Privacy information — BusinessCraft enquiries and customer information
====================
Version: 8 November 2026
Controller and scope
--------------------
BusinessCraft Nordic AB
c/o Giorgi Skhirtladze
Berghemsgatan 8 Lgh 1001, 431 37 Mölndal, Sweden
Email: info@businesscraft.se · Telephone: +46 736 335 454
Company registration number: 559102-8732 · VAT number: SE559102873201
BusinessCraft Nordic AB is controller for its own handling of enquiries, licence questions, product complaints and purchase information made available to it in connection with these products. Contact info@businesscraft.se about this processing or to exercise your data-protection rights.
Payhip Limited identifies itself as controller for the processing described in its Privacy and Cookies Policy (https://payhip.com/privacy). Its hosted purchase interface and the payment provider used at checkout have their own processing information. Their processing is distinct from BusinessCraft’s own processing described here; this notice does not replace their notices.
Information and sources
--------------------
When you contact BusinessCraft, the information is what you provide: for example your name, email/contact details, order reference, question and correspondence. Information relating to a purchase may also be provided by Payhip: its published policy states that it informs the content seller of purchases/downloads. The relevant categories are purchaser/contact details and product, order, payment-status and tax information made available with the transaction or supplied by you when raising a problem.
Only information needed for the relevant purpose should be provided. Do not send full card numbers or security codes, confidential employer/client datasets or unnecessary sensitive information in an ordinary enquiry. A name/order reference may be needed to locate a purchase; without sufficient information BusinessCraft may be unable to identify the issue or respond meaningfully. A purchase field required by the contracting supplier is separate from optional information sent to BusinessCraft.
Purposes and legal bases
--------------------
BusinessCraft uses enquiry and correspondence information to answer the request and deal with product/licence questions and complaints. The legal basis is its legitimate interest in communicating with customers and business contacts, explaining its content and permission, and resolving problems (GDPR Article 6(1)(f)), taking account of the individual's reasonable expectations and rights. The same basis applies to relevant purchase information made available to BusinessCraft for administration of its creator/licensor relationship and identifying the affected product or order. These purposes do not depend on BusinessCraft being the retail contracting supplier.
Information that must be recorded or disclosed under applicable accounting, tax or other law is handled to meet that legal obligation (Article 6(1)(c)). Information necessary to establish, exercise or defend legal claims is handled for that legitimate interest (Article 6(1)(f)). An immediate-supply acknowledgement under consumer law is not blanket GDPR consent, and neither a purchase nor a product enquiry is blanket consent to marketing.
Recipients and retention criteria
--------------------
Enquiries to info@businesscraft.se are handled through Google’s Gmail email service. Email-service providers therefore receive/process the correspondence as part of supplying that service. Relevant recipient categories also include the platform or contracting supplier where information needs to be exchanged to deal with an order problem, and competent authorities, courts or dispute-resolution bodies where disclosure is required by law or necessary for a claim. Only information relevant to the purpose should be disclosed. Payhip and the checkout payment provider also process information for the purposes described in their own notices.
Enquiry correspondence is retained while the question and any necessary follow-up remain unresolved. Relevant product/order/complaint records are retained as necessary to administer the identified matter, meet applicable statutory remedy/claim periods, or deal with an existing dispute. Accounting/tax records are retained for the periods legally required for those records. Retention must be reviewed when a matter is closed and when the applicable obligation or claim period ends; once no relevant purpose remains, information should be deleted or anonymised. A platform’s own retention periods are not automatically BusinessCraft’s periods.
Your rights
--------------------
Under the conditions in data-protection law you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You may object at any time to direct marketing. Where processing is based on consent, it can be withdrawn without affecting earlier lawful processing. Some records may still be required by law or for legal claims.
GDPR Article 22 also provides protections concerning solely automated decisions with legal or similarly significant effects. This notice is not consent to such decisions.
Send requests to info@businesscraft.se. Information reasonably necessary to verify your identity may be requested; do not send identity-document copies unless specifically needed through an appropriate route. Responses are due without undue delay, normally within one month, subject to the statutory extension and notification rules.
You may complain to the Swedish Authority for Privacy Protection (IMY) (https://www.imy.se/en/individuals/forms-and-e-services/file-a-gdpr-complaint/) or another competent supervisory authority, including where you live/work or the alleged infringement occurred. Contacting BusinessCraft first is not a prerequisite.