Privacy policy

Last updated: 6 October 2026

This policy explains how Scrivia Labs (“Scrivia Labs”, “we”, “us”) handles personal data when you visit scrivialabs.com, send us an enquiry or work with us as a clinic. Patient data that we process on behalf of clinics is covered separately below.

Who we are

Scrivia Labs, Vallgatan 15, 281 32 Hässleholm, Sweden, is the controller of the personal data described in this policy. You can reach us at scrivialabs@gmail.com.

What we collect

Enquiry details you submit through the website form: your name, work email, clinic name, country and the service you are interested in, and, if you choose to add them, your clinic’s website and approximate monthly enquiry volume.
Business communications: emails, call notes and documents exchanged while we discuss or deliver an engagement, and the contact details of the clinic staff we work with.
Billing details for clients: company name, address, VAT number, invoices and payment records.
Technical and usage data: IP address, browser and device information, pages visited and similar data collected through cookies and comparable technologies on this website, which is hosted by Shopify.

The enquiry form is for business enquiries only. Please do not send us patient or medical information through it.

Why we use it, and our legal basis

To reply to your enquiry, arrange a strategy call and prepare a proposal — our legitimate interest in responding to business enquiries, or steps taken at your request before entering into a contract.
To deliver, manage and invoice an engagement — performance of our contract with your clinic.
To keep accounting records — compliance with a legal obligation.
To run, secure and improve the website — our legitimate interest. Non-essential cookies, such as analytics and advertising cookies, are used only with your consent, which you can give or withdraw in the cookie banner.
To send occasional business updates to contacts at clinics — our legitimate interest. You can opt out at any time.

We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

Patient data processed for clinics

When a clinic engages us, the systems we build and manage handle the clinic’s patient enquiries, bookings, reminders and follow-up on the clinic’s behalf. For that data the clinic is the controller and Scrivia Labs acts as a processor under a written data processing agreement. We use it only on the clinic’s documented instructions — never for our own purposes or marketing. Patients should read their clinic’s privacy notice and contact the clinic to exercise their rights. The assistant handles administrative tasks only; it does not diagnose or recommend treatments.

Who we share it with

Shopify, which hosts this website, runs the enquiry form and sets cookies;
Google, which provides our email — enquiries sent through the website arrive in our Google mailbox;
other providers we use to deliver engagements, such as hosting, automation, messaging and calendar services, under data processing terms;
our accountants, auditors and legal advisers, and public authorities where the law requires it.

Advertising cookies or pixels, for example from Meta, are only activated on this website with your consent.

International transfers

Some of these providers process data outside the EU/EEA, for example in Canada or the United States. When that happens we rely on a European Commission adequacy decision — such as the decision covering Canada, or organisations certified under the EU–U.S. Data Privacy Framework — or on the Commission’s Standard Contractual Clauses.

How long we keep it

Enquiries that do not lead to an engagement: up to 24 months after our last contact.
Client and engagement records: for the duration of the engagement and up to 24 months after it ends.
Accounting records: seven years, as required by Swedish bookkeeping law.
Cookies: for the periods described in the cookie preferences on this website.

Your rights

Depending on where you live, you can ask us for access to your personal data, to correct or delete it, to restrict its use, or to receive a portable copy; you can object to processing based on our legitimate interests, and withdraw consent at any time. Email scrivialabs@gmail.com and we will reply within one month.

In the EU/EEA you can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or to your local data protection authority; in the United Kingdom, to the Information Commissioner’s Office (ico.org.uk). If you are in the United States, Canada or Australia, you may have similar rights under local law and can contact us at the same address.

Security

We use appropriate technical and organisational measures to protect personal data, including restricted access and established service providers. No method of transmission over the internet is completely secure.

Children

This website is intended for businesses and is not directed at children.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.

Contact

Scrivia Labs, Vallgatan 15, 281 32 Hässleholm, Sweden — scrivialabs@gmail.com