Comprehensive data protection in compliance with GDPR, EU regulations, and Swedish law
This privacy policy is designed to align with the General Data Protection Regulation (GDPR), Swedish Data Protection Act, and other applicable EU regulations. You have specific rights regarding your personal data, and we're committed to protecting your privacy.
Company: Bromander Global AB
Address: Ringaby 432, 718 92 Frövi, Sweden
Company Reg. No: 559529-7879
VAT No: SE559529787901
Registered for F-tax in Sweden
Contact: support@bromanderglobal.com
Bromander Global AB ("we," "our," or "us") is a Swedish technology holding company registered in Frövi, Sweden. We own and operate digital products including Shinery and Smart Bookkeeping. As the data controller, we determine the purposes and means of processing your personal data.
This Privacy Policy is designed to align with the General Data Protection Regulation (GDPR), the Swedish Data Protection Act (2018:218), and other applicable EU and Swedish regulations. Each of our digital services may have additional specific privacy terms for their respective features.
We process your personal data based on the following legal grounds under GDPR Article 6:
Security monitoring and business communications
Cookieless, aggregate website and ad-performance analytics (enabled only if you accept), marketing communications, and newsletter subscriptions
Service delivery, customer support, and account management
Tax reporting, regulatory compliance, and law enforcement requests
We collect personal data in the following categories:
We do not intentionally collect special categories of personal data (health, racial/ethnic origin, political opinions, religious beliefs, biometric data) unless explicitly required and with your explicit consent.
When you make a purchase, your card details are entered into and processed directly by our payment provider, Stripe, which stores and secures them under the PCI-DSS standard. We never receive or store your full card number on our own systems.
We process your personal data for the following purposes, always based on a valid legal ground:
We may share your personal data with the following categories of recipients:
We may disclose your data when required by law, court orders, or to protect our rights, users' safety, or comply with legal processes.
In case of merger, acquisition, or sale, your data may be transferred as part of the business assets, with continued protection under this privacy policy.
Under GDPR and Swedish law, you have the following rights regarding your personal data:
Request access to your personal data and information about how we process it.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data ('right to be forgotten').
Request limitation of processing in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or direct marketing.
Response Time: Within 30 days (may be extended to 60 days for complex requests)
We may need to verify your identity before processing your request. If we refuse your request, we'll explain why and inform you of your right to complain to the Swedish Authority for Privacy Protection (IMY).
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
Active accounts: Until account deletion + 30 days for backup recovery
Inactive accounts: 3 years from last login, then automatic deletion
Customer support: 7 years (Swedish business record requirements)
Marketing communications: Until consent withdrawal + 30 days
Financial records: 7 years (Swedish Bookkeeping Act)
Legal documentation: As required by applicable law
We implement comprehensive technical and organizational measures to protect your personal data:
In the unlikely event of a data breach, we will notify the Swedish Authority for Privacy Protection (IMY) within 72 hours and affected individuals without undue delay, as required by GDPR Article 33-34.
Bromander Global AB develops and operates these digital services, each with specific privacy considerations:
Privacy-first digital wellness platform with local data storage and zero tracking philosophy.
Financial management platform with bank-level security and encrypted data processing.
Motivation and reminder companion for neurodivergent users, designed with privacy by default.
For questions about this Privacy Policy, data processing, or to exercise your rights, please contact us:
Bromander Global AB
Ringaby 432, 718 92 Frövi, Sweden
Company Reg. No: 559529-7879
VAT No: SE559529787901
Registered for F-tax in Sweden
If you're unsatisfied with our response, you can file a complaint with:
Swedish Authority for Privacy Protection (IMY)
Website: imy.se
Email: imy@imy.se
We may update this Privacy Policy periodically. Material changes will be communicated via email and prominently displayed on our website. Continued use after changes constitutes acceptance.
We aim to respond to all privacy-related inquiries as soon as reasonably possible, and always within the timeframe required by law (typically 30 days, extendable to 60 days for complex requests).