SleekSiteSleekSiteBack to site

Privacy Policy

Effective date: September 10, 2026

1. Introduction and data controller

This Privacy Policy explains how SleekSite collects, uses, and protects your personal data when you use our web design and hosting services. For the purposes of the General Data Protection Regulation (GDPR), the Data Controller is:

  • Entity: Thomas Smahaj (Enskild firma)
  • Organization number: 080719-4634
  • Location: Stockholm, Sweden

2. Data we collect

In order to provide our B2B services, we collect the following types of information:

  • Business and contact information: Names, business emails, phone numbers, and company names provided through contact forms or direct communication.
  • Billing details: Company registration numbers, VAT numbers, and billing addresses necessary for invoicing.
  • Technical data: IP addresses and basic analytics data when you visit our website, used to ensure site functionality.

3. Payment processing via Stripe

SleekSite does not directly store your credit card or highly sensitive financial data. All payment transactions are securely processed by our third-party provider, Stripe. Stripe collects and processes this data in accordance with their own Privacy Policy to facilitate subscription billing and ensure regulatory compliance.

4. How we use your data

We only process data where we have a lawful basis to do so. The primary purposes include:

  1. Fulfilling our contractual obligations to build, host, and maintain your website.
  2. Managing recurring billing and fulfilling Swedish tax/accounting requirements.
  3. Communicating important service updates, technical issues, or policy changes.

5. Data retention

We retain your contact and billing information for as long as your subscription remains active. Upon cancellation, we retain financial records (invoices, receipts) for a period of seven (7) years as legally mandated by the Swedish Accounting Act (Bokföringslagen). Client website data and assets are deleted 14 days after the final billing cycle expires.

6. Your GDPR rights

As a resident of the EU/EEA, you possess specific rights regarding your personal data:

  • The right to access the data we hold about you.
  • The right to request rectification of inaccurate data.
  • The right to request erasure ("Right to be Forgotten"), subject to our legal accounting obligations.
  • The right to data portability.

To exercise any of these rights, contact us at sleeksiteinfo@gmail.com.