Privacy policy
Short version: this website does not track you. No scripts are loaded from anywhere else, and nothing is measured. If you fill in a form, what you wrote is sent through a service called Web3Forms – described in full below.
Who is responsible
Handbyggt, Stockholm, is responsible for the personal data processed here. Questions go to info@handbyggt.se.
No measurement and no tracking
There is no analytics tool on this website. No Google Analytics, no Facebook pixel, no advertising scripts and no embedded services that follow you on to other sites. I keep no record of which pages you visited or how long you stayed.
The typefaces are served from my own server rather than fetched from Google. That means your IP address is not passed to any third party when the page loads. It is unusual, and it is deliberate – a site that promises not to track you should not quietly do it in the background anyway.
The contact form
When you press send, the details go to Web3Forms, a service that receives forms and forwards them as email. From there they land in my inbox. Web3Forms is therefore a recipient of what you write, and processes it on my behalf in order to deliver the message.
Nothing is stored on the website’s own server – it consists of finished files and has no database. And the service loads no script on the page: the call happens the moment you press send, not when you visit the site.
With the service level I use, Web3Forms keeps submitted forms for a maximum of 30 days and then deletes them automatically. The service’s server logs, which may contain personal data, are deleted regularly.
What I receive is what you wrote: name, email address, your message, and possibly company, phone and website address. It is used to answer your enquiry and to work with you if it becomes a project. The legal basis is legitimate interest, and for a project, performance of a contract.
Enquiries that lead nowhere are deleted after a year. If it becomes a project, correspondence is kept for as long as the work continues, and thereafter for as long as Swedish accounting law requires.
My email runs on Google Workspace. Both the forms, which Web3Forms forwards, and emails you send directly therefore arrive at Google, which processes the content on my behalf – as is the case for most companies you email. The website itself never calls Google.
The brief before a proposal
If you would like a proposal, you can fill in the brief for your website in a form. It travels the same way as the contact form: through Web3Forms to my inbox at Google Workspace. Images and logos are instead sent by email straight to the same inbox.
The brief contains personal data: the name, email address and possibly phone number of the person who approves the site, and names of people who have given reviews or appear in photos. If you are a sole trader, the business details – name, address and phone – are also personal data about you.
The information is used to prepare the proposal and build the site. The legal basis is taking steps before entering into a contract and performing it. For people who appear in reviews or photos, the basis is legitimate interest, and you confirm that they have agreed. If no project follows, the brief is deleted after a year, like other enquiries. If it becomes a project, it is kept for as long as the work continues and deleted afterwards, except for what Swedish accounting law requires me to keep.
Calls and text messages
If you call or text me, I receive your phone number and what you say or write. It is used to answer you and to work with you if it becomes a project. The legal basis is the same as for the contact form: legitimate interest, and for a project, performance of a contract.
The phone is not backed up to any cloud service. If you leave a voicemail, it is stored by my mobile operator until I have listened to it, and then I delete it. Calls and texts that lead nowhere are deleted after a year, like other enquiries. If it becomes a project, what is needed is kept for as long as the work continues and deleted afterwards, except for what Swedish accounting law requires me to keep.
Nothing is stored in your browser
The site stores nothing in your browser – no cookies and nothing else. That is also why there is no cookie notice to dismiss.
The host
The website is hosted by Cloudflare, which like every web server records IP address, timestamp and which file was requested in its logs. That is technically necessary to deliver the page and to stop attacks. I do not use those logs to follow visitors, and they are not combined with anything else.
Transfers outside the EU
Cloudflare and Google are US companies and may process data in the United States. Both participate in the EU–US Data Privacy Framework, which the European Commission has decided provides an adequate level of protection.
Web3Forms is run by Web3Creative in India and has its servers in, among other places, the United States. Web3Forms does not participate in the Data Privacy Framework; transfers instead rely on the European Commission’s standard contractual clauses in Web3Forms’ data processing agreement, which is part of its terms.
Your rights
You have the right to know what data I hold about you, to have it corrected or erased, and to object to the processing. Write to info@handbyggt.se and I will answer as soon as I can.
If you believe something is handled wrongly you can contact the Swedish Authority for Privacy Protection, imy.se.
Changes
If anything changes in how data is handled, this page is updated. Last changed in October 2026.