Legal
Privacy Policy
Last updated: 4 June 2026
This policy explains how Honesty (“we”, “us”) collects, uses and protects personal data when you visit our website, contact us, or use our client portal. We are committed to processing personal data lawfully, transparently and only where we have a valid reason to do so under the EU General Data Protection Regulation (GDPR).
1. Who we are
Honesty is the data controller for the personal data described in this policy. We are based in Stockholm, Sweden. For any privacy matter, including the requests described below, you can reach us at privacy@honesty.se.
2. What we collect and why
We keep data collection to a minimum. We process:
- Enquiries. When you use our contact form we collect the details you provide — your name, your email address or phone number, your message, and (optionally) a budget range — so we can respond to and follow up on your enquiry.
- Account & portal data. If you are invited to the client portal, we process your name, email address, password (stored only in hashed form by our authentication provider), profile picture and role, so we can give you secure access.
- Technical data. Like most websites, our hosting provider automatically logs limited technical information (such as IP address and browser type) to deliver the site securely and prevent abuse.
We do not use advertising cookies, tracking pixels, or third-party analytics, and we do not sell personal data or use it for automated decision-making or profiling.
3. Legal bases
We rely on the following legal bases under Article 6 GDPR:
- Taking steps at your request / contract (Art. 6(1)(b)) — to respond to your enquiry and to provide the portal to account holders.
- Legitimate interests (Art. 6(1)(f)) — to keep our site and services secure and working correctly.
- Consent (Art. 6(1)(a)) — for any optional functional storage, which you can give or withdraw at any time via our Cookie Policy.
4. Cookies and local storage
We use only strictly necessary and optional functional cookies/storage — no tracking. Each one is listed, with its purpose and lifetime, in our Cookie Policy, where you can also change your choices.
5. Service providers
We use a small number of trusted processors who act on our instructions under data-processing agreements:
- Vercel — website hosting and content delivery.
- Supabase — database and authentication (storing enquiry and account data).
- Resend — delivering the email notification generated by your enquiry to our team.
6. International transfers
Some of these providers may process data outside the EU/EEA. Where that happens, the transfer is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses. You can contact us for more detail.
7. How long we keep data
We keep enquiry data only as long as needed to deal with your request and for a reasonable period afterwards in case you follow up. Enquiries are automatically deleted after 24 months, and sooner on request. Account data is kept for as long as your portal account is active and removed on request or when the account is closed. Technical logs are short-lived.
8. Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time (without affecting processing already carried out). To exercise any of these, email privacy@honesty.se and we will respond within one month.
You also have the right to lodge a complaint with your local supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.
9. Security
We use reputable providers and appropriate technical and organisational measures — including encryption in transit and access controls — to protect personal data against loss, misuse or unauthorised access.
10. Children
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy from time to time. We will revise the “last updated” date above and, where changes are significant, make it more prominent.
Questions? Email privacy@honesty.se.