How Swedworks Global handles your personal data.

1. Who we are

Swedworks Global is a specialist practice for Swedish work permit application processing. The legal entity behind Swedworks Global is Iconic Digital Solutions LLC, registered in the United Arab Emirates.

For the purposes of the EU General Data Protection Regulation (GDPR), Iconic Digital Solutions LLC is the data controller for personal data submitted through the swedworks.com website and related services. We process personal data of residents in the EU/EEA and other jurisdictions in connection with Swedish work permit consultancy services.

Contact:
Iconic Digital Solutions LLC
Office #7, The Village Mall, Jumeirah Beach Road
Dubai, United Arab Emirates
Email: support@swedworks.com

2. What personal data we collect

We collect only data you actively provide, plus limited technical data needed to run the website.

2.1 Data you provide through forms

When you submit our contact or evaluation form (powered by Jotform), we collect:

• Your name
• Email address
• Company name (if you provide it)
• Your location (city / country)
• Details about your situation — role, employer in Sweden, timing, case type, and any description you choose to include
• Your employer’s name and contact details (if you choose to provide them)

For employer enquiries, the form also asks:

• Whether the company is older than one year
• Whether the company has employed people on a work permit before
• The industry sector (SNI code) of the company

2.2 Consent fields

Our form includes two consent checkboxes:

• Consent to processing (mandatory): you authorise Swedworks Global to process the data you submit for the purpose of preliminary assessment of eligibility for a Swedish work or residence permit. You may withdraw consent and request deletion at any time.
• Marketing consent (optional): if you tick this box, you authorise us to send relevant news and marketing emails. Your email is not sold or shared with third parties for marketing purposes. You can withdraw this consent at any time.

2.3 Technical data collected automatically

When you visit the website, we may collect:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website
• Approximate geographic location (country / region)

This data is collected through Google Analytics 4, Google Search Console, and (if installed) Microsoft Clarity. We do not collect this data to identify you personally — only to understand how the website is used.

3. Why we process your data (purpose & legal basis)

Purpose	Legal basis (GDPR Article 6)
Responding to your enquiry and preliminary assessment of your case	Consent (Art. 6(1)(a)) — given via the mandatory consent box on the form
Providing work permit consultancy services if you become a client	Performance of a contract (Art. 6(1)(b))
Sending marketing emails about Swedish work permit topics	Consent (Art. 6(1)(a)) — given via the optional marketing consent box
Improving the website and understanding visitor behaviour	Legitimate interest (Art. 6(1)(f)) — with aggregated, non-identifying analytics
Complying with legal and regulatory obligations	Legal obligation (Art. 6(1)(c))

4. How long we keep your data

• Enquiry data (forms not converted to client engagements): retained for up to 24 months, then deleted, unless you request earlier deletion.
• Client case data: retained for the duration of the engagement plus the legally required retention period for business and tax records (typically 7 years under Swedish accounting law; UAE corporate record-keeping requirements also apply).
• Marketing consent records: retained as long as you remain subscribed, plus 12 months after unsubscribe for compliance audit purposes.
• Website analytics: aggregated and retained per the standard retention settings of Google Analytics 4 (typically 14 months by default).

5. Who we share data with

We share personal data only with parties necessary to deliver our services or operate the website. These include:

• Jotform Inc. — form processing and storage
• HubSpot, Inc. — CRM and lead management (where applicable)
• Google LLC — Google Analytics 4 and Google Search Console
• Microsoft Corporation — Microsoft Clarity (if installed)
• Migrationsverket (Swedish Migration Agency), Swedish trade unions, insurance providers, Arbetsförmedlingen, and Swedish embassies/consulates — when you engage us as your representative and a power of attorney has been signed, we share case-relevant data with these authorities to process your application
• Our trusted freelance case managers — bound by confidentiality agreements
• Tax authorities, auditors, and legal advisors — where required by law

We do not sell your data. We do not share your data with advertisers or unrelated third parties.

6. International data transfers

Because Iconic Digital Solutions LLC is established in the UAE and we process data of EU/EEA residents, personal data is transferred outside the EU/EEA. Where this occurs:

• Transfers to the UAE are made on the basis of your explicit consent and the legitimate operational necessity of the service.
• Transfers to US-based service providers (Google, Microsoft, Jotform, HubSpot) rely on those providers’ adherence to the EU–US Data Privacy Framework or equivalent safeguards, including Standard Contractual Clauses where applicable.
• Transfers to Swedish authorities occur within the EEA and are governed by EU data protection law.

If you would like more information about the specific safeguards in place, contact us at support@swedworks.com.

7. Cookies and tracking

The website uses cookies and similar technologies for:

• Essential website functionality — required to deliver the site (e.g. session cookies)
• Analytics — Google Analytics 4 and (where installed) Microsoft Clarity, to understand how the site is used
• Form handling — Jotform’s own cookies to deliver the form

We do not use advertising or third-party marketing cookies. On first visit, you’ll see a cookie consent notice giving you the option to accept or reject non-essential cookies. You can change your cookie preferences at any time via your browser settings.

8. Your rights under GDPR

If you are in the EU/EEA, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure (“right to be forgotten”) — request deletion of your data, subject to legal retention obligations
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
• Right to lodge a complaint with a supervisory authority — in Sweden, this is Integritetsskyddsmyndigheten (IMY)

To exercise any of these rights, email support@swedworks.com. We will respond within 30 days.

9. Data security

We take reasonable technical and organisational measures to protect your data, including:

• Encrypted connections (HTTPS / TLS) across the website
• Restricted access — only authorised personnel and contracted case managers can access case data
• Confidentiality agreements with all freelance case managers
• Use of reputable, GDPR-compliant service providers for form handling, CRM, and analytics
• Regular review of our data handling practices

No system can be guaranteed 100% secure. If a data breach occurs that affects your rights, we will notify you and the relevant supervisory authority within the timeframes required by GDPR.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service providers. Material changes will be communicated by email to existing clients or by a prominent notice on the website. The “Last updated” date at the top of the policy shows when the most recent change was made.