Privacy Policy

Last updated: 30 September 2026

This policy explains how Accent Studio collects, uses and protects personal data when you visit accentstudio.se, sign up for our emails, apply to work with us or become a client. We follow the EU General Data Protection Regulation (GDPR) and Swedish data protection law.

Book a Strategy Call

Who is responsible for your data

Richtus AB, trading as Accent Studio (“Accent Studio”, “we”, “us”), org. no. 556645-7635, registered in Sweden, is the data controller for the personal data described in this policy.

Questions or requests about your data: support@accentstudio.se.

When we act on behalf of our clients

When a client gives us access to their email or SMS platform (for example Klaviyo) or their online store, we may see personal data about that client’s own customers and subscribers. In that role we are a data processor. We handle that data only on the client’s instructions and under a data processing agreement, as required by Article 28 GDPR.

If you are a subscriber or customer of one of our clients, that brand is responsible for your data and its own privacy policy applies. Please contact the brand directly. We will help them respond to your request.

The rest of this policy covers data where Accent Studio is the controller.

Personal data we collect

Category	Examples	Where it comes from
Contact and identity	Name, job title, company, email, phone number	You
Applications and inquiries	Form answers, description of your email setup, store URL, booked call details	You, via our forms and booking tool
Client relationship	Agreements, emails, messages, meeting notes, call recordings (only with your consent)	You and your team
Billing	Billing address, VAT number, invoices and payment history. We never store full card numbers	You and our payment provider
Email list	Email address, sign-up date, opens and clicks	You, when you sign up
Website use	IP address, device and browser type, pages visited, cookie data	Your browser, with consent where required

We do not ask for sensitive data such as health information, and we ask you not to send it to us.

Why we use your data and our legal basis

Purpose	Legal basis under Article 6(1) GDPR
Answer inquiries and applications and book calls	Steps before entering a contract (b), or our legitimate interest in responding to business inquiries (f)
Deliver our services and manage the client relationship	Performance of a contract (b)
Invoicing, bookkeeping and tax	Legal obligation (c), including the Swedish Bookkeeping Act (Bokföringslagen 1999:1078)
Send our email series, newsletter and offers	Consent (a). For existing clients, similar services may be marketed based on our legitimate interest (f), in line with the Swedish Marketing Act (Marknadsföringslagen 2008:486), and you can opt out in every email
Website analytics and non-essential cookies	Consent (a), as required by the Swedish Electronic Communications Act (Lag 2022:482 om elektronisk kommunikation)
Keep our systems secure and establish or defend legal claims	Legitimate interest (f)
Show anonymised results in our portfolio and case studies	Legitimate interest (f). We only name a client or use a quote with their permission

Where we rely on legitimate interest, we have weighed our interest against your rights. You can ask us for details of that assessment.

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

Who we share your data with

We never sell your personal data. We share it only with service providers that help us run our business. Each one processes data on our behalf under a data processing agreement.

Type of provider	Purpose	Provider [confirm]
Email and file storage	Communication and document storage	Google Workspace
Project management and messaging	Running client projects	Slack, Trello
Design	Creating email designs	Figma
Call booking	Scheduling strategy calls	Calendly
Email marketing	Sending our newsletter and email series	Klaviyo
Website analytics	Understanding site use (with consent)	Google Analytics
Payments	Processing payments	Stripe
Accounting	Bookkeeping and tax filing	Visma

We may also share data with team members and contractors bound by confidentiality, with public authorities when the law requires it, and with a buyer if our business is sold or merged.

Transfers outside the EU and EEA

Some of our providers are based in, or access data from, the United States or other countries outside the EU and EEA. When that happens we make sure one of these safeguards is in place:

An EU adequacy decision, including the EU-U.S. Data Privacy Framework for certified providers
The European Commission’s Standard Contractual Clauses, with additional measures where needed

You can ask us for a copy of the safeguards that apply.

How long we keep your data

Data	How long
Inquiries and applications that don’t lead to an engagement	12 months after our last contact
Client agreements, correspondence and project files	The length of the engagement plus 3 years, or longer if needed for a legal claim
Accounting records, including invoices	7 years from the end of the calendar year in which the financial year ended, as required by Bokföringslagen
Email list data	Until you unsubscribe. Inactive subscribers are removed after 24 months
Access to clients’ platform accounts and copies of their customer data	Access is removed and copies are deleted within 30 days after the engagement ends, unless the data processing agreement says otherwise
Cookie data	As set out in our Cookie Policy

Your rights

Under GDPR you have the right to:

Get a copy of the personal data we hold about you
Have incorrect data corrected
Have your data erased
Restrict how we use your data
Receive your data in a portable format
Object to processing based on legitimate interest
Object to direct marketing at any time. We will always stop
Withdraw your consent at any time, without affecting processing that happened before

Email support@accentstudio.se to use any of these rights. We respond within one month. For complex requests this can be extended by two more months, and we will tell you if so. Requests are free of charge. We may ask you to confirm your identity first.

Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to put it right.

You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy.se, or to the data protection authority in the EU country where you live or work.

How we protect your data

We use appropriate technical and organisational measures to protect personal data. These include two-factor authentication on our accounts, access limited to the people who need it, encrypted storage through our providers and confidentiality agreements with everyone on our team.

If a personal data breach is likely to put your rights at risk, we will report it to IMY within 72 hours and inform you when the law requires it.

Cookies

We use strictly necessary cookies to make the site work. Analytics and marketing cookies are only set if you accept them in our cookie banner. You can change your choice at any time via the “Cookie settings” link in the footer. See our Cookie Policy for the full list.

Children

Our website and services are aimed at businesses. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy when our services or the law change. The “Last updated” date at the top shows the latest version. If we make significant changes, we will tell active clients and email subscribers by email.

Contact us

Richtus AB (Accent Studio), org. no. 556645-7635, Sweden

Email: support@accentstudio.se