
Your privacy matters. Personal data is processed only for clear purposes connected with your enquiry, a potential project and obligations that may follow from a client relationship.
2. Data controller
Ahmad al Salebi, operating under the name VästWebb Studio, is the controller responsible for processing your personal data. VästWebb Studio is a trading name and not a separate legal entity.
3. Data we collect
The contact form processes the information you provide:
- Name
- Email address
- Telephone number, if provided
- Company name, if provided
- Selected service
- The content of your message
- Content entered in the form’s hidden protection field, if any, to prevent automated abuse
4. Purposes of processing
- Responding to contact requests
- Discussing a potential project
- Preparing a quote
- Managing service-related communications
- Protecting the form from abuse or unauthorised use when needed
5. Legal basis
- Taking steps at your request before entering into a possible contract, under GDPR Article 6(1)(b).
- The legitimate interest in responding to enquiries, managing communications and protecting the contact form, under Article 6(1)(f).
- Compliance with a legal obligation where certain information must be retained by law, under Article 6(1)(c).
6. Retention period
Enquiries that do not result in a business relationship are retained for up to 12 months from the last communication and are then deleted.
If you become a client, information required for contracts, invoicing and legal obligations may be retained for as long as applicable law requires. Data may also need to be kept longer where necessary to establish, exercise or defend legal claims.
7. Recipients and processors
Resend is used as the technical email delivery service for form messages. Data may also be processed by technical operations and email providers acting on behalf of the controller and only under relevant instructions.
Personal data is not sold or used for marketing. It is shared with public authorities only where required by law.
8. Transfers outside the EU/EEA
Some service providers may process personal data outside the EU/EEA. Where such a transfer is subject to the GDPR, applicable legal safeguards are used, such as a valid adequacy decision or the European Commission’s Standard Contractual Clauses, where relevant.
9. Your rights
Depending on the circumstances, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request erasure where the right applies
- Request restriction of processing
- Object to processing based on legitimate interests
- Request data portability where the right applies
- Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
10. Complaints to IMY
If you believe your personal data is being processed incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
11. Contact
Contact the controller if you have questions about the processing or wish to exercise any of your rights:
12. Last updated
20 August 2026