How we handle your data.

1. Who we are

New Digital i STKLM AB (“NewDGTL”, “we”, “us”) is the data controller for any personal data you provide via this website.

Contact:
Email: hello@newdgtl.ai
Phone: +46 8 631 90 34
Headquarters: Stockholm, Sweden

2. What data we collect

We only collect data that you actively provide to us through forms on this site:

• Strategy call request (/book): name, role, email, phone, company, website, your 12-month goal, current challenge, desired outcome of the call.
• Audit order (/order): company name, Swedish org.nr, VAT number (optional), invoice address, contact name, role, email, phone, optional notes.
• Case study download (/download-case): first name, last name, role, email, phone, company, the case study you requested.
• Growth System Assessment (/assessment): first name, email, company, role, your answers to 12 questions, the resulting score and stage.
• Contact form (/contact): name, email, company, message.

We do not use cookie-based tracking, advertising pixels, third-party analytics that profile users, or any form of behavioural advertising on this site.

3. Why we collect it (legal basis)

We process your data on the following GDPR bases:

• Performance of a contract (Art. 6(1)(b)) — to deliver an audit you have ordered, schedule a strategy call you have booked, or send a case study you have requested.
• Legitimate interest (Art. 6(1)(f)) — to follow up briefly with people who have actively requested information from us, in a manner consistent with their original request. You can opt out at any time.
• Legal obligation (Art. 6(1)(c)) — to keep accounting records of paid engagements as required by Swedish law.

4. How long we keep your data

• Strategy call brief, case download, contact form: up to 24 months from the last meaningful interaction, then deleted.
• Audit orders and invoiced engagements: 7 years, as required by Swedish accounting law (Bokföringslagen 1999:1078).
• Assessment submissions: up to 24 months. The aggregated score data may be retained longer in anonymised form for research and product development.

5. Where your data lives

Your data is stored on:

• Vercel KV (powered by Upstash) — primary form-submission storage. EU region where available.
• Resend — transactional email delivery for confirmations and notifications.
• Vercel — hosting and edge runtime.

These providers act as data processors under GDPR. Some processing may take place outside the EU/EEA; in those cases the providers rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Who can see your data

Inside NewDGTL, only Kenneth Backman (founder) has access to submission data. We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may share data with the following categories of recipient when strictly necessary:

• The hosting and email providers listed in Section 5 (acting as our processors).
• Our accountant and Swedish tax authorities, in connection with invoiced engagements.
• Authorities, if required by law.

7. Your rights under GDPR

You have the right to:

• Request a copy of the personal data we hold about you (access).
• Have inaccurate data corrected (rectification).
• Have your data deleted, where one of the GDPR grounds applies (erasure / right to be forgotten).
• Restrict or object to our processing.
• Receive your data in a portable format (data portability).
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email hello@newdgtl.ai. We aim to respond within 30 days.

If you believe we are not handling your data lawfully, you can lodge a complaint with the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY).

8. Security

We protect your data with industry-standard measures: TLS encryption in transit, scoped API tokens, access logging on the admin dashboard, and one-time delivery channels for sensitive replies. We do not store credit-card data — payment-related fields (such as org.nr or VAT number) are used solely to issue invoices via our accounting tool.

9. Cookies

This site uses no analytics, advertising, or tracking cookies. The only cookies set are strictly functional and used for the admin login session (ila_admin) on protected admin routes. Public pages set no cookies.

10. Changes to this policy

We may update this policy when our practices or the law change. The “Last updated” date at the top of the page reflects the most recent revision. Material changes that affect your rights will be communicated by email where we have your address.

11. Contact

Questions about this policy? Email hello@newdgtl.ai or call +46 8 631 90 34.