Privacy Policy

This Privacy Policy sets out how Hush Scandinavia AB, Linjegatan 3D, 302 50 Halmstad, Sweden, operator of the HUSSSH® trade site ("HUSSSH", "the Company", "we", "us" or "our"), collects, uses and protects any information that you give to us. We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Swedish Act containing supplementary provisions to the GDPR (Dataskyddslagen, SFS 2018:218). We respect your privacy and are committed to protecting your personal information.

This policy applies when you visit this trade site, send us an enquiry through the trade enquiry form, or correspond with us by email in connection with a possible trade relationship. Hush Scandinavia AB is the controller for personal data submitted through this site. We do not buy or receive personal information about you from third parties.

Summary of Key Points

• What we process: the business contact details you choose to send us, standard technical information needed to run the site and — only if you agree — information about how you use the site and respond to our advertising.
• Sensitive information: we do not process sensitive personal information.
• Cookies and analytics: with your consent only, we use Google Analytics to understand how the site is used and Google Ads to measure the results of our advertising. Nothing non-essential is activated until you choose, and you can change your choice at any time via the cookie settings on this site.
• Why: to respond to your enquiry, to take steps towards and administer a trade relationship, to keep the site secure, to improve the site and measure our advertising (with your consent), and to comply with law.
• Sharing: only within HUSSSH and with service providers such as our web host, our email service, our cookie consent service and — if you consent — Google. We never sell or rent your information.
• Your rights: you may access, correct, erase, restrict, port or object to the processing of your data, and complain to the Swedish Authority for Privacy Protection (IMY).

1. What Information We Collect

Information you provide to us. When you contact us through the trade enquiry form or by email, we collect the information you choose to provide, which may include:

• Name
• Company or business name
• Email address
• Telephone number
• Territory or market of interest, and partnership type
• The content of your message

Providing your details is voluntary, but we need at least your name and email address to reply to your enquiry. All personal information you provide to us should be true, complete and accurate, and you should let us know of any changes.

Technical information. Like most websites, our web server automatically records standard server log information, such as your IP address, browser type and operating system, and the pages requested. We use this only to operate, maintain and secure the site. Fonts and site scripts are served from this site itself; the only third-party scripts are our cookie consent service and Google's analytics and advertising tags, which are activated only if you consent.

Information collected with your consent. If you accept analytics and/or advertising cookies, Google Analytics and Google Ads collect information about your visit on our behalf, such as the pages you view and how long you stay, the links and buttons you click, whether you send us an enquiry, the website or advertisement that brought you here (including an ad click identifier), your browser, device type and screen size, and your approximate location (country or city) derived from your IP address. Google Analytics does not log or store full IP addresses. We cannot identify you by name from this information, and we do not combine it with the contact details you send us.

2. How We Use Your Information

• To respond to your requests and enquiries
• To consider, set up and administer a trade, distribution, white-label or licensing relationship with you or the business you represent
• To send you product news and updates, where you have asked for them or agreed to receive them
• To improve our level of service and the content of our communications
• With your consent, to understand how visitors use the site so that we can improve it (Google Analytics)
• With your consent, to measure whether our Google advertising leads to visits and trade enquiries (Google Ads)
• For our own administrative, security and quality assurance purposes
• To comply with our legal obligations, for example under the Swedish Bookkeeping Act (Bokföringslagen, SFS 1999:1078)

3. The Legal Bases We Rely On

• Contract — GDPR Art. 6(1)(b). To take steps at your request before entering into a trade relationship, and to perform that relationship.
• Legitimate interests — Art. 6(1)(f). To respond to enquiries you make on behalf of the business you represent, manage our business relationships and keep this site secure — always balanced against your rights and interests. You may object to this processing at any time.
• Consent — Art. 6(1)(a). For analytics and advertising cookies and the processing that follows from them, and where we otherwise ask for your consent, for example to send you product news. Storing or reading information on your device for these purposes also requires your consent under the Swedish Electronic Communications Act (Lag om elektronisk kommunikation, SFS 2022:482, chapter 9, section 28). You can withdraw your consent at any time via the cookie settings on this site.
• Legal obligation — Art. 6(1)(c). Where processing is necessary to comply with Swedish or EU law, for example bookkeeping rules, or to respond to a lawful request from a public authority.
• Vital interests — Art. 6(1)(d). Where necessary to protect the vital interests of any person.

4. Sharing Information

We may share your personal information with our contractors and agents where needed to respond to your enquiry or perform a trade relationship. We will not sell or rent your personal information to third parties.

