Legal & Governance
Last Revised: September 12, 2026 — PixelVisionCraft, Storvreta, Sweden
1. Privacy Policy
PixelVisionCraft, registered at 743 91 Lena-Ängeby 152, Storvreta, Sweden ("we", "us", "our"), is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR).
Data We Collect: When you submit a project kickoff form or contact us, we collect your name, email address, phone number, company name, project details, and any information voluntarily provided in communications.
Purpose of Processing: Your data is processed exclusively for client communication, project delivery, invoicing, and statutory compliance obligations. We do not sell, rent, or distribute personal information to unauthorized third-party brokers.
Data Retention: Personal data is retained for the duration of the active client relationship and up to 7 years thereafter to comply with Swedish bookkeeping regulations (Bokföringslagen 1999:1078). Data is stored in encrypted, EU-hosted cloud infrastructure.
Your Rights: You have the right to access, rectify, erase, restrict processing, object to processing, and port your personal data. To exercise these rights, contact us at [email protected].
Data Controller: PixelVisionCraft, 743 91 Lena-Ängeby 152, Storvreta, Sweden. Email: [email protected].
2. Terms of Service
These Terms of Service ("Terms") govern all engagements between PixelVisionCraft, registered at 743 91 Lena-Ängeby 152, Storvreta, Sweden, and any client engaging our services.
Scope of Work: All services — including UX research, UI design, prototyping, design system development, activation funnel optimization, and front-end engineering — are delivered under explicitly agreed Statements of Work (SOW) between PixelVisionCraft and the client.
Intellectual Property: Upon complete settlement of all agreed invoices, PixelVisionCraft irrevocably transfers all worldwide intellectual property rights in client-specific deliverables, design files, and digital assets directly to the client.
Payment Terms: Invoices are payable within 14 calendar days of issuance. Late payments incur a statutory interest rate of Riksbanken's reference rate plus 8% per annum in accordance with Swedish Räntelagen (1975:635).
Limitation of Liability: PixelVisionCraft's total aggregate liability for any engagement shall not exceed the total fees paid by the client under the relevant SOW. We shall not be liable for indirect, consequential, or incidental damages.
Governing Law: These Terms are governed by Swedish law. Disputes shall be settled by the Swedish courts, with Uppsala District Court as the court of first instance.
4. Refund & Reimbursement Policy
PixelVisionCraft, registered at 743 91 Lena-Ängeby 152, Storvreta, Sweden, is committed to transparent and fair refund practices in accordance with Swedish consumer protection law (Konsumentköpslagen 1990:932).
Cooling-Off Period: If you are a consumer (not acting in a business capacity), you have the right to withdraw from a distance purchase within 14 calendar days of the initial agreement without giving any reason, in accordance with EU Directive 2011/83/EU.
Milestone-Based Refunds: For project engagements structured with payment milestones, a refund may be requested for any milestone that has been paid but where work has not yet commenced. Once a milestone has been delivered and accepted, that portion is non-refundable.
Retainer Refunds: Monthly SLA retainer fees are billed at the start of each billing cycle. Cancellations made before the 1st of the month receive a full refund for that cycle. Cancellations made after work has commenced in a cycle are prorated.
Refund Process: To request a refund, contact us at [email protected] with your project reference number. Refunds are processed within 10 business days to the original payment method.
Exceptions: Custom design work, prototype deliverables, and code repositories that have been delivered and accepted are non-refundable. Disputes shall be settled in accordance with Swedish law.
5. Data Handling & Security Audits
Data Handling Lifecycle: All personal data collected by PixelVisionCraft follows a structured lifecycle: Collection → Processing → Storage → Retention → Secure Deletion. Each stage is governed by internal data processing agreements aligned with GDPR Article 28.
Security Audits: PixelVisionCraft conducts internal security audits quarterly and engages independent third-party auditors annually. Our infrastructure is hosted on EU-based cloud providers compliant with ISO/IEC 27001 standards.
Incident Response: In the event of a data breach, PixelVisionCraft will notify the Swedish Authority for Privacy Protection (IMY) within 72 hours and affected data subjects without undue delay, in accordance with GDPR Articles 33 and 34.
Encryption: All data in transit is encrypted via TLS 1.3. Data at rest is encrypted using AES-256 encryption. Backup systems maintain the same encryption standards.
6. Client Rights Summary
Under GDPR and Swedish consumer protection law, you have the following rights:
- •Right of Access: Request a copy of all personal data we hold about you.
- •Right to Rectification: Request correction of inaccurate or incomplete data.
- •Right to Erasure: Request deletion of your data where there is no compelling legal reason for continued retention.
- •Right to Restrict Processing: Request limitation of how we process your data.
- •Right to Data Portability: Receive your data in a structured, machine-readable format.
- •Right to Object: Object to processing based on legitimate interests or direct marketing.
- •Right to Lodge a Complaint: File a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
To exercise any of these rights, contact our Data Protection representative at [email protected]. We will respond within 30 days.