Privacy Policy

Who we are

Naxdor is a digital services firm, registered as an enskild firma (a Swedish sole proprietorship) operated by Ansar Cheema. For the purposes of the EU General Data Protection Regulation (GDPR), Naxdor is the controller of the personal data described in this policy.

You can reach us about anything in this policy — including to exercise your rights — by email at contact@naxdor.com. Our registered contact details are published on our Contact page.

What data we collect

We collect only what we need. That falls into two groups: information you give us directly, and a limited amount of technical data collected automatically when you use the site.

Information you give us — when you submit our contact form or email us:

• Your name and email address
• Your company name (optional)
• Project context you choose to share: the service you are interested in, your budget range, your timeline, and your country
• The content of your message and any later correspondence with us

Data collected automatically

When you browse the site, our hosting and analytics providers collect standard technical data — for example your device and browser type, approximate location derived from your IP address, the pages you view, and how you arrived. We use this in aggregate to keep the site secure and to understand and improve how it is used. The cookies and similar technologies involved are described in our Cookie Policy.

Our contact form also includes a hidden anti-spam field. If it is filled in (which only automated bots do), the submission is discarded and no data is stored.

How we use your data

We use the data above for the following purposes, and no others:

• To respond to your enquiry and discuss a potential engagement
• To provide, operate, and improve our services and this website
• To keep the site and our systems secure and prevent abuse
• To meet our legal and accounting obligations

Legal bases for processing

Under the GDPR we must have a lawful basis for each use of your data. We rely on:

• Your consent — for non-essential analytics cookies, which we set only after you agree
• Steps taken at your request before entering a contract — to respond to and follow up on your enquiry
• Our legitimate interests — to run, secure, and improve the site, balanced against your rights
• Legal obligation — where we must keep records to comply with the law

Who we share it with

We do not sell your personal data, and we do not share it for anyone else's marketing. We use a small number of trusted providers (processors) that handle data on our behalf, under agreements that require them to protect it:

• Resend — delivers our transactional emails (the notification we receive and the autoresponder you receive)
• Vercel — hosts the website and provides privacy-friendly, cookieless analytics and performance monitoring
• Google Analytics 4 — helps us understand aggregate site usage (set only with your consent)
• Microsoft Clarity — helps us understand how pages are used (set only with your consent)

International transfers

Some of our providers are based outside the European Economic Area, including in the United States. Where your data is transferred outside the EEA, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework — so that it keeps an equivalent level of protection.

How long we keep it

We keep your enquiry and correspondence only as long as needed to respond and to maintain a reasonable record of our dealings, after which we delete or anonymise it. Data we are required to retain for legal or accounting reasons is kept for the period the law requires. Aggregate analytics data is retained according to each provider's settings.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and — where we rely on consent — to withdraw that consent at any time. Withdrawing consent does not affect processing carried out before you withdrew it.

To exercise any of these rights, email us at contact@naxdor.com. We will respond within one month. If you believe we have mishandled your data, you also have the right to complain to your local supervisory authority; in Sweden that is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

How we protect your data

We serve the site over HTTPS, limit access to your data to the people who need it, and work only with providers that maintain recognised security standards. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data against loss, misuse, and unauthorised access.

Children

This site and our services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy as our practices or the law change. We will revise the “last updated” date above, and where the change is significant we will take reasonable steps to tell you.

Contact us

Questions about this policy or your personal data? Email us at contact@naxdor.com and we will respond within one business day.