Privacy Policy

Stairway Medical AB ("Stairway Medical", "we", "us") is the data controller for the personal data described in this policy. You can reach us through our contact page.

• Contact form submissions: your name, email address, and optionally company, subject and the content of your message.
• Staff accounts: email address and authentication data for team members who log in to the internal administration area.
• Technical data: IP address and standard request data processed by our hosting and infrastructure providers to deliver and secure the site.
• Cookie preferences: the choice you make in the cookie banner, stored locally in your browser.

We do not collect health data, patient data, or special categories of personal data through this website.

• To answer enquiries you send us — legitimate interest, and your consent given when submitting the form (GDPR Art. 6(1)(a) and (f)).
• To operate, secure and maintain the website and the internal administration area — legitimate interest (Art. 6(1)(f)).
• To measure site usage where you have allowed analytics cookies — consent (Art. 6(1)(a)).
• To meet legal obligations, for example bookkeeping and medical device regulatory requirements — legal obligation (Art. 6(1)(c)).

Contact enquiries are kept for as long as needed to handle your request and for up to 24 months afterwards, unless a longer period is required by law. Staff account data is kept for as long as the account is active. Cookie preferences expire after 12 months or when you clear your browser storage.

We do not sell personal data. We share it only with service providers who process data on our behalf under a data processing agreement:

• Our website hosting and database provider, which stores contact submissions and site content within the EU.
• Google Fonts, which serves the typefaces used on this site; your browser's IP address is visible to Google when fonts are requested.
• Professional advisers and authorities, where we are legally required to disclose information.

Our primary data storage is located within the EU. Where a provider processes data outside the EU/EEA, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

• Access — request a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted where we have no continuing legal ground to keep it.
• Restriction and objection — limit or object to our processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent — at any time, without affecting processing already carried out.

To exercise any of these rights, contact us via the contact page. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

Access to submitted data is restricted to authorised Stairway Medical staff through authenticated accounts and row-level database access rules. Data is encrypted in transit.

Details of the cookies and local storage used on this site are set out in our Cookie Policy.

We may update this policy as our services or legal obligations change. The date at the top of the page always reflects the current version.