1. Who We Are

Aetheron is a Swedish creative technology agency based in Stockholm. We build software, original web products, and produce photography and video content. This Privacy Policy explains how we handle personal data in connection with our website and services.

For privacy-related questions, contact us at hej@aetheron.se.

2. Data We Collect

We collect personal data only when necessary and only through fair means. This includes:

Contact information — name, email address, and message content when you contact us via email or our contact form.
Usage data — anonymised analytics such as page views and session duration via privacy-respecting tools. We do not use Google Analytics.
Project information — data you share with us in the course of a client engagement (briefs, assets, feedback).

3. How We Use Your Data

We use collected data solely to:

Respond to your enquiries and provide requested services
Manage and deliver client projects
Improve our website and services
Comply with legal obligations

We do not sell, rent, or trade your personal data to any third party.

4. Legal Basis for Processing

We process personal data under the following legal bases as defined by GDPR (EU 2016/679):

Contractual necessity — to fulfil our obligations under a client agreement
Legitimate interests — to respond to enquiries and improve our services
Consent — where you have explicitly agreed, e.g., for marketing communications
Legal obligation — where required by applicable law

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Contact enquiries are kept for up to 24 months. Client project data is retained for the duration of the project and up to 5 years thereafter for legal and accounting purposes.

6. Third-Party Services

Our website is hosted on Vercel. Vercel may process certain technical data (IP addresses, request logs) as part of its infrastructure. We use Cal.com for booking, which has its own privacy policy. We recommend reviewing those policies independently.

7. Cookies

Our website uses only essential functional cookies required for the site to operate. We do not use tracking or advertising cookies. No cookie consent banner is displayed because we do not use non-essential cookies.

8. Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights under GDPR:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your data ("right to be forgotten")
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interests
Restriction — request limited processing in certain circumstances

To exercise any of these rights, email us at hej@aetheron.se. We will respond within 30 days. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data transmission is encrypted via HTTPS/TLS.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website after changes are posted constitutes acceptance of the updated policy.