Last updated: 18 October 2026
This policy explains how MartensLink AB handles personal data when you visit martenslink.com, contact our support, or buy one of our products. Each product also has its own privacy policy that explains what the product does with data. For MartensLink Events, see the Privacy Policy for Events.
1. Who is responsible
MartensLink AB (corporate identity number 559580-3437), Roslagstullsbacken 13C, 114 21 Stockholm, Sweden, is the controller of the personal data described in this policy.
For questions about privacy, or to use your rights, email privacy@martenslink.com.
2. In short
- We collect as little as possible: what you send us, and what is needed to sell you a licence.
- We do not sell your data, we do not use it for advertising, and we do not use tracking cookies.
- Payments are handled by Paddle. We never see your card details.
- Your events, forms and participants stay in your own Google account. We do not receive them.
3. What we collect, why, and on which legal basis
3.1 When you contact us
When you use our contact form or email us, we receive your name, your email address, what you write, and anything you attach. The form also tells us which product and topic you chose.
- Why: to answer you and solve your case, and to improve our products and help pages based on what you ask about and suggest.
- Legal basis: our legitimate interest in answering questions and improving our products and our help (GDPR Article 6(1)(f)), or, if you are a customer, to fulfil our agreement with you (Article 6(1)(b)).
- How long: we delete support conversations 24 months after the last message in them. Copies of files that you send us are deleted when your case is solved. Form submissions are not stored on our website. They are sent straight to our email.
Please do not send us sensitive personal data, or your participants’ personal data, unless we ask for it. If you need to show us something, blur names or use made-up data.
3.2 When you buy a licence
Paddle (Paddle.com Market Limited) is the Merchant of Record for our orders. Paddle collects your payment details, billing address and tax information, and processes them as an independent controller under Paddle’s privacy policy. From Paddle we receive your name, email address, country, what you bought, your subscription status, and invoice and order details. We never receive card numbers.
- Why: to give you access to what you paid for, check your licence, manage your subscription, help you with billing questions, and keep accounts.
- Legal basis: to fulfil our agreement with you (Article 6(1)(b)), and to meet our legal obligations, for example under the Swedish Bookkeeping Act (Article 6(1)(c)).
- How long: for as long as you are a customer, and then for as long as accounting law requires (currently 7 years after the end of the financial year), or until a dispute has been settled.
3.3 Licence check in our products
To know whether you have a paid licence, our products ask our licence service. Google confirms which Google account it is, and the licence service keeps only an encrypted key derived from the account’s ID, not your email address or name. The licence service learns from Paddle when a purchase is made, renewed, refunded or ended, and keeps Paddle’s references for the purchase, the licence status and whether a purchase has been refunded.
If you buy on our website, you sign in with Google on the checkout page, so that the purchase is linked to the right account. Your email address is shown to you there but is not stored by us.
The Privacy Policy of each product describes exactly how.
3.4 Emails from us
We send emails that are needed for your purchase and your use of our products, such as receipts (from Paddle), important changes to terms or prices, and security notices. Legal basis: our agreement with you (Article 6(1)(b)).
We only send newsletters or marketing if you have asked for them, and you can unsubscribe at any time with the link in each email. Legal basis: consent (Article 6(1)(a)).
3.5 When you visit our website
Our web host processes technical data, such as IP address, browser and the pages requested, to deliver the website and protect it against attacks. These server logs are kept for a short time, normally no more than a few weeks. Legal basis: our legitimate interest in running a secure website (Article 6(1)(f)).
Our contact form is protected against spam by Cloudflare Turnstile. When you use the form, Cloudflare processes technical data from your browser and device, such as your IP address, to tell people from automated programs. Turnstile does not use cookies for advertising or tracking. Legal basis: our legitimate interest in protecting our support from spam (Article 6(1)(f)).
4. Cookies
Our website does not use cookies for tracking or advertising. Cookies that are strictly necessary for the website to work, for example for logged-in administrators or for security, may be used, and they do not require consent. The website also stores a cookie (pll_language) that remembers which language you chose, so that pages are shown in the right language next time. It contains only the language code. If we start using other cookies, we will ask for your consent first and update this policy.
5. Who we share data with
We do not sell personal data, and we do not share it for advertising. We only share it with:
| Recipient | What they do | Role |
|---|---|---|
| Paddle.com Market Limited (UK) | Checkout, payments, invoices, tax, refunds | Independent controller (Merchant of Record) |
| Google Ireland Limited (Google Workspace) | Our email and documents, where support conversations are stored | Processor |
| Our web host, Egensajt (Sweden) | Hosting our website | Processor |
| Cloudflare, Inc. (USA) | Spam protection in the contact form (Turnstile), and running our licence service | Processor |
| Google (Sign in with Google on the checkout page) | Confirms which Google account you are when you buy on the website | Independent controller |
| Authorities, courts, advisers | When the law requires it, or to defend legal claims | Independent controllers |
If we sell or transfer our business, data may be transferred to the new owner, who must then follow this policy.
6. Transfers outside the EU/EEA
We try to keep data within the EU/EEA. Some of our providers may process data outside the EU/EEA, for example in the United States. When that happens, the transfer is protected by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework for certified companies, or the decision for the United Kingdom) or by the European Commission’s standard contractual clauses. Email privacy@martenslink.com if you want to know more.
7. Your rights
Under the GDPR you have the right to:
- get a copy of the personal data we hold about you (access);
- have incorrect data corrected;
- have data deleted, unless we must keep it, for example for accounting;
- restrict our processing in certain cases;
- receive data you have given us in a machine-readable format (portability);
- object to processing that is based on our legitimate interest;
- withdraw your consent at any time, where processing is based on consent.
Email privacy@martenslink.com. We answer within one month. We may need to confirm who you are first.
You also have the right to complain to a supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se). You can also complain to the authority where you live or work.
8. If you live in the United States
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use personal information only for the purposes described in this policy. Whatever state you live in, you can ask us what personal information we hold about you, and ask us to correct or delete it, by emailing privacy@martenslink.com. We will not treat you differently because you use these rights.
9. Children
Our website and products are meant for adults who organise events. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.
10. Security
We protect personal data with measures suited to the risk, including encrypted connections (HTTPS), two-step verification on all our accounts, access only for the people who need it, and regular updates of our website. No method is completely secure, but we work to keep your data safe and will tell you and the authorities as the law requires if a breach affects you.
11. Changes to this policy
We may update this policy. If a change is material, we will tell you by email or on our website before it applies. The date at the top shows when it was last updated.
12. Contact
MartensLink AB
Roslagstullsbacken 13C, 114 21 Stockholm, Sweden
Privacy: privacy@martenslink.com · Support: support@martenslink.com