SKULPT
[next]

Privacy Policy

This Privacy Policy explains how SKULPT collects and processes personal data when you use our website, contact us, complete our Brand Health Check, subscribe to our newsletter, or apply to work with us.

SKULPT is based in Stockholm, Sweden and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish law. We do not sell your personal data.

Data Controller

SKULPT BRAND AB, Sweden
Organisation number: 559535-4084
Email: contact@skulptbrand.com

Information We Collect

Depending on how you interact with SKULPT, we may collect:

  • Contact and company information: name, email address, company name, company website, pitch deck or LinkedIn profile.
  • Business information: company stage, challenges, investment level and other information submitted through our forms or correspondence.
  • Brand Health Check information: your contact details, responses and generated results.
  • Newsletter information: your email address, subscription status and related email interactions.
  • Recruitment information: information you choose to provide when contacting us about working with SKULPT, such as your CV, portfolio or application.
  • Technical information: IP address, browser and device information, website usage data and security or server logs.

How and Why We Use Your Information

We process personal data to:

  • respond to inquiries and discuss potential projects;
  • provide our Brand Health Check and related communications;
  • send our newsletter where you have chosen to subscribe;
  • process applications and recruitment inquiries;
  • operate, secure and improve our website; and
  • comply with applicable legal requirements.

Depending on the circumstances, we rely on:

  • steps taken before entering into a contract, for inquiries about our services;
  • consent, including for newsletter subscriptions and non-essential cookies or analytics where required;
  • legitimate interests, such as operating our business, responding to business inquiries, improving our services and protecting our website; and
  • legal obligations, where processing is required by law.

You can withdraw consent at any time where we rely on consent.

Newsletter and Marketing

If you choose to subscribe to SKULPT’s newsletter, we use your contact information to send you news, insights and occasional marketing communications. We use Brevo to manage newsletter subscriptions and email distribution. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting contact@skulptbrand.com. Unsubscribing does not affect any processing carried out before your consent was withdrawn.

Brand Health Check

When you complete our Brand Health Check, we use the information you provide to generate your assessment, send you the result and understand your stated brand needs. Your Brand Health Check information may also be retained to support relevant follow-up communications and our relationship with you. If you separately choose to subscribe to marketing communications, we may also use your contact information for that purpose. The Brand Health Check does not make decisions about you that produce legal or similarly significant effects.

Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.

As a general rule:

  • business inquiries and Brand Health Check information may be retained while reasonably relevant to a potential or existing business relationship;
  • newsletter information is retained while you remain subscribed, with limited information retained where necessary to respect an unsubscribe request;
  • recruitment information is normally retained for up to 6 months after the relevant recruitment process ends; and
  • technical and analytics information is retained according to the relevant service settings and only as long as reasonably necessary.

Certain information may be retained longer where required by law or necessary to establish, exercise or defend legal claims.

Service Providers

We use trusted service providers to operate our website and business. These may include:

  • Hostinger — website hosting;
  • Vercel — website hosting;
  • Supabase — Circle member accounts and data;
  • Make.com — workflow automation and form routing;
  • Google Workspace — email and business communications;
  • Brevo — newsletter and email marketing;
  • Google Analytics — website analytics.

These providers may process personal data on our behalf in accordance with their contractual and data-protection obligations. We may also disclose personal data where required by law or a lawful request from an authority.

International Transfers

Some of our service providers may process personal data outside Sweden or the European Economic Area (EEA). Where required, international transfers are protected using mechanisms recognised under the GDPR, such as European Commission adequacy decisions, the EU-U.S. Data Privacy Framework for eligible organisations, Standard Contractual Clauses, or other applicable safeguards. You can contact us for further information about safeguards relating to a particular transfer.

Cookies and Analytics

We use cookies and similar technologies where necessary to operate and secure our website. We may also use analytics services such as Google Analytics to understand how visitors use the website. Where consent is required, non-essential analytics or similar technologies will only be activated after you have made your choice. You can reject or withdraw consent to non-essential cookies and analytics at any time through our cookie settings. Further information about the technologies used on the website is available through our cookie settings or Cookie Policy.

Your Rights

Under the GDPR you may have the right to:

  • access your personal data;
  • correct inaccurate information;
  • request deletion or restriction of processing;
  • object to certain processing;
  • receive certain information in a portable format; and
  • withdraw consent where processing is based on consent.

You may object to the use of your personal data for direct marketing at any time. To exercise your rights, contact contact@skulptbrand.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent data-protection authority.

Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No internet-based system can be guaranteed to be completely secure.

Changes

We may update this Privacy Policy when our website, services or legal obligations change. The latest version will always be published on this page.

Contact

For questions about this Privacy Policy or how SKULPT processes personal data, contact:
contact@skulptbrand.com