Privacy policy
How Purasu AB processes your personal data, plainly and in line with the General Data Protection Regulation (GDPR).
Last updated: 8 October 2026.
Data controller
The data controller is Purasu AB, company reg. no. 559347-4439, Hovås Bräckaväg 26, 436 54 Hovås, Sweden.
Questions about your personal data: hej@purasu.se or +46 708 88 68 93.
What we process and why
We only collect data you give us or that arises when you use the website. We never sell personal data.
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Answering questions via the contact form, email or phone | Name, work email, company, phone, your message | Legitimate interest (answering your enquiry) | Up to 24 months after the last contact |
| The chat and "Call me back" on the website | What you write in the chat, name and phone number if you ask for a call | Legitimate interest (answering you), consent for the call-back | Up to 12 months |
| Booking a meeting via Calendly | Name, email, chosen time and what you write in the booking | Steps prior to a contract | Up to 24 months |
| Event registration | First name, last name, work email, company | Contract (to run the registration) | Up to 24 months after the event |
| Client engagements | Contact details of the client's contact persons | Contract | Contract term plus the period required by bookkeeping law |
| Newsletter and relevant content | Name, work email, company | Consent, or legitimate interest for existing contacts. You can always unsubscribe | Until you unsubscribe |
| Analytics and advertising on the website | Cookie ID, IP address, pages visited, approximate location, company behind the IP address | Consent through the cookie banner | See the cookie policy |
Analytics and advertising on the website only start once you accept them in the cookie banner. See our cookie policy.
Who we share data with
We only share data with processors that help us run the business. All of them are bound by data processing agreements.
| Recipient | Role | Where the data is processed |
|---|---|---|
| HubSpot | CRM, forms, email, website and cookie banner | EU (data centre in Germany), with standard contractual clauses for support from the US |
| Google (Analytics, Tag Manager, Ads) | Analytics and ad measurement, only after consent | EU and US, EU-US Data Privacy Framework |
| Leadinfo | Company identification of visits, only after consent | EU (Netherlands) |
| Calendly | Meeting booking | US, EU-US Data Privacy Framework |
| Zoom | Video meetings and events | US, EU-US Data Privacy Framework |
| AI service provider for the chat | Reads and answers chat messages | Standard contractual clauses for transfers outside the EU/EEA |
For transfers outside the EU/EEA we ensure a level of protection equivalent to the GDPR, through the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You have the right to know what data we hold about you, to have incorrect data corrected, to have your data erased, to restrict processing, to object to processing based on legitimate interest, and to receive your data in a machine-readable format (data portability).
Where you have given consent you can withdraw it at any time, without affecting processing that took place before. You change your cookie consent right here on the website.
Email hej@purasu.se and we will reply within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, IMY.
Security and changes
The data is stored with providers that use access control, encryption and logging. Only the people at Purasu who need the data for their work can access it.
We update this policy when our processing changes. The date at the top shows the latest version.