Forqena

Privacy and Article 14 information

Privacy notice

A plain-language account of what we collect, why we use it, who receives it, and how to exercise your rights.

Version 1.1 · Effective 28 August 2026

1. Who controls your data

Emil Sundell AB, organisation number 559208-2951, is the controller for personal data processed under the Forqena brand.

Postal address
Hövägen 55, 446 32 Älvängen, Sweden
Privacy contact
privacy@forqena.com

2. Data, sources, purposes and legal bases

Data and sourcePurposeLegal basis
Business name, role, work email, company and public source URL, obtained from a company website, a relevant public business directory, or directly from you.Assess fit and conduct limited, individually relevant B2B outreach.Legitimate interests in offering a narrowly relevant business service. We document the balancing test and minimise the data used.
Your email, message content and qualification answers.Respond to enquiries, run a preflight and prepare an order.Steps requested before a contract and our legitimate interests in operating support.
Company identity, billing, transaction and delivery records.Form, perform and document a B2B order; invoicing, tax and bookkeeping.Contract and legal obligations.
Minimal email hash/domain, date and reason after an objection.Prevent further outreach.Legal compliance and legitimate interests in respecting suppression.
Technical request, security and error logs, which may include IP address and user agent.Deliver, secure and troubleshoot the website.Legitimate interests in a secure and reliable service.

We do not buy email lists, guess personal addresses, use hidden tracking pixels, or use visitor data for behavioural advertising.

3. If we contacted you first

This section is the information provided when data was not collected directly from you. We use a public business contact only after checking the company, the relevance of the role or contact route, and the source. The first message identifies the commercial purpose, links to this notice and offers a simple reply-based opt-out.

You may object to direct marketing at any time. We stop that processing immediately in our operating workflow and retain only the minimum suppression record needed to avoid contacting you again.

4. Customer source files

Do not email source files, credentials, customer records or Shopify access. We accept one CSV, XLSX or PDF only through an approved, one-time upload route after scope and rights checks. Version 1 does not accept source files containing personal data.

Accepted source files are used only to run the requested preflight and produce an accepted catalog output. They are not used to train models. An uploaded source is scheduled for deletion no later than 14 days after upload and may be deleted earlier on request. A minimal order, rights and audit record may be kept where required for contract, accounting, security or legal needs.

5. Service providers and transfers

We use selected providers for business email, website hosting and security, payment processing when checkout is activated, and transactional delivery after an enquiry or order. The website and access-controlled upload route use OpenAI ChatGPT Sites, with Cloudflare infrastructure for hosting, database and object storage. They process only the data needed for their role under contractual controls. Cold outreach is not sent through Postmark.

Where a provider processes data outside the EU/EEA, we use an applicable adequacy decision or contractual transfer safeguards and supplementary measures as required. Contact us for current provider and transfer information relevant to your data.

6. Retention

  • Non-responsive prospect records are normally reviewed and deleted within 60–90 days after the last contact.
  • Enquiry and support records are kept only as long as reasonably needed to resolve the matter and document the outcome.
  • Uploaded source files follow the 14-day maximum deletion rule above.
  • Transaction and accounting records are retained for the period required by applicable law.
  • A minimal suppression record may be retained while relevant to prevent renewed marketing.

7. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You always have the right to object to direct marketing. Send a request to privacy@forqena.com. We may need proportionate information to verify that the request concerns you.

You may lodge a complaint with the Swedish Authority for Privacy Protection, IMY.

8. AI assistance and automated decisions

The service and mailbox may use AI assistance for extraction, classification and drafting under deterministic controls. The first commercial message discloses that the mailbox is AI-operated and human review is available. We do not make solely automated decisions that produce legal or similarly significant effects about individuals.

9. Cookies and changes

The launch site uses no non-essential cookies, advertising trackers or hidden recipient tracking. If that changes, we will update this notice and request consent before using non-essential cookies where required.

We may update this notice when the service or providers change. The version effective for an order is retained with the order record. Material changes are shown by a new version and effective date.