Privacy notice

Who is responsible

Analytics and cookie choices

We use Google Analytics 4 only if you select Accept analytics. Until then, the website does not load Google Analytics, contact Google, or set analytics cookies. Rejecting analytics does not limit your use of the website. You can change or withdraw your choice at any time by selecting Cookie settings.

The strictly necessary preference cookie campfire_analytics_consent records only granted or denied for 180 days so the website can respect your choice. It is not used to measure you.

After acceptance, Google Analytics may set the _ga cookie family for up to two years. Enhanced Measurement is enabled and may measure page views, scrolls, outbound clicks, site searches, video interactions, file downloads, and form interactions where those features exist. We also measure selected contact-link, call-to-action, and chart-view choices using fixed categories rather than their visible text or destination values.

Information we process and why

When you contact us by email or phone, we process your contact details, message, and related correspondence so we can answer your inquiry, take requested pre-contractual steps, and manage legitimate business communications. The legal bases are steps requested before entering a contract and our legitimate interests in responding to and managing business inquiries.

Google Cloud and the website's necessary security and availability services process request and diagnostic information such as IP address, timestamp, requested URL, user agent, response status, and security or trace information. This is needed to deliver, secure, troubleshoot, and monitor the website, based on our legitimate interests in operating a secure and reliable service.

If you accept analytics, Google Analytics may process online identifiers, browser and device information, approximate location, page and interaction data, and timestamps to provide aggregated website-use statistics. This can include page URLs, referring URLs, and destination URLs collected by Enhanced Measurement. The legal basis is your consent. We do not intentionally place names, email addresses, telephone numbers, or other direct identifiers in public page URLs or send user IDs or form values through our local analytics events. Google's email-address data redaction is enabled as an additional safety measure. Google Signals is disabled, user-provided data collection is disabled, and personalized advertising is disabled.

Who receives information

Information may be available to authorized Campfire personnel and service providers supporting hosting, security, communications, or professional obligations. Google Cloud hosts this website, and Microsoft 365 provides email services. If you accept analytics, Google Ireland Limited and its approved subprocessors receive the analytics information described above to provide Google Analytics 4.

A provider may process information outside Sweden or the EEA only where an applicable legal transfer mechanism and safeguards are in place, such as an applicable adequacy decision, including the EU-US Data Privacy Framework for participating organizations, or standard contractual clauses.

How long information is kept

Unanswered or completed inquiry correspondence is normally deleted after 12 months. If correspondence becomes part of a customer, supplier, contractual, legal, dispute, or accounting record, it is kept for the longer period needed for that purpose or required by law.

Security and hosting logs follow the configured provider and service retention settings and are kept only as long as needed for security, availability, and troubleshooting.

Google Analytics event data is configured for 2 months and user data for 14 months, with user-data retention reset on new activity. These controls do not affect some aggregated standard reports. The consent preference cookie is kept for 180 days, and analytics cookies may remain for up to two years unless you withdraw consent or delete them sooner.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, objection, or data portability. Where processing relies on consent, you may withdraw that consent. Contact us at fredrik.uddenfeldt@campfire.health.

You also have the right to complain to Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection.

Changes to this notice

We will update this notice before materially changing analytics, introducing forms or advertising, or adding other nonessential cookies.

Last updated: 12 August 2026