Privacy Policy
Last updated: May 2026 · Compliant with GDPR
1. Data Controller
Sales in a Box, registered at Grimsbygatan 24B, 211 20 Malmö, Sweden, is the data controller responsible for the processing of your personal data in connection with the Platform. For data-related enquiries, contact us at info@salesinabox.net.
2. Data We Collect
We collect data you provide directly when registering an account or contacting us (name, email address, company name, job title, phone number), data generated through your use of the Platform (usage logs, session data, query inputs, analysis parameters), and technical data (IP address, browser type, device information, cookies). We do not collect sensitive personal data as defined under GDPR.
3. Legal Basis for Processing
We process your personal data on the following legal bases: (a) Performance of a contract — to provide you with access to and operation of the Platform; (b) Legitimate interests — to improve the Platform, ensure security, and communicate relevant product updates; (c) Consent — where you have explicitly opted in to specific communications; (d) Legal obligation — where required by applicable law.
4. How We Use Your Data
Your data is used to operate and maintain your account, deliver Platform functionality, send transactional and service communications, provide customer support, improve and develop the Platform, comply with legal obligations, and detect and prevent fraud or unauthorized access. We do not sell your personal data to third parties.
5. Data Sharing
We may share your data with trusted sub-processors who assist in delivering the Platform (e.g. cloud infrastructure, payment processing, email delivery). All sub-processors are bound by data processing agreements consistent with GDPR requirements. We may also disclose data where required by law or to protect the rights and safety of Sales in a Box or others.
6. International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR.
7. Data Retention
We retain your personal data for as long as your account is active or as necessary to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is deleted within 90 days of account closure upon request.
8. Your Rights Under GDPR
As a data subject under GDPR, you have the right to access your personal data, rectify inaccurate data, request erasure of your data, restrict or object to processing, request data portability, and withdraw consent at any time. To exercise any of these rights, contact us at info@salesinabox.net. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
9. Cookies
We use essential cookies required for Platform operation and, where you have consented, analytical cookies to understand usage patterns. You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality.
10. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security assessments.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform. The date of the latest revision is indicated at the top of this page. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.
12. Contact
For any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact us at info@salesinabox.net or by post at Grimsbygatan 24B, 211 20 Malmö, Sweden.