Privacy notice
In short. If you leave your email address on this page, Shift Everywhere AB uses it for one thing: to tell you once when the Act Before course launches. We ask you to confirm the address first, we never use it for anything else, and we delete it once the notification has gone out.
Who is responsible for your data
Shift Everywhere AB (corporate identity number [org. no.]) is the controller for the personal data described here.
Nordvik Polymers is a fictional company used in the course and in the story The Last Good Array. It does not exist, and it does not receive or process your data. The course page is published at nordvikpolymers.com because the course is built around that fictional company.
Contact for privacy questions: [contact address]
What we collect
- Your email address.
- Evidence of your consent: when you gave it, the exact wording you agreed to and the language it was in.
- Whether and when you confirmed your address and received the launch notification.
We do not ask for your name, organisation or anything else, and we do not combine your address with any other information.
Why, and on what legal basis
We process your email address only to:
- send you a confirmation email so you can confirm the address is yours (double opt-in); and
- send you one notification when the course launches.
The legal basis is your consent (Article 6(1)(a) of the General Data Protection Regulation). We will not use your address for a newsletter, marketing or anything else without asking you separately.
Who handles the data for us
We use two processors, each bound by a data processing agreement:
- Cloudflare, Inc. hosts this page and stores the notification records.
- Resend, Inc. delivers the confirmation and launch emails.
Both are based in the United States. [Transfer safeguard — confirm for each: EU–US Data Privacy Framework certification or standard contractual clauses.] We do not sell your address or share it with anyone else.
How long we keep it
- If you never confirm, we delete the address after 7 days. The confirmation link stops working after 72 hours.
- If you confirm, we keep the address until the launch notification is sent, and delete it no later than 30 days after that.
- If you withdraw your consent, we delete the address immediately.
[Retention periods are proposals pending legal review.]
Cookies and analytics
This page sets no cookies and uses no analytics or tracking. Fonts and images are served from the same domain as the page. To deliver the page and protect the form from abuse, our hosting provider processes your IP address as part of normal network traffic; we do not store it together with your email address.
[Verify against the production Cloudflare configuration.]
Your rights
You can at any time:
- withdraw your consent, using the link in any email we send you or by contacting us — this does not affect processing that took place before you withdrew;
- ask for access to the data we hold about you, or have it corrected or erased; and
- ask us to restrict processing, or to receive your data in a portable format.
If you believe we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
Changes to this notice
If we change how we handle your data, we will update this notice and its version number. We will not use an address for a new purpose on the strength of consent given under an earlier version.