Privacy notice

Who is responsible

Glocalize BD AB (SE organisation number 559319-3195, Sweden) is responsible for the personal data described here.

What we collect and why

We collect only what we need.

• Enquiries. The details you enter in the contact form: name, email, company, country, what you are looking for and your message. We use them to reply and to follow up on your enquiry. Legal basis: our legitimate interest in answering enquiries.
• Gulf & Nordic Notes. Your name, email, company and interest when you subscribe. We use them to send you the briefing. Legal basis: your consent, which you can withdraw at any time.
• Context sent with the forms. The page you wrote from, the website you came from (address only), how many seconds you spent on that page, your browser language, and your approximate city and country, taken from your network address. Nothing is stored on your device to collect this. We use it to understand which pages lead to enquiries and to spot abuse. Legal basis: our legitimate interest.
• Visit statistics. We use Cloudflare Web Analytics for combined page-view counts. It uses no cookies and does not follow you across websites or identify you.
• Bot check. Pages with a form use Cloudflare Turnstile to tell people from automated programs. To do this, Cloudflare receives technical details such as your network address and browser. It is the only third-party service loaded on our pages, and only where there is a form.

How long we keep it

We delete the data when these periods end.

• Enquiries: up to 24 months after our last contact.
• Subscribers: until you unsubscribe.
• Visit statistics: combined, with no personal data.

Who else handles your data

We use these providers to run the website and our email. They act on our instructions. We do not sell personal data and we do not use it for advertising. Some providers may process data outside the EU/EEA. Where they do, we rely on safeguards approved by the EU, such as standard contractual clauses or the EU–US Data Privacy Framework.

• Supabase: stores enquiries and subscriber details in a database in Stockholm, Sweden (EU).
• Cloudflare: hosts the website, protects it, and provides the bot check and visit statistics.
• Resend: delivers the form message to our inbox.
• Microsoft 365: our email.

Cookies

The only cookie is glz_lang, which remembers the language you choose. It lasts one year and is not used for tracking. We use no tracking or advertising cookies, so there is no cookie banner.

Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it, restrict its use, or send it to you in a portable format. You can object to processing based on our legitimate interest and withdraw consent at any time. You can unsubscribe from Gulf & Nordic Notes at any time. We reply within one month. If you are not satisfied, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.