This Privacy Policy explains how SKULPT collects and processes personal data when you use our website, contact us, complete our Brand Health Check, subscribe to our newsletter, or apply to work with us.
SKULPT is based in Stockholm, Sweden and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish law. We do not sell your personal data.
Data Controller
SKULPT BRAND AB, Sweden
Organisation number: 559535-4084
Email: contact@skulptbrand.com
Information We Collect
Depending on how you interact with SKULPT, we may collect:
- Contact and company information: name, email address, company name, company website, pitch deck or LinkedIn profile.
- Business information: company stage, challenges, investment level and other information submitted through our forms or correspondence.
- Brand Health Check information: your contact details, responses and generated results.
- Newsletter information: your email address, subscription status and related email interactions.
- Recruitment information: information you choose to provide when contacting us about working with SKULPT, such as your CV, portfolio or application.
- Technical information: IP address, browser and device information, website usage data and security or server logs.
How and Why We Use Your Information
We process personal data to:
- respond to inquiries and discuss potential projects;
- provide our Brand Health Check and related communications;
- send our newsletter where you have chosen to subscribe;
- process applications and recruitment inquiries;
- operate, secure and improve our website; and
- comply with applicable legal requirements.
Depending on the circumstances, we rely on:
- steps taken before entering into a contract, for inquiries about our services;
- consent, including for newsletter subscriptions and non-essential cookies or analytics where required;
- legitimate interests, such as operating our business, responding to business inquiries, improving our services and protecting our website; and
- legal obligations, where processing is required by law.
You can withdraw consent at any time where we rely on consent.
Brand Health Check
When you complete our Brand Health Check, we use the information you provide to generate your assessment, send you the result and understand your stated brand needs. Your Brand Health Check information may also be retained to support relevant follow-up communications and our relationship with you. If you separately choose to subscribe to marketing communications, we may also use your contact information for that purpose. The Brand Health Check does not make decisions about you that produce legal or similarly significant effects.
Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.
As a general rule:
- business inquiries and Brand Health Check information may be retained while reasonably relevant to a potential or existing business relationship;
- newsletter information is retained while you remain subscribed, with limited information retained where necessary to respect an unsubscribe request;
- recruitment information is normally retained for up to 6 months after the relevant recruitment process ends; and
- technical and analytics information is retained according to the relevant service settings and only as long as reasonably necessary.
Certain information may be retained longer where required by law or necessary to establish, exercise or defend legal claims.
Service Providers
We use trusted service providers to operate our website and business. These may include:
- Hostinger — website hosting;
- Vercel — website hosting;
- Supabase — Circle member accounts and data;
- Make.com — workflow automation and form routing;
- Google Workspace — email and business communications;
- Brevo — newsletter and email marketing;
- Google Analytics — website analytics.
These providers may process personal data on our behalf in accordance with their contractual and data-protection obligations. We may also disclose personal data where required by law or a lawful request from an authority.
International Transfers
Some of our service providers may process personal data outside Sweden or the European Economic Area (EEA). Where required, international transfers are protected using mechanisms recognised under the GDPR, such as European Commission adequacy decisions, the EU-U.S. Data Privacy Framework for eligible organisations, Standard Contractual Clauses, or other applicable safeguards. You can contact us for further information about safeguards relating to a particular transfer.
Your Rights
Under the GDPR you may have the right to:
- access your personal data;
- correct inaccurate information;
- request deletion or restriction of processing;
- object to certain processing;
- receive certain information in a portable format; and
- withdraw consent where processing is based on consent.
You may object to the use of your personal data for direct marketing at any time. To exercise your rights, contact contact@skulptbrand.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent data-protection authority.
Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No internet-based system can be guaranteed to be completely secure.
Third-Party Links
Our website may contain links to third-party websites or services. Their processing of personal data is governed by their own privacy policies.
Changes
We may update this Privacy Policy when our website, services or legal obligations change. The latest version will always be published on this page.
Contact
For questions about this Privacy Policy or how SKULPT processes personal data, contact:
contact@skulptbrand.com