Privacy Notice – CYouMedia Sweden AB
English version · Last updated: October 9, 2026
CYouMedia Sweden AB explains here how we use personal data, why, and what rights you have. We keep it short and plain.
1. Who we are
This website and our services are operated by CYouMedia Sweden AB, org. no. 559339-5501, c/o Holmgren, Barkarbyvägen 46, 177 44 Järfälla, Sweden. We are the data controller for the personal data described here.
Privacy questions and requests: info@cyoumedia.com
2. Your right to stop marketing
You can object to marketing from us at any time, free of charge. Tell us during a call, reply to any message, or write to info@cyoumedia.com. We will stop, and keep a minimal "do not contact" record so that you are not contacted again.
3. What information we collect
- Business contact details: business phone number, business email address.
- Business information: business name, category, website address and public website content relevant to our services.
- Lead-source information: where and when we found your details.
- Sales and call records: call date, time, outcome, notes, correspondence, quotes, and call recordings (see section 6).
- Customer information: contracts, instructions, billing details and support records.
- Access details you choose to give us (for example domain or hosting login details) so that we can carry out agreed work.
- Contact form messages: name, business name, business email address and your message.
- Privacy records: marketing objections and requests you make about your data.
4. Where we get information
- Public sources: business websites and Swedish business directories, collected with our own automated tools.
- You: when you speak to us, fill in our form or become a customer. If you give us a different or personal number during a call, we use it only for the purpose you gave it.
- Our sales partners: companies and representatives who contact businesses on our behalf.
- Some partners also contact businesses on their own behalf. Their own privacy notices apply to that, and we do not control how they use their own data.
When we get your details from a source other than you, we tell you about this notice at our first contact, and in any case within one month. You can ask us at any time where we found your details.
5. Why we use your information and our legal basis
| Purpose | Legal basis |
|---|---|
| Finding and contacting businesses that may need our services, by phone and, where permitted by law or with your consent, by email | Legitimate interests (GDPR Art. 6(1)(f)): developing our business with relevant businesses. You can object at any time. |
| Answering enquiries and preparing quotes | Steps at your request before a contract (Art. 6(1)(b)); legitimate interests |
| Delivering our services, support and account management | Contract (Art. 6(1)(b)); for business contacts, legitimate interests |
| Using access details you give us to carry out agreed work | Contract |
| Documenting calls and agreements, quality and training | Legitimate interests |
| Invoicing, accounting and legal records | Legal obligation (Art. 6(1)(c)) |
| Security and preventing misuse | Legitimate interests |
| Remembering that you do not want to be contacted | Legal obligation; legitimate interests |
We do not make decisions about you based solely on automated processing that has legal or similarly significant effects.
6. Phone calls and recordings
We record sales and support calls. We tell you at the start of each call that it is recorded, and you can ask us not to record. We use recordings to document what was agreed, handle complaints and disputes, and for quality and training. Our legal basis is legitimate interests. Recordings are kept for 90 days unless needed for a dispute or claim, and only authorised staff can listen to them.
7. Who receives your information
Only people who need it for their work, and organisations that support us:
- IT, hosting and security providers
- CRM, telephony and communication providers
- AI service providers (see section 8)
- Sales and telemarketing partners acting for us
- Our group companies and outsourced service teams
- Accountants, advisers and, where the law requires, authorities
Providers that handle personal data for us are bound by written agreements and may only act on our instructions.
8. Use of AI
We use AI service providers to analyse, redesign and optimise websites, and to produce text and images. Website content can include personal data such as business contact details. We do not send passwords or login details to AI services.
9. Transfers outside the EU/EEA
Our servers are located in the United Kingdom, which the European Commission recognises as providing an adequate level of data protection.
Some of our group companies/outsourced teams and service providers are located outside the EU/EEA and may access or process personal data on our behalf. We protect these transfers with the European Commission's Standard Contractual Clauses and additional safeguards such as access controls and confidentiality commitments. You can ask for a copy of the safeguards at info@cyoumedia.com.
10. How long we keep information
| Information | Retention |
|---|---|
| Leads we have not converted | 12 months from collection or last contact, then deleted |
| "Do not contact" record | 3 years |
| Quotes and enquiries | 12 months after last activity |
| Customer and service records | Contract term plus 2 years |
| Accounting records | 7 years (Swedish bookkeeping rules) |
| Customer login details | Deleted within 14 days after the contract ends |
| Call recordings | 90 days |
| Contact form messages | 12 months after our last reply |
11. How we protect information
We use individual user accounts, role-based access, encrypted connections, restricted handling of login details, logging and backups. We recommend giving us delegated or limited access to your domain or hosting where possible, rather than owner passwords.
12. Website and cookies
We do not use advertising or tracking cookies on this website. When you send a message through our contact form, it reaches us by email and is used only to reply to you.
13. Your rights
You have the right to access your data and receive a copy; correct it; have it deleted; restrict its use; object to processing based on legitimate interests; object to direct marketing at any time; and receive your data in a portable format where applicable.
Contact info@cyoumedia.com. We normally reply within one month, and may need to verify your identity.
You can complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se, or the authority in the country where you live or work.
14. Providing information
Giving us information in a sales conversation or through our form is voluntary. If you become a customer, some information is needed to prepare and perform the contract.
15. When we act for our customers
When we host or manage a customer's website that holds personal data of the customer's own visitors or customers, we act as the customer's data processor, under a data processing agreement. The customer is then the controller and is responsible for informing its own users.
16. Changes
We update this notice when our operations or the law change. The current version, with its date, is always on this page.