Privacy notice

Version 2 · 26 September 2026

In short. This website sets no cookies and runs no analytics. If you use the contact form, Shift Everywhere AB uses what you enter for one thing: to answer you. Nothing is used for marketing, and nothing is shared beyond the processors that host the site and deliver the email.

Who is responsible for your data

Shift Everywhere AB (corporate identity number 559289-6723) is the controller for the personal data described here.

Contact for privacy questions: [email protected]

What we collect

• If you use the contact form: the name, email address, and message you enter. They are delivered to us as an email and are not stored on this website.
• The web server keeps ordinary access logs — the requesting IP address, the requested path without query strings, the response status, and the response size — with no referrer or browser information.

There are no accounts, and we do not combine anything you submit with other information or use it to profile you.

Why, and on what legal basis

We process what you send through the contact form only to answer you. The legal basis is our legitimate interest in responding to messages addressed to us (Article 6(1)(f) of the General Data Protection Regulation), or, where your enquiry concerns working with us, steps taken at your request prior to a contract (Article 6(1)(b)). Server logs and the bot check exist to deliver the site and protect it from abuse — also a legitimate interest.

Who handles the data for us

We use these processors, each bound by a data processing agreement:

• Hostinger International Ltd, a Cyprus company, hosts this website on servers in Frankfurt, Germany.
• Plus Five Five, Inc., trading as Resend, delivers the contact-form email, sent from servers in Ireland (AWS eu-west-1). The company is established in the United States, so some of its processing takes place there. Those transfers rest on the EU–US Data Privacy Framework, in which the company participates, and on the standard contractual clauses in our agreement with it.
• Cloudflare, Inc. provides the Turnstile bot check on the contact form. It processes technical data (such as your IP address and browser signals) in your browser to tell people from bots, for that purpose only. The company is established in the United States and participates in the EU–US Data Privacy Framework.

We do not sell your data, and we do not share it with anyone else.

How long we keep it

• Contact-form messages arrive in our mailbox as ordinary email. We keep them as long as needed to handle your enquiry and anything that follows from it, then delete them.
• Server logs are short-lived and are deleted on a routine schedule.

Cookies and analytics

This website sets no cookies and uses no analytics or tracking. Fonts and images are served from the same domain as the pages. The one third-party resource is the Turnstile script on the contact page, loaded from challenges.cloudflare.com for the bot check described above.

Your rights

You can at any time:

• ask for access to the data we hold about you, or have it corrected or erased;
• object to processing based on our legitimate interest;
• ask us to restrict processing, or to receive your data in a portable format.

If you believe we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

Changes to this notice

If we change how we handle your data, we will update this notice and its version number.