Privacy Policy

Last updated: 5 November 2026

This policy explains which personal data Adoptify processes, why we do it, how long we keep it and what rights you have. We only collect what we need, keep it no longer than necessary and never sell your personal data to anyone.

1.Who is responsible for your personal data?

Adoptify AB, company reg. no. 559377-0646 ("Adoptify", "we"), is responsible for the processing of personal data described in this policy.

If you have questions about how we handle personal data, or want to exercise your rights, write to info@adoptify.se.

2.Our roles

Our role depends on the data:

  • Controller. When we decide why and how the data is used, for example when you contact us, fill in a form on our website, when we contact you in your professional role, or when your organisation is our customer or supplier. This policy then applies in full.
  • Processor. When we process data on behalf of your employer in our services, for example your account and activity in EverGrow. Your employer is then the controller, and the processing is governed by the data processing agreement we have with your employer.

We sign data processing agreements as part of our customer contracts and are happy to use the customer's own template.

3.What data we process and why

The data we process depends on how you come into contact with us. Each situation is described below.

If you contact us or fill in a form

This includes, for example, the contact form, signing up for Weekly Tips, an EverGrow trial and our self-assessments (for example for Microsoft 365 and AI).

What data?
Name, work email address, organisation and what you write to us. For trials, also the number of users and the chosen plan. For self-assessments, also your answers and your result.
Why?
To answer your request, give you access to what you signed up for, send you your result and contact you about how we can help your organisation.
Legal basis
Consent (Article 6(1)(a) GDPR), which you give by ticking the box in the form. You can withdraw your consent at any time by writing to info@adoptify.se.
How long?
If we have had no contact for 12 months we delete the data, unless you have become a customer. If you withdraw your consent, we delete it sooner.

If we contact you in your professional role

We sometimes contact people we believe would benefit from our services in their work, for example system administrators, IT managers and people working with skills development. In that case we process personal data about you even though you have not contacted us yourself.

What data?
Name, work email address, organisation and job role. If we are in contact, we also keep what we have sent you, what you have replied and any meetings we book.
Where does the data come from?
From places where you appear in your professional role, for example your organisation's website, professional networks such as LinkedIn and attendee or exhibitor lists from industry events. If you want to know exactly where we found your details, we will tell you.
Why?
To tell you about services that may be relevant to your work and to book meetings.
Legal basis
Legitimate interest (Article 6(1)(f)). We have weighed our interest in reaching out against your interest in not being contacted. We only use data related to your professional role, only write about matters relevant to your work and stop immediately if you say no.
How long?
If we have had no contact for 12 months we delete the data. If you say no, we keep only your name and email address on a suppression list so that we do not contact you again.
You can always say no
You have the right to object at any time to our use of your data for direct marketing. Reply "no thanks" to any of our emails or write to info@adoptify.se, and we will stop.

If you are a contact person at a customer, partner or supplier

What data?
Name, email address, phone number, organisation and job role, our communication with you and details needed for contracts and invoicing.
Why?
To deliver and administer our services, manage contracts and invoices, provide support and maintain our business relationship.
Legal basis
Legitimate interest (Article 6(1)(f)) in being able to perform the contract with your organisation. For accounting records: legal obligation (Article 6(1)(c)) under the Swedish Bookkeeping Act.
How long?
For as long as the business relationship lasts and 12 months thereafter. Accounting records are kept for seven years after the end of the calendar year in which the financial year ended, as required by the Swedish Bookkeeping Act.

If you use EverGrow

When your employer uses EverGrow, we process the data on your employer's behalf as a processor. Your employer is the controller.

What data?
The only personal data we store about you in EverGrow is your email address, which is used for your account. Your activity in the service is recorded against an anonymous ID that we cannot link back to you. Personal details shown in the app are stored in your organisation's own Microsoft environment.
Usage and device information
We record how the service is used, for example which parts are visited, any errors and whether messages have been shown, as well as technical information such as device type, operating system and screen resolution. We use this to find errors, tailor the experience and develop EverGrow further.
Support and feedback
If you start a case with us yourself, for example about support or feedback, we are the controller for that case. We then keep your name, email address and information about the case in order to answer it (legitimate interest, Article 6(1)(f)). The data is deleted 12 months after the case is closed.
How long?
Data in the service is kept for as long as your employer uses EverGrow and is deleted in accordance with the data processing agreement when the contract ends.

If you visit our website

What data?
We do not use any visitor analytics or ad tracking tools on adoptify.se. Our website runs on Microsoft Azure, which may record technical data such as IP addresses in operational logs.
Why?
To deliver the website and protect it against errors and abuse.
Legal basis
Legitimate interest (Article 6(1)(f)) in a secure and working website.
How long?
Operational logs are kept for a limited time and then deleted automatically.

4.Who we share your data with

Only Adoptify employees who need the data for the purposes described here have access to it. We never sell personal data.

Microsoft is our only sub-processor. Our website, services, storage and our in-house CRM, which handles contacts, support and email, run on Microsoft 365 and Microsoft Azure. No other party processes personal data on our behalf.

We may also disclose data to public authorities when required by law. If we start using additional sub-processors, we will update this policy.

5.Where we process your data

Your personal data is stored and processed in Sweden and within the EU/EEA. If data is exceptionally processed outside the EU/EEA, for example by Microsoft for support, this is based on the European Commission's adequacy decision (EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.

The data is protected by encryption and access controls, and we have internal routines for deleting data that is no longer needed.

6.Your rights

Under the GDPR you have the right to:

  • know what personal data we hold about you and receive a copy of it, free of charge
  • have inaccurate or incomplete data corrected
  • have your data erased if it is no longer needed or if we have no basis for processing it
  • request that processing is restricted
  • receive data you have provided in a machine-readable format (data portability)
  • object to processing based on legitimate interest – for direct marketing we always stop immediately
  • withdraw consent at any time, without affecting processing that took place before

Write to info@adoptify.se and we will respond within one month. For data we process on behalf of your employer, we will help your employer respond. Sometimes we are required by law to keep certain data, for example accounting records. In that case we keep only what we must and do not use it for anything else.

7.Cookies

The adoptify.se website does not use cookies for analytics or marketing. Any strictly necessary cookies, for example to remember your language choice, do not require consent.

In EverGrow we use cookies and similar technologies to make the service work and to understand which features are used, so that we can improve it.

8.Complaints

If you think we are processing your personal data incorrectly, we would appreciate it if you contact us first at info@adoptify.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at any time, www.imy.se.

9.Changes to this policy

We may update this policy, for example if we change how we process personal data or start using new sub-processors. The date at the top shows when the policy was last changed. In the event of significant changes, we will inform those affected.