Privacy Policy

Last updated: 19 September 2026. Draft — pending legal review.

1. Data controller

The controller is Caire tech AB, org.nr 559442-4391, Gjutargatan 4A, 112 48 Stockholm, Sweden. Contact: hello@cairetech.com. Data protection inquiries: dpo@cairetech.com.

2. What we collect

• Website forms: name, email, professional details, clinic/organization, and any free-text you submit (early access, referrals, advisory board).
• Technical data: IP address, browser type, device information, and pages viewed when analytics cookies are accepted.
• Consent records: your cookie preference (stored locally in your browser).

We do not ask for patient health data on this marketing website. Please do not submit sensitive medical information about identifiable patients through these forms.

3. Purposes and legal bases

• Responding to early-access and advisory requests — Art. 6(1)(b) and/or (f) GDPR (pre-contractual steps / legitimate interest in evaluating clinic interest).
• Operating and securing the website — Art. 6(1)(f) GDPR (legitimate interest).
• Analytics (Microsoft Clarity) — Art. 6(1)(a) GDPR (consent). Declining cookies prevents analytics from starting.

4. Recipients and processors

• Google Forms / Google LLC — form intake for early-access and advisory requests.
• Vercel Inc. — website hosting and cookieless analytics (where enabled).
• Microsoft Clarity — session analytics only after you accept cookies.

Processors are engaged under appropriate data-processing terms. Clinic product data processing (when the product is in production use) will be governed by a separate Data Processing Agreement with the clinic as controller.

5. International transfers

Some processors may process data outside the EEA (for example in the United States). Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and applicable transfer frameworks.

6. Retention

Form submissions are kept only as long as needed to evaluate and respond to your request, and for a reasonable follow-up period (typically up to 24 months), unless a longer period is required for legal claims or ongoing discussions. Analytics data is retained according to each provider’s settings. Cookie preferences remain in your browser until you clear them or change them.

7. Your rights

Under GDPR you may request access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. Contact dpo@cairetech.com. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.

8. Cookies

Essential cookies or local storage may be used for theme preference and remembering your cookie choice. Analytics cookies (Microsoft Clarity) are used only if you accept. You can change your mind anytime via Cookie settings in the site footer, or by clearing site data in your browser.

9. Changes

We may update this policy as the product and legal requirements evolve. Material changes will be reflected by updating the “Last updated” date on this page.