Privacy, cookies and website terms

For Hilliby's information website at hilliby.com and www.hilliby.com. Updated 14 September 2026.

Privacy policy

Controller and contact

Hilliby AB is the controller for the processing described here. Contact info@hilliby.com or the postal address above with questions or to exercise your rights.

Information, purposes and legal bases

When you contact us, we process your name, email address, optional organisation, message and subsequent correspondence. We use these to answer and follow up project enquiries and discuss potential partnerships. Our legal basis is our legitimate interest in handling incoming enquiries and developing relevant business relationships (GDPR Article 6(1)(f)). Processing is limited to what is needed for that contact.

If you personally ask us to take steps towards a contract with you, Article 6(1)(b) applies to that processing. Organisation is optional. The form requires your name, email and message; without a way to contact you we cannot reply. Please do not send personal identity numbers, health information or other sensitive details.

Our hosting provider processes technical information such as IP address, time, requested URL and browser details to deliver and protect the website. Our legitimate interest is secure operation and prevention of abuse. The contact form does not enrol you in automated newsletters and is not used for profiling or automated decisions.

Recipients and international transfers

Authorised people at Hilliby AB handle enquiries. Cloudflare delivers the website and receives the form request. Resend sends the message to our email hosted by Namecheap. These providers and their subprocessors handle the information needed for their respective services. We do not sell your personal information.

Processing may occur outside the EU/EEA, including in the United States. Resend stores message content and delivery logs there even when a European sending region is selected. The providers' processing agreements contain European Commission Standard Contractual Clauses for relevant transfers. The agreements below explain safeguards; contact us to obtain a copy or further information about transfers.

Cloudflare: Data Processing Addendum
Resend: Data Processing Addendum · GDPR & retention
Namecheap: Data Processing Addendum

Retention

Ordinary enquiries that go no further are deleted no later than 12 months after the last contact. Relevant correspondence about ongoing partnerships is kept as long as needed for that relationship. Information needed for a legal obligation or a specific legal claim may be retained longer, limited to that purpose. We assess that need against applicable rules and the status of the matter.

Resend states that its standard plans retain email and logs for 30 days, with backups persisting for 7 days. Other providers' operational logs and backups follow their service settings and procedures. They support operation, recovery and incident handling rather than a separate contact database. Contact us about particular information or deletion with our providers.

Your rights

You may request access, correction, deletion, restriction and, where applicable, data portability. You may object to processing based on legitimate interests. These rights are subject to the conditions and exceptions in GDPR. We normally respond within one month and may need to confirm your identity proportionately. You may complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY).

Cookies and similar technology

The website's own code uses no cookies, localStorage or sessionStorage. We have not added analytics tools, advertising pixels or embedded social feeds. Your language selection is held in page memory and is not stored on your device between visits. Images load from the site's own files.

Depending on enabled security features, Cloudflare may use technology to distinguish legitimate traffic from abuse. This must be assessed according to its actual function. Nonessential storage or access on your device must not operate without prior consent. If we introduce it, we will update this information and provide ways to accept, reject and withdraw consent. External links lead to other websites with their own policies.

Website terms

This website introduces a planned farming project and provides a way to contact Hilliby AB. It has no ordering facility. Submitting the form is an enquiry and does not itself place an order or conclude a contract.

Launch dates, capacity, harvest and supply figures describe plans and targets, not guaranteed outcomes or an investment offer. Delivery depends on premises, installation and other practical conditions. Illustrative and reference images do not necessarily show our completed farm.

Any future purchases or partnerships will have separately agreed terms. The linked equipment shop is a separate website with its own terms to review. Nothing here limits mandatory legal rights. Please contact us with questions or corrections.