Legal / Privacy policy
Privacy policy
DRAFT · LAWYER REVIEW TO COMEVersion of 6 October 2026
This policy explains which personal data we keep when you visit this website, book a demo, try or buy Marine Flow Studio, or write to us; why we keep it, and for how long. We keep as little as we can. The program keeps your drawings on your PC and sends us nothing from them.
1. Who is responsible
Ardila Marine AB, organisation number 559564-5044, Källängsvägen 53, 181 44 Lidingö, Sweden, is the controller of the personal data on this page. Write to info@ardilamarine.com with any question. We have no data protection officer, so that address reaches us directly.
2. What we keep, why, and for how long
When you visit this website
- What
- Your IP address and the details your browser sends, processed by Netlify, which hosts the website.
- Why
- To deliver the pages and protect the website from attacks. Legal basis: our legitimate interest (Article 6(1)(f) GDPR) in running a safe website.
- How long
- As long as Netlify needs the logs to run and protect the website. We do not use them to identify or follow visitors, and we use no analytics.
When you book a demo
- What
- Your name, your email address and the time you choose, taken by Cal.com. The meeting itself is held in Microsoft Teams. We do not record demos.
- Why
- To hold the demo and follow up on it. Legal basis: our legitimate interest in answering a business that asked to see our product.
- How long
- Two years after our last contact, unless your company becomes a customer.
When you request a trial
- What
- Your name, company, work email and country, the kind of company you work at, and what you will draw first if you tell us; sent through Netlify’s form service to our email.
- Why
- To answer the request, for which we may look up your company in public company registers; to send you the program; to help during the trial, and to ask how it went. Legal basis: our legitimate interest in setting up the trial your company asked for.
- How long
- Two years after our last contact, unless your company becomes a customer.
When your company buys a licence
- What
- Your company’s name, address and VAT number, the name and email address of the person who buys, and the payments. Card payments are handled by Stripe; we never see full card numbers.
- Why
- To deliver, invoice and support the licences. Legal basis: our contract with your company, and our legitimate interest in carrying it out with its contact people; for the accounts, our legal obligation (Article 6(1)(c) GDPR).
- How long
- Accounting records until the end of the seventh year after the financial year they belong to, as the Swedish Bookkeeping Act (bokföringslagen) requires. Other customer records while your company is a customer, and two years after.
When the program activates or checks a licence
- What
- The licence key, a fingerprint that identifies the PC, the version of the program, the times of each activation and check, and the IP address of the connection; handled by Keygen.
- Why
- To run the licence: one licence, one PC, as the licence terms say. Legal basis: our legitimate interest in carrying out the contract with your company.
- How long
- While the licence exists, and up to 12 months after it ends.
When you write to us
- What
- Your name, your email address and what you write, in our email at Microsoft 365.
- Why
- To answer you. Legal basis: our legitimate interest in answering the people who write to us.
- How long
- As long as the matter needs, and at most two years after our last contact, unless the email belongs to the accounts or to a contract.
You do not have to give us any of this, but without an email address we cannot send a trial, and without the billing details we cannot sell a licence. We make no automated decisions about you.
3. The AI features
The AI features of the program are optional and use your own Anthropic key. What you choose to send goes from your PC straight to Anthropic, under your own agreement with Anthropic. We never receive it: for that data, Anthropic is your provider, not ours. AI and privacy lists what is sent and when.
4. Who processes it for us
We do not sell personal data or share it for marketing. These providers process it for us, under their data processing terms:
- Netlify, United States: this website and the trial form.
- Cal.com, United States: demo bookings.
- Microsoft, Ireland: our email, calendar, file sharing and Teams meetings.
- Stripe, Ireland: card payments and invoices.
- Keygen, United States: licence keys and their activation.
Accounting records also go to our accountant, and to the authorities when the law requires it.
Netlify, Cal.com and Keygen are based in the United States, and Stripe and Microsoft may also process data there. These transfers rely on the EU–US Data Privacy Framework where the provider is certified under it, or else on the EU standard contractual clauses in the provider’s data processing terms. Write to us for a copy.
5. Cookies
This website sets no cookies of its own and uses no analytics. On the demo page the calendar comes from Cal.com, which sets the cookies it needs to show the calendar and take the booking: two session cookies that protect its booking form, and Cloudflare’s __cf_bm, which tells people from bots and lasts 30 minutes. They serve only the booking you came to make, so we do not ask for consent.
6. Your rights
You may ask for a copy of your data, have it corrected or deleted, restrict or object to our use of it, and receive the data you gave us in a machine-readable form. Write to info@ardilamarine.com; we answer within one month. If you think we handle your data wrongly, you may complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
When we change this policy, we publish the new version here with its date. If a change matters to customers, we also tell them by email.