Privacy policy

This policy explains how Mentgroup AB ("Mentgroups", "we") processes personal data when you visit mentgroups.com, contact us, buy from us, use our client portal or work with us as a partner.

Who is responsible

Mentgroup AB, organisation number 559179-7278, Stockholm, Sweden, is the controller for the processing described here. Contact: hello@mentgroups.com.

When we process personal data on behalf of our clients, for example messages sent through a client's website, the client is the controller and we act under a data processing agreement. This policy does not cover that processing; the client's own privacy policy does.

What we process, why, and on what legal basis

Visiting the website. We measure visits with Plausible Analytics, which does not use cookies and does not collect personal data or IP addresses in a form that identifies you. Our hosting provider keeps technical logs, including IP addresses, for up to 30 days to keep the website secure. Legal basis: legitimate interest in a secure and working website.

Requests and enquiries. When you send a request or contact us, we process your name, work email, phone number, company, organisation number, the services you are interested in and what you write to us. We use it to answer you and prepare an offer. Legal basis: legitimate interest in answering business enquiries, and steps before entering into a contract.

Clients. When you buy from us, we process contact and billing details for the people at the client we work with, order and payment history, messages, files and the materials you send for the project, and login details for our client portal. We use it to deliver the services, invoice, provide support and keep accounting records. Legal basis: contract, and legal obligation for accounting records.

Payments. Card payments are handled by Stripe. We never see or store full card numbers. Stripe is responsible for the payment data it processes under its own privacy policy.

Client portal and login. We process your email address, the login method you use (email code, Google or passkey), session information such as device type and approximate location, and a record of important actions for security. Legal basis: contract and legitimate interest in security.

Partners. For freelancers and companies that deliver projects for us, we process contact and company details, F-tax status, skills, assignments, payouts and invoices. Legal basis: contract and legal obligation for accounting records.

Newsletters. If you subscribe, we send you our newsletter until you unsubscribe. Legal basis: consent, which you can withdraw at any time through the link in every email.

How long we keep data

• Enquiries that do not lead to an agreement: 12 months after our last contact
• Client and partner data: during the agreement and 24 months after it ends
• Accounting records, including orders, invoices and receipts: seven years after the end of the financial year, as required by the Swedish Bookkeeping Act
• Security logs: 12 months
• Newsletter subscriptions: until you unsubscribe

Who we share data with

We use these providers to run our services. They process personal data on our behalf under data processing agreements:

Independent partners who deliver a project for you see the project information they need, after they have accepted the assignment and agreed to confidentiality.

When a provider processes data outside the EU and EEA, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

We do not sell personal data.

Your rights

You have the right to access the personal data we hold about you, to have incorrect data corrected, to have data deleted when we no longer need it or when you withdraw consent, to restrict processing, to object to processing based on legitimate interest, and to receive data you have given us in a portable format. Clients can export their data in the client portal; anyone can write to hello@mentgroups.com. We answer within one month.

If you think we process your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Cookies

See our cookie policy.

Changes

We update this policy when our processing changes. The date at the top shows the latest version.