Privacy policy
This Privacy Policy outlines how Build Scale Law, run by Moxie Agency AB (org. number 559463-3157), processes personal data in connection with our provision of legal services, client interactions, event participations, subscriptions to our mailing list, and general business operations.
Data controller
Moxie Agency AB is the data controller for the processing of your personal data as described in this Privacy Policy. We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other relevant data protection legislation. We also adhere to the Swedish Bar Association’s guidance for processing of data.
You can contact us at:
Moxie Agency AB
Torupsgårdsvägen 16
277 36 Vitaby, Sweden
Email: hanna@buildscalelaw.com
Collection and processing of personal data, grounds for processing and retention
We collect and process personal data for various purposes related to our legal services, including but not limited to:
Legal Case Handling
Personal data: Name, address, email address, telephone number, and social security number.
Purposes: To register natural persons as clients, and register contact persons of clients who are legal persons, and to carry out our obligations.
Legal basis: Contractual obligations.
Retention: For ten years after completion of the relevant assignment, in accordance with the Swedish Bar Association’s guidance.
Conflict of Interest Checks and Anti-Money Laundering Controls
Personal data: Name, email address, address, telephone number, as well as identification documents such as your passport and politically exposed person checks as required by law.
Purposes: To perform mandatory conflict of interest checks and anti-money laundering (AML) controls.
Legal basis: Our legitimate interest, or to comply with applicable law.
Retention: Minimum of five years but no longer than ten years, in accordance with AML legislation.
Invoicing and Financial Transactions
Personal data: Name, email address, address, and telephone number as necessary for invoicing, and in order to comply with applicable law such as the Bookkeeping Act.
Purposes: For accounting and invoicing purposes.
Legal basis: In order to carry out our contractual commitments and to comply with applicable law.
Retention: Until the applicable invoice is paid, and then for up to seven years in accordance with Swedish accounting rules.
when you contact us
Personal data: Name, email address, telephone number and any other information that you provide to us, for example when you use the contact form on our website or otherwise reach out to us.
Purposes: To be able to answer your contact request and handle your inquiries.
Legal basis: Our legitimate interest.
Retention: As long as is necessary to assist you with your inquiry.
for web site usage statistics
Personal data: Cookies and IP address.
Purposes: To be able to understand how you use our website so we can improve its design and functionality, and to get the most out of our marketing campaigns.
Legal basis: Consent, and our legitimate interest.
Retention: Six months.
events and webinars
Personal data: Name and email address.
Purposes: To invite you to events and webinars and to ask your opinion about your experience after the events in order to improve ourselves.
Legal basis: Consent, and our legitimate interest.
Retention: As long as we send out the information, unless you decline.
Personal data rights
As a data subject, you have various rights to your data, for example, you can require us to delete it or to provide you with a copy. You may exercise these rights by contacting us.
Data sharing and transfers
Personal data may be shared with judicial entities, authorities, service providers, and as part of our legal services.
If you are located in the EEA, the UK, or Switzerland, your personal information may be sent to service providers located in other regions, including the United States. When we send your personal information outside of the EEA, UK or Switzerland, we do so in accordance with applicable law.
When we transfer your personal data to organizations in the United States we do so to organizations that participate in the EU-U.S. Data Privacy Framework, knowing that such organizations have certified their compliance with the EU-U.S. Data Privacy Framework. This Framework is our assurance to you that your data enjoys a level of protection recognized as adequate by the European Commission. Build Scale Law transfer data to the following participating organizations:
Squarespace, Inc. for web site cloud hosting and statistics related to our web site.
Google, Inc. (Google Workspace and Google Analytics) for cloud computing, productivity tools (Google Docs) and email, as well as statistics related to our web site.
Dropbox, Inc. for storage and backup.
Complaints
As per your data protection rights under the GDPR, you also have the right to lodge a complaint regarding our processing of your personal data. This complaint can be made to Datainspektionen (the Swedish Data Protection Authority). For more information on how to lodge a complaint and the procedures involved, you can visit Datainspektionen's website or contact them directly at + 46 8 657 61 00, datainspektionen@datainspektionen.se.
Updates to the privacy policy
We reserve the right to update this Privacy Policy. Any significant changes will be communicated appropriately. We encourage you to review this policy regularly for the latest information on our privacy practices.