This Privacy Policy explains how Limitless Design Sweden AB, Swedish company registration number 559251-7683 ("Limitless", "we", "us" or "our"), processes personal data in connection with the Limitless Plant website, Company Accounts, online course platform and our business relationships. Limitless Plant is intended for business customers and their users.
1. Who we are and when this Policy applies
Limitless Design Sweden AB, Fagermon 315, 705 91 Orebro, Sweden, is the data controller for personal data that we process for our own purposes, such as business relationship management, account administration, billing, support, security and legal compliance.
When we process personal data on behalf of a business customer for that customer's purposes, for example personal data relating to employees using Limitless Plant for company training, the customer may instead be the data controller and Limitless may act as its data processor. That processing is governed by our Data Processing Agreement with the customer.
Privacy contact: info@limitlessplant.se
2. Personal data we process and where it comes from
Depending on how you interact with Limitless Plant, we may process:
- Account and contact information, such as your name, business email address, company affiliation and account or user identifier.
- Package and access information, such as the Subscription Package selected for you, the applicable Access Period and related account administration information.
- Usage and technical information, such as login and platform activity, course progress or completion information where the Service records it, IP address, browser/device information and security logs.
- Communications and support information, such as emails, support requests, feedback and other correspondence.
- Business billing information relating to company contacts, invoices, payment status and transactions.
We may receive personal data directly from you, from your employer or another company that provides you with access to Limitless Plant, and automatically through your use of the website or platform.
3. Why we use personal data
3.1 Accounts and business relationships
We use account and contact information to manage Company Accounts, users and our B2B customer relationships. Our legal basis is normally our legitimate interest in operating Limitless Plant and managing business relationships.
3.2 Billing and administration
We process business contact, package and invoice information to administer purchases, invoicing, payments and accounting. Our legal basis is performance of contractual arrangements where applicable, our legitimate interests in administering our business, and compliance with legal obligations relating to accounting, taxation and record keeping.
3.3 Support and communications
We use personal data to respond to questions, provide support and communicate service-related information. Our legal basis is normally our legitimate interest in supporting customers and users and operating the service.
3.4 Security and misuse prevention
We process technical, account and usage information to protect accounts, detect unauthorized access or misuse, investigate security incidents and maintain the security and integrity of Limitless Plant. Our legal basis is our legitimate interest in protecting our service, customers, users and business.
3.5 Analytics and improvement
We may use appropriate usage and technical information to understand how Limitless Plant is used, troubleshoot problems and improve the service. Our legal basis is normally our legitimate interest in developing and maintaining Limitless Plant. Where cookies or similar technologies require consent, we rely on consent as required by law.
3.6 Legal compliance
We may process personal data to comply with law, respond to lawful authority requests, and establish, exercise or defend legal claims. Our legal basis is the applicable legal obligation or our legitimate interest in protecting our legal rights.
4. Who we share data with and international transfers
We do not sell personal data. Where necessary, we may share or make personal data available to:
- Service providers supporting hosting, IT, communications, invoicing, security, analytics or other operation of Limitless Plant.
- The business customer responsible for the relevant Company Account, where necessary to administer that account, user access and purchases, or where we process the information on that customer's instructions.
- Professional advisers such as lawyers, accountants, auditors or insurers where reasonably necessary.
- Public authorities, courts or other recipients where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims.
- Participants and advisers in a merger, financing, restructuring or sale of all or part of our business, subject to appropriate confidentiality arrangements.
Some service providers may process personal data outside the European Economic Area (EEA). Where a transfer outside the EEA requires safeguards, we use a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses together with any additional safeguards required in the circumstances.
5. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing and securing the service, administering Company Accounts and customer relationships, resolving disputes and complying with legal obligations.
The retention period depends on the type of information and why it is processed. Account, support, usage and technical information may be deleted or anonymized when it is no longer reasonably needed, subject to applicable legal requirements and legitimate needs to establish or defend legal claims. Accounting, invoicing and transaction records are retained for the period required under Swedish accounting and tax law.
Where Limitless acts as a data processor, retention and deletion of personal data are also governed by the applicable DPA and the customer's lawful instructions.
6. Your data protection rights
Depending on the circumstances and subject to the conditions and exceptions under applicable data protection law, you may have the right to access your personal data, correct inaccurate data, request deletion or restriction, object to processing based on legitimate interests, receive certain data in a portable format, and withdraw consent where processing is based on consent.
To exercise rights concerning processing for which Limitless is the data controller, contact info@limitlessplant.se. If Limitless processes the relevant personal data solely on behalf of your employer or another customer, we may refer your request to that organization or assist it in responding.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent data protection authority.
7. Security, cookies, changes and contact
7.1 Security
We use appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful access, use, alteration, disclosure, loss or destruction. No information system or security measure can guarantee complete security.
7.2 Cookies
Our website and Limitless Plant may use cookies and similar technologies to operate the service, remember preferences, maintain security and understand how the website and platform are used. Where consent is required, we request it before using the relevant technology. Further information is provided in our Cookie Policy.
7.3 Changes
We may update this Privacy Policy to reflect changes to Limitless Plant, our processing activities, service providers or legal requirements. The current version will be published with an updated "Last updated" date. Where a change materially affects how we process personal data, we will provide additional notice where appropriate or required by law.
7.4 Contact
Limitless Design Sweden AB, Swedish company registration number 559251-7683, Fagermon 315, 705 91 Orebro, Sweden. Email: info@limitlessplant.se