Privacy policy

Last updated: 28 October 2026

This policy explains how Boyle Medical AB handles personal data when you visit this website or contact us.

Who is responsible for your data?

Boyle Medical AB (company registration number 556955-5260) is responsible for the processing described in this policy.

Information we collect

When you use our contact form, you provide your first and last name, company, email address, country, and enquiry. You can also provide a subject. If you email us, we receive the information included in your message.

Our website hosting service may also process technical information, such as your IP address, browser information, requested pages, and the time of your visit, to deliver and protect the website.

Please do not send patient information, medical records, or other sensitive personal data through the contact form or general enquiry email.

Why we use your information

We use contact information and correspondence to answer enquiries, provide requested product information, and manage related business follow-up. The legal basis is our legitimate interest in responding to enquiries and conducting our business. Where an enquiry concerns steps towards a contract with you, processing may instead be necessary to take those steps at your request.

Technical information is used to operate and secure the website, based on our legitimate interest in providing a reliable and secure service. Where we must retain information to meet a legal obligation, that obligation is the legal basis.

Fields marked with an asterisk in the contact form are required to submit an enquiry through that form. You can also contact us by email.

Service providers and sharing

Service providers supporting website hosting, contact-form handling, and email may process information on our behalf. Access should be limited to what is needed to provide those services. Information may also be disclosed where required by law.

• Netlify: hosts this website and processes contact-form submissions through Netlify Forms. See Netlify's privacy policy.
• Google Workspace: provides our email service. Google acts as our processor for the personal data in enquiry messages and our replies under its Cloud Data Processing Addendum.
• Loopia: provides domain registration and management for our website. This role is separate from hosting the website and processing contact-form submissions.

Where information is processed

Personal data may be processed outside the EU/EEA, including in the United States. Netlify states that contact-form submissions are transferred to the United States. Email processing locations depend on the Google services and account settings used.

Netlify's Data Processing Agreement describes its international transfer arrangements, including the EU–US Data Privacy Framework where applicable and Standard Contractual Clauses where required. Contact us for details of the processing locations and transfer safeguards applicable to your information, or to request a copy of the relevant safeguards.

Google Workspace may process email data outside the EU/EEA, including in the United States. Google's data-processing terms describe the safeguards for international transfers, including the EU–US Data Privacy Framework where applicable and Standard Contractual Clauses where required. See Google's international transfer arrangements.

How long information is kept

We retain enquiry information for as long as needed to respond and manage related follow-up, normally no longer than 36 months after our last meaningful contact. We delete information sooner when it is no longer needed. This period applies to enquiry information held in Netlify Forms and our Google email service. Records required for contractual, legal, or regulatory purposes may be retained longer under the applicable retention requirements.

Cookies and browser storage

The website stores your cookie-banner choice in browser local storage under cookie_consent_choice and in a cookie named cookie_consent. The cookie is set for one year; the local-storage entry remains until cleared. The contact form also stores security_question_key locally to avoid repeating the same arithmetic question.

This website does not use analytics, advertising, or other visitor-tracking tools. Both Accept and Decline save your banner choice in the cookie and local storage described above. Neither button enables tracking or changes the website's functionality. You can remove stored preferences through your browser's site-data settings. Clearing local storage makes the banner appear again.

Your rights

Depending on the circumstances, you can request access to your personal data, correction, deletion, restriction of processing, or data portability. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing.

To exercise your rights or ask a privacy question, email enquiries@boylemedical.com. This inbox is monitored for privacy questions and requests to access, correct, or delete personal data. You also have the right to complain to the Swedish Authority for Privacy Protection (IMY) or your local data protection authority.

Changes to this policy

We may update this policy when our website or data-handling practices change. The date above shows the latest update.