Privacy Policy
Your privacy matters. Learn how I collect, use, and protect your personal data in compliance with GDPR and Swedish data protection laws.
Last updated: June 24, 2026
Introduction
At IvyyDev, I am committed to protecting your privacy and personal data. This Privacy Policy explains how I collect, use, and safeguard your information when you visit my website or use my services.
I operate in compliance with the General Data Protection Regulation (GDPR) and Swedish data protection laws. As an independent IT consultant and web developer, I understand the importance of data security and privacy.
Data Controller
Data I Collect
Contact Information
- • Name and email address (when you contact me)
- • Phone number (if provided in contact forms)
- • Company information (if relevant to your inquiry)
- • Any other information you voluntarily provide
Website Analytics
- • Page views and user interactions
- • Device and browser information
- • IP address (anonymized)
- • Referral sources and search terms
- • Time spent on pages and bounce rate
Cookies and Tracking
- • Essential cookies for website functionality (always active)
- • Analytics cookies (Google Analytics, Vercel Analytics) - requires consent
- • Performance monitoring cookies - requires consent
- • Preference cookies (language settings) - requires consent
Note: Even anonymized analytics data requires your consent under GDPR and Swedish data protection laws.
How I Use Your Data
Service Provision
- • Respond to your inquiries and requests
- • Provide IT consulting and development services
- • Communicate about projects and deliverables
- • Send project updates and invoices
Website Improvement
- • Analyze website performance and usage
- • Improve user experience and content
- • Monitor technical issues and errors
- • Optimize for search engines (SEO)
Legal Basis for Processing
Consent
When you contact me or subscribe to my newsletter
Legitimate Interest
For website analytics and service improvement
Contract Performance
When providing IT consulting and development services
Data Sharing and Third Parties
I do not sell, trade, or rent your personal data to third parties. I may share data only in the following circumstances:
- • Analytics Providers: Google Analytics, Vercel Analytics (anonymized data only)
- • Email Services: Resend for contact form processing
- • Hosting Providers: Vercel for website hosting and performance monitoring
- • Legal Requirements: When required by law or to protect my rights
Data Security
I implement appropriate technical and organizational measures to protect your personal data:
- • SSL/TLS encryption for data transmission
- • Secure hosting with Vercel (SOC 2 compliant)
- • Regular security updates and monitoring
- • Limited access to personal data on a need-to-know basis
- • Secure backup and recovery procedures
Your Rights Under GDPR
Access & Portability
- • Request access to your personal data
- • Receive a copy of your data in a portable format
- • Know how your data is being processed
Control & Correction
- • Correct inaccurate personal data
- • Request deletion of your data
- • Object to processing of your data
- • Withdraw consent at any time
To exercise your rights: Contact me at [email protected] with your request. I will respond within 30 days.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. In Sweden, the authority is Integritetsskyddsmyndigheten (IMY): imy.se. If you are in another EU/EEA country, you may contact your local data protection authority.
Cookies and Tracking Technologies
Essential Cookies
Required for website functionality and cannot be disabled. These are always active.
Analytics Cookies
Help me understand how visitors use my website. Requires your explicit consent - even though data is anonymized, GDPR requires consent for analytics tracking.
Performance Cookies
Monitor website performance and help me improve user experience. Requires your explicit consent.
Cookie Consent Management
You can manage your cookie preferences at any time using the cookie banner or by contacting me. Your choices are saved locally and will be remembered for future visits.
Data Retention
- • Contact inquiries: 3 years or until you request deletion
- • Client project data: Duration of project + 7 years (legal requirement)
- • Analytics data: 26 months (Google Analytics default)
- • Marketing communications: Until you unsubscribe
International Data Transfers
Some of my service providers may be located outside the EU/EEA. I ensure adequate protection through:
- • Standard Contractual Clauses (SCCs)
- • Adequacy decisions by the European Commission
- • Privacy Shield certification (where applicable)
Contact Me
If you have any questions about this Privacy Policy or my data practices, please contact me:
Policy Updates
I may update this Privacy Policy from time to time. I will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.
This policy is effective as of June 24, 2026 and complies with GDPR and Swedish data protection laws.