1. Introduction

At Alsha Design Agency ("Alsha", "we", "us", or "our"), we care about your privacy and we are committed to protecting your personal data in a clear, respectful, and responsible way.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you:

• visit our website,
• contact us by email, form, phone, or social media,
• ask about our services,
• work with us as a client, partner, or supplier,
• subscribe to updates or newsletters,
• or otherwise interact with our business.

As a small creative agency, we only collect the information we actually need to communicate with you, provide our services, improve our website, and run our business properly.

2. Who we are

Alsha delivers creative, innovative, and tailored design solutions.

Our approach is simple: we focus on functionality, speed, and clarity, making sure every project has a clear purpose without unnecessary complexity. We work closely with our clients to understand their needs and turn ideas into user-friendly digital solutions — whether that is a website, app, branding project, or other design service.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:

info@alsha.se

3. What personal data we collect

We may collect the following types of personal data:

Information you give us directly

This may include:

• your name,
• company name,
• email address,
• phone number,
• billing or business address,
• project details,
• any information you send to us through contact forms, email, or direct messages.

Information we collect automatically

When you visit our website, we may collect basic technical data such as:

• IP address,
• browser type and version,
• device type,
• pages visited,
• time spent on the site,
• referral source,
• cookie data.

Marketing and communication preferences

We may also keep a record of:

• whether you subscribed to our newsletter,
• whether you opened marketing emails,
• your communication preferences,
• feedback or survey responses.

4. How we collect your data

We collect your personal data in different ways, including when you:

• fill in a contact form on our website,
• email us or contact us through social media,
• request a quote or proposal,
• subscribe to our newsletter,
• download content from our website,
• work with us as a client or supplier,
• browse our website through cookies and analytics tools.

5. How we use your personal data

We only use your data when we have a valid reason to do so. Most commonly, we use your information to:

• respond to your questions or requests,
• communicate with you about a project or potential project,
• provide our services,
• send proposals, invoices, or project updates,
• improve our website and services,
• maintain business records,
• send relevant marketing or updates if you have agreed to receive them,
• comply with legal or accounting obligations,
• protect our business and website from misuse or security threats.

6. Legal basis for processing

Depending on the situation, we process your personal data based on one or more of the following legal grounds:

• Contract – when we need your information to provide services or prepare to work with you.
• Legitimate interests – when we use data in a reasonable way to run and improve our business, as long as your rights and privacy are respected.
• Legal obligation – when we must keep or process information to comply with laws, such as accounting or tax rules.
• Consent – when you have clearly agreed, for example to receive newsletters or optional cookies.

7. Marketing communications

If you contact us, request information, or work with us, we may send you updates about our services, design work, news, or offers that may be relevant to you.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or by contacting us directly.

We do not sell your personal data to third parties for marketing purposes.

8. Cookies and website analytics

Our website may use cookies and similar technologies to:

• make the site work properly,
• understand how visitors use the site,
• improve performance and user experience,
• measure the effectiveness of content and campaigns.

You can usually control cookies through your browser settings. If you disable some cookies, parts of the website may not work as intended.

If you use a cookie banner on your website, this Privacy Policy should match it.

9. Sharing your data

We only share personal data when necessary and appropriate. This may include:

• website hosting providers,
• email or newsletter platforms,
• analytics providers,
• invoicing, accounting, or payment providers,
• IT support or security providers,
• legal, financial, or professional advisers,
• public authorities if required by law.

We require any third-party service providers we use to treat your personal data securely and only for the purposes we allow.

10. International transfers

Some of the services we use may store or process data outside your country or outside the EU/EEA.

When that happens, we take reasonable steps to ensure your data is protected and handled in line with applicable data protection laws, including GDPR where relevant.

11. Data security

We take data security seriously. We use reasonable technical and organizational measures to protect your personal data from loss, misuse, unauthorized access, alteration, or disclosure.

However, no internet transmission or storage system can be guaranteed to be 100% secure, so while we do our best, we cannot promise absolute security.

12. How long we keep your data

We only keep personal data for as long as necessary for the purpose it was collected, including for legal, accounting, or business reasons.

For example:

• contact inquiries may be kept for follow-up and record-keeping,
• client and supplier information may be kept for the duration of the project and for a period afterward,
• invoice and accounting records may be kept as required by law,
• newsletter data is kept until you unsubscribe.

When we no longer need your data, we will delete it or anonymize it where appropriate.

13. Your rights

Depending on where you are located and which laws apply, you may have the right to:

• request access to the personal data we hold about you,
• ask us to correct inaccurate or incomplete information,
• ask us to delete your data,
• ask us to restrict how we use your data,
• object to certain types of processing,
• withdraw consent at any time where consent is the legal basis,
• request a copy of your data in a portable format,
• lodge a complaint with your local data protection authority.

If you would like to exercise any of these rights, please contact us at:

info@alsha.se

We may need to verify your identity before processing your request.

14. Third-party links

Our website may contain links to third-party websites, tools, or platforms. We are not responsible for the privacy practices of those third parties. We recommend reading their privacy policies before sharing any personal data.

15. Keeping your information accurate

We try to keep your personal data accurate and up to date. If your information changes, please let us know so we can update our records.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, or legal obligations. Any updates will be posted on this page with a revised "Last updated" date.