Legal

Privacy Policy

Last updated: September 2026

Your privacy matters to us. This policy explains what personal data Topra collects, why we collect it and the rights you have under the GDPR.

1. Who we are

Topra is a digital marketing agency. We are the data controller for the personal data we process about visitors, leads and clients. You can reach us at hello@topra.ai regarding any privacy questions.

2. What data we collect

We collect information you give us directly (name, email, company and message via our contact forms), and technical data collected automatically when you browse the site (IP address, browser type, pages visited and approximate location).

3. How we use your data

We use your data to respond to inquiries, deliver our services, send marketing communications you have consented to, analyze and improve the website, and meet legal obligations. We never sell your personal data.

4. Legal basis (GDPR)

We process personal data based on: consent (e.g. newsletters and cookies), performance of a contract or pre-contractual steps (responding to your inquiry), legitimate interest (site analytics and security), and legal obligations (accounting and tax rules).

5. Cookies

We use cookies and similar technologies for essential site functionality, analytics and — with your consent — marketing. You can change or withdraw your cookie consent at any time in your browser settings.

6. Who we share data with

We share data only with trusted processors needed to run our business, such as hosting providers, analytics tools and email platforms. All processors are bound by data processing agreements. Data may be transferred outside the EU/EEA only with appropriate safeguards.

7. How long we keep data

We keep personal data only as long as necessary for the purposes described above. Contact form submissions are kept for up to 24 months; client data is retained for the duration of the relationship plus any period required by law.

8. Your rights

You have the right to access, correct, delete or restrict the processing of your personal data, to data portability, and to object to processing based on legitimate interest. You may withdraw consent at any time and lodge a complaint with your national data protection authority (in Sweden: Integritetsskyddsmyndigheten, IMY).

9. Security

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss or misuse, including encryption, access controls and staff training.

10. Changes to this policy

We may update this privacy policy from time to time. The latest version is always published on this page with the date of the most recent update.