Governance tiles for how we operate.

1. Data controller

The data controller is CustomerProcessWave AB, Drabbningsvägen 8, Älvsjö, Sweden. Privacy questions may be directed to [email protected].

2. Categories of personal data

We may process: name, business email, phone number, company/role, project brief content, invoice and payment metadata (processed by our payment provider), and technical logs (IP address, browser type, pages viewed) used to secure and improve the site.

3. Purposes and legal bases

We process contact and project data to respond to inquiries, prepare proposals, deliver contracted CRM/ERP configuration services, maintain contractual records, and comply with tax and accounting law. Legal bases include contract performance (Art. 6(1)(b)), legitimate interests in operating and securing our business (Art. 6(1)(f)), consent for optional cookies where required (Art. 6(1)(a)), and legal obligations (Art. 6(1)(c)).

4. Recipients and processors

Data may be shared with hosting, email, payment (including Stripe), analytics, and professional advisers under data-processing agreements. We do not sell personal data. Where data is transferred outside the EEA, we apply appropriate safeguards such as Standard Contractual Clauses.

5. Retention

Inquiry data is kept only as long as needed for the engagement discussion and follow-up, then deleted or anonymized unless a contract or law requires longer retention (typically up to 7 years for accounting records in Sweden).

6. Your rights

You may request access, rectification, erasure, restriction, portability, or object to certain processing, and you may withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority (e.g., Integritetsskyddsmyndigheten, IMY, Sweden).

7. Security

We apply organizational and technical measures appropriate to the risk, including access control, encryption in transit, and vendor due diligence for CRM/ERP tooling environments we configure for clients.

1. Discovery and audits

Fixed-fee items such as process audits are non-refundable once the workshop or audit window has been scheduled and started, unless we fail to deliver the agreed report.

2. Project deposits and staged fees

Deposits cover reserved engineering capacity. If you cancel before work begins, we refund the deposit minus any non-recoverable third-party costs already incurred. After work has started, we invoice for work performed to date at the agreed rate and refund any unused prepaid balance for undelivered milestones.

3. Retainers

Monthly monitoring or support retainers are billed in advance. You may cancel before the next billing cycle; the current month remains non-refundable unless we cannot provide the contracted monitoring response and have not remedied the shortfall.

4. Defects in deliverables

If a deliverable materially fails to meet the written scope, notify us within 14 days of delivery. We will correct the issue within a reasonable time or, if correction is not commercially sensible, refund the affected milestone fee.

5. Statutory rights

Nothing in this policy limits mandatory rights under applicable Swedish or EU consumer law. Where you act as a consumer, statutory cancellation rights may apply to certain distance purchases; contact us and we will process your request under the law.

6. How to request a refund

Email [email protected] with your company name, invoice or proposal reference, and a short description. We acknowledge requests within two business hours on weekdays and aim to resolve decisions within 5 business days.