We use selected service providers to support this website and our business, such as our web host, an email service provider (Twilio SendGrid) that delivers form submissions to our trade mailbox, and a cookie consent service (CookieYes, provided by CookieYes Limited, United Kingdom) that displays the cookie banner and records your cookie choices. They act as processors under data processing agreements, on our instructions only, and may not use your information for their own purposes.

If you consent, we use Google Analytics and Google Ads, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For Google Analytics, Google acts as our processor under its data processing terms. For advertising measurement, Google may also process information as an independent controller under its own privacy policy. You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites and in its privacy policy at policies.google.com/privacy.

We may also share or transfer information in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or part of our business, subject to confidentiality obligations.

5. Transfers Outside the EU/EEA

Some of our service providers may process data outside the EU/EEA — for example in the United States. We transfer personal data only where the GDPR allows it: on the basis of a European Commission adequacy decision (including the EU–US Data Privacy Framework) or the European Commission's standard contractual clauses, together with any supplementary measures required. Google LLC is certified under the EU–US Data Privacy Framework, and Google relies on it for information from Google Analytics and Google Ads that is transferred to the United States.

6. Cookies and Analytics

Cookies are small text files stored on your device. Under the Swedish Electronic Communications Act (Lag om elektronisk kommunikation, SFS 2022:482, chapter 9, section 28) we may store or read information on your device only if you have been told the purpose and have consented, unless it is strictly necessary to provide the site. The Swedish Post and Telecom Authority (PTS) supervises these rules.

How we ask. When you first visit, our cookie banner lets you accept all cookies, reject all non-essential cookies or choose by category. Rejecting is as easy as accepting. Until you choose, and whenever you reject, no analytics or advertising cookies are set and Google's analytics and advertising tags are not activated. You can change or withdraw your choice at any time via the cookie settings link or icon on this site. You can also block or delete cookies in your browser settings.

Recording your choice. The cookie banner is provided by CookieYes (CookieYes Limited, United Kingdom), which records your choice — a consent identifier, the date and time, your country, a pseudonymised IP address and the categories you accepted or rejected — so that we can respect it and demonstrate that consent was given. CookieYes acts as our processor; any transfer outside the EU/EEA takes place only on the legal bases described in section 5.

The cookie banner's settings show the complete and current list of cookies used on this site.

If you consent to advertising cookies, Google may also set or read its own cookies on Google domains in connection with our ads, as described in Google's policies linked above. We do not use advertising cookies to show you personalised ads on other websites.

7. How Long We Keep Your Information

We keep enquiry correspondence for as long as needed to handle your enquiry and any resulting trade relationship, and in any case no longer than 24 months after our last contact where no relationship follows — unless a longer period is required by law, such as the seven-year retention of accounting records under the Swedish Bookkeeping Act. Server logs are kept for a limited period for security purposes. Google Analytics data is kept for 14 months, after which Google deletes it automatically. Cookie durations are shown in section 6. When we no longer have a legitimate need to keep your information, we delete or anonymise it.

8. How We Protect Your Information

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, use, disclosure, alteration or loss, in line with GDPR Art. 32. The site is served over an encrypted connection. However, no transmission of information over the Internet or storage technology can be guaranteed to be completely secure, and any transmission is at your own risk.

9. When We May Disclose Your Information

We may disclose personal information where required by law — for example to public authorities, in legal proceedings as authorised by a court, or otherwise to the extent required or explicitly permitted by applicable Swedish or EU law.

10. Information from Minors

This is a business-to-business trade site. We do not knowingly collect data from, or market to, anyone under 18 years of age. If you become aware that we may have collected data from someone under 18, please contact us and we will promptly delete it.

11. Your Rights

Under the GDPR you have the right to:

• be informed about how we process your personal data (Arts. 13–14)
• access your personal data and receive a copy (Art. 15)
• have inaccurate data rectified (Art. 16)
• have your data erased (Art. 17)
• restrict processing (Art. 18)
• data portability, where applicable (Art. 20)
• object to processing based on legitimate interests, and to direct marketing at any time (Art. 21)
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
• not be subject to decisions based solely on automated processing — we do not use such processing (Art. 22)

To exercise any of these rights, write to hush@hushscandinavia.se. We will respond without undue delay and at the latest within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) — www.imy.se — or with the data protection authority in the EU/EEA country where you live or work.

12. Updates to This Policy

We may update this Privacy Policy to stay compliant with applicable law. The updated version will show a new "Last updated" date and takes effect when it is published on this page.

13. How to Contact Us

Controller: Hush Scandinavia AB, Linjegatan 3D, 302 50 Halmstad, Sweden. For questions about this policy, or to review, update or delete the personal information we hold about you, contact us at hush@hushscandinavia.se.