Privacy policy

This policy explains how Flobid handles personal data. The company that provides Flobid, named on this page under Company details, is the controller for the personal data described here.

What we collect

• Account data: name, e-mail address, phone number if you add it, language, and the company and role you belong to.
• Company data: company name, address, registration and VAT number, contact details and profile content. For suppliers this may come from public sources before the supplier signs up.
• Requests, quotes, messages and attachments you send through Flobid.
• Payment data: plan, invoices and payment status. Card details are handled by our payment provider and never stored by Flobid.
• Technical data: IP address, browser and pages visited, used to keep the service secure, prevent abuse and fix errors.
• With your consent only: analytics data about how the site is used (see the cookie policy).

Why we use it and on what legal basis

• To provide the service you or your company signed up for (performance of a contract).
• To match requests with suppliers and show public supplier profiles (legitimate interest in running a marketplace for businesses).
• To send messages about your account, requests and quotes (performance of a contract).
• To invite companies listed in the directory to claim their profile, only to general company addresses and with a way to opt out in every message (legitimate interest).
• To bookkeep payments (legal obligation).
• To keep the service secure and prevent fraud (legitimate interest).
• To measure how the site is used (consent).

Who we share it with

• Buyers and suppliers you deal with, as described in the terms.
• Service providers who process data on our behalf under data processing agreements: hosting and database, payments, e-mail delivery, AI services that suggest how to structure a request, and analytics if you have consented.
• The EU Commission's VIES service, to check VAT numbers.
• Authorities, when the law requires it.

Some providers may process data outside the EU/EEA. When they do, the transfer is covered by an adequacy decision or the EU standard contractual clauses.

How long we keep it

We keep account and company data while the account exists. When you delete your account, we delete or anonymise your personal data, except what we must keep by law, such as bookkeeping records, which are kept for seven years. Technical logs are kept for a limited time for security.

Your rights

You can request access to your data, correction, deletion, restriction or a copy in a portable format, and object to processing based on legitimate interest. You can export your data and delete your account in the settings of the app, or contact us through the contact page. Where processing is based on consent, you can withdraw it at any time; for cookies, use Cookie settings at the bottom of every public page.

If you are not satisfied with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the data protection authority where you live.

Changes

We publish changes to this policy here with the date they take effect.