VasthavM · Privacy
Your information. Your choices.
How personal information is handled when you visit vasthavm.com or contact Max.
UpdatedWho is responsible?
VasthavM is a trading name of Västhav Commerce AB, Swedish company registration number 559343-5547. The company is the controller for the processing described here. Address: Sonya Hedenbratts Gata 5, 412 49 Göteborg, Sweden. Contact Max Västhav at max@vasthavm.com with questions or to exercise your rights.
When you send an enquiry
The form uses your name, email address, chosen topic, language and message to forward your enquiry to Max and send you a confirmation. A random reference ID helps prevent duplicate sends. Please do not include sensitive personal information or information about other people.
We use this information to answer your enquiry and prepare a possible engagement. For business contacts, the basis is our legitimate interest in handling business enquiries. If you would personally be a party to the contract, processing may be necessary to take steps at your request before entering a contract.
These details let us reply. You can also email directly. Making an enquiry does not subscribe you to a newsletter or place an order.
Operation and security
The server receives technical information such as an IP address, requested address and time to deliver the website and handle errors and abuse. The form uses temporary limits and references in server memory. The application does not write form contents to its logs or maintain a separate enquiry database.
Operation and abuse prevention rely on our legitimate interest in a working, secure website. Enquiries are also processed in Resend and the relevant email accounts.
Optional Google Analytics 4
If Analytics is enabled for the website and you accept statistics, Google’s analytics tool loads. It measures page views and certain predefined events, such as an enquiry being accepted for sending. We use statistics to understand which content helps visitors and how the website works.
Our implementation does not send names, email addresses, messages, form topics or reference IDs to Analytics. Measured page addresses exclude query strings and fragments. Google receives technical connection information when its tool loads. Ad storage, ad personalisation and Google signals are disabled in our implementation.
Statistics rely on your consent. Without acceptance, our implementation does not load the Google tag or send analytics requests. Declining does not prevent you from using the site or form.
Optional Instantly visitor identification (Leadsy)
If you accept statistics, Instantly’s Website Visitors pixel also loads via Leadsy (r2.leadsy.ai). The pixel uses cookies and similar technologies to collect information about your visit. This may include (i) usage data such as pages visited, time on pages and links clicked, (ii) device information such as IP address, browser type and operating system, and (iii) personal data you provide, such as an email address or phone number. Our implementation does not send form contents to Instantly.
This information may be combined with data from third-party sources, such as data providers and marketing partners, to create a more complete profile. That profile may be used to communicate with you, including personalised advertising and promotional content based on interests and browsing behaviour. Instantly states that the service currently only collects and provides information from confirmed U.S. IP addresses; that is Instantly’s limitation, not a guarantee by VasthavM.
Processing relies on your consent. Without acceptance, the Leadsy tag does not load. You may withdraw your choice in Cookie settings. You may also request opt-out or deletion from Instantly via their opt-out page, or contact max@vasthavm.com. Withdrawal stops future loading from our website but does not automatically erase information Instantly has already processed.
Cookies and saved preferences
Your cookie preference is saved in browser local storage under vasthavm-consent-v1 for up to 180 days. This is needed to remember and respect your choice, including a refusal. It is not sent to a consent database.
After acceptance, GA4 may set cookies named _ga and _ga_…. Our configuration sets a maximum lifetime of 180 days for these cookies. Instantly’s pixel may also set cookies or similar storage. Use Cookie settings in the footer of any page to change your choice. Withdrawal stops our analytics and the Instantly tag, removes accessible GA cookies and reloads the page. It does not automatically erase information already processed by Google or Instantly.
Recipients and international transfers
Max receives your enquiry. Google hosts the max@vasthavm.com mailbox, and Resend sends the form's automatic notification to Max and confirmation to you. We also use providers for VPS hosting and security. Google additionally processes analytics information, and Instantly (via Leadsy) processes visitor identification, if you consent and the tools are enabled. Providers receive information needed for their task.
Provider processing may involve transfers outside the EU/EEA. Current recipients, locations and applicable transfer safeguards need to be checked against provider agreements. Contact max@vasthavm.com for information about processing of your data.
Retention
For enquiries that do not lead to a client engagement, our agreed retention limit is 12 months after the last contact. Information should be deleted sooner when it is no longer needed to handle the enquiry or relevant follow-up. Information required for legal claims or legally required records is handled separately. Client engagement and accounting records are not subject to this twelve-month limit.
The application’s temporary limits and duplicate-send references expire within a maximum of 24 hours. This is separate from retention in Resend, email accounts, backups, Google Analytics and Instantly, which have their own settings and agreements.
Checked on 15 September 2026: the GA4 property's settings specify two months for event data and fourteen months for user data. Resetting retention on new activity is enabled. These settings are separate from cookie lifetime and do not mean all statistics or reports are deleted after two months.
Sharing links and measurement
The LinkedIn, X and copy buttons create a link with fixed campaign parameters for the selected channel and the insight identifier. The link contains no personal sharing ID. If you open one of these links and accept statistics, the approved campaign values can be used in GA4 to measure the traffic source. Our implementation does not forward arbitrary other query parameters.
After consent, we can measure opening a sharing composer or copying a link. This does not establish that anyone published a post. We load no embedded social sharing widgets; if you proceed to LinkedIn or X, their processing applies there.
Your rights
You may request information about processing, access to your data and correction of inaccuracies. You may also request erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and withdraw consent to future analytics.
These rights are subject to the conditions and exceptions in data protection law. Email max@vasthavm.com. You may complain to the Swedish Authority for Privacy Protection, IMY. The website form is not used for automated decisions with legal or similarly significant effects.