Privacy

Privacy policy

How SHEBANG handles your personal data under the EU General Data Protection Regulation (GDPR).

Last updated: 5 October 2026

1. What information do we collect?

When you fill in a form on our website, contact us or use our services, we may collect the following information:

  • Name
  • Email address
  • Phone number
  • Company name
  • Role and subject
  • Other information you voluntarily provide in message fields

2. What do we use the data for?

We process your personal data to:

  • Contact you in connection with your enquiry
  • Give you information about our services
  • Improve our website and services
  • Follow up after contact
  • Administer agreements and ongoing engagements
  • Recruitment, when you apply for a role with us

We never share your personal data with third parties for marketing purposes.

3. Use of third-party tools

To manage contact forms, communication and parts of our marketing, we use HubSpot, an established CRM and marketing automation tool. This means personal data you provide via forms on our website may be processed and stored in HubSpot. All data is handled in accordance with GDPR, and HubSpot is certified under the EU-U.S. Data Privacy Framework and offers data protection and deletion features under applicable laws.

We never use HubSpot (or any other third party) to sell or share your data further.

Our website is built and hosted with Lovable. Certain technical information, including IP addresses and usage data, may be processed by Lovable for hosting, security solutions and other technical functions. All such processing is carried out in accordance with GDPR.

4. Legal basis for processing

All processing of personal data is carried out under a valid legal basis, such as consent, contract or legitimate interest.

5. Retention period

We only keep your data as long as necessary for the purpose, or as required by law. Data from contact forms is kept as long as needed to respond to your enquiry, but no longer than 24 months if no business relationship is established. Data linked to agreements is kept for the duration of the agreement and thereafter as long as accounting law requires. Application documents are deleted 24 months after the recruitment process ends.

6. Your rights

Under GDPR you have the right to:

  • Request access to your personal data
  • Have inaccurate data corrected
  • Request erasure of data ("the right to be forgotten")
  • Object to processing or request restriction
  • Have your data transferred (data portability)
  • Withdraw consent
  • Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

Contact us at hello@shebang.se if you wish to exercise any of these rights.

7. Cookies

We use cookies to improve the user experience on our website. Read more in our cookie policy.

8. Communication and marketing

When you fill in a form on our website, we use your contact details to respond to your enquiry and, if you give your consent, to send relevant information about our services. You can always unsubscribe from our emails via a link in the message. We treat your data with the utmost respect and in accordance with our privacy policy.

In some cases we base our communication on legitimate interest, for example if you are already a customer. We then only send relevant information related to the services we have delivered.

9. Contact details

Have questions about how we handle personal data? Get in touch at:

SHEBANG AB

Kungsgatan 60

111 22 Stockholm

Phone: 08-773 23 00

Email: hello@shebang.se

Org.no: 559008-9230