Privacy PolicyGDPR compliant
Privacy Policy

Your privacy,
our priority.

We take care of your personal data and handle it in accordance with the General Data Protection Regulation (GDPR). This policy describes what we collect, why, and what rights you have.

Last updated: July 6, 2026
01

Data controller

Khoury Companies AB (org. no. 559581-4012) is the data controller for the processing of your personal data in connection with Khoury Creative Group.

Address: Sandgatan 13, 311 47 Falkenberg, Sweden.

Contact: john@khourycreativegroup.se

02

What data we collect

When you fill in the contact form we collect: name, email address, phone number (optional), company name (optional), project type, estimated budget and the message you write.

When you email us directly we collect your email address, name (if you provide it) and the contents of your communication.

03

Why we process your data

We process the data to respond to inquiries, send proposals and communicate around projects.

Legal basis per purpose: legitimate interest (Art. 6(1)(f)) for responding to inquiries from potential clients, performance of a contract (Art. 6(1)(b)) when a proposal leads to an engagement, and your consent (Art. 6(1)(a)) for analytics cookies.

04

How long we keep the data

Inquiries that do not lead to an engagement are kept for up to 24 months, then deleted.

For ongoing or completed engagements, relevant data is kept for as long as Swedish accounting law requires (seven years).

You can request deletion of your data at any time.

05

Who we share data with

We share your data with our email provider Google (Google Workspace), which handles the mailbox where your enquiry is received, and - if you submit the contact form - with Netlify Inc. (USA) which processes form submissions on our website. Google and Netlify are certified under EU-approved Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework, ensuring adequate protection for your data when transferred outside the EU/EEA.

If you have consented to analytics cookies, anonymised event data is shared with Google Ireland Ltd (Google Analytics 4). See our cookie policy for details.

We never sell your personal data and do not share it with third parties for marketing purposes.

06

Your rights

Under GDPR you have the right to access, rectify, delete or move your data, object to processing and withdraw consent. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

07

Security

We apply technical and organisational measures to protect your data against unauthorised access, loss or misuse.

08

Changes to this policy

We may update this policy. The latest version is always available on this page, with the date of the last update at the top.

09

Contact

Questions about this policy or the processing of your data? Email john@khourycreativegroup.se.