Privacy policy

1. Summary

This policy explains what data Exefy collects when you visit exefy.eu or request a quote, why we collect it, and what your rights are.

• Data collected automatically: IP address, device and browser information, usage data, and campaign parameters (e.g. UTM tags from LinkedIn, Instagram or X).
• Data you give us: name, email, company, phone, country, project details, and CAD files or technical drawings you upload.
• We use this data to respond to enquiries, prepare quotations, coordinate manufacturing with our European partner network, and improve the website.

2. Owner and data controller

Exefy is the data controller for personal data processed through this website. Contact: hello@exefy.eu. Full company registration details will be published here.

3. Types of data collected

Personal data may be provided freely by you or collected automatically while using the website. Fields marked as required in our forms are necessary to answer your request; without them we cannot prepare a quote.

Uploaded CAD models, drawings and specifications are treated as confidential business information. You are responsible for any third-party personal data you share with us.

4. Mode and place of processing

We take appropriate technical and organisational measures to prevent unauthorised access, disclosure, modification or destruction of data. Uploaded files are stored in private storage and are only accessible via time-limited links.

Data may be accessible to Exefy staff and to processors acting on our behalf (hosting, email delivery, IT providers), and — only where needed to prepare a quote or fulfil an order — to vetted manufacturing partners in Scandinavia and Southern Europe. Data is primarily processed within the European Union.

5. Purposes and legal basis

Under the GDPR we process personal data on one of the following bases:

• Pre-contractual steps and contract performance — answering quote requests and fulfilling orders (Art. 6(1)(b)).
• Legal obligations — accounting and tax records (Art. 6(1)(c)).
• Legitimate interests — securing the website, preventing misuse, measuring campaigns and following up business enquiries (Art. 6(1)(f)).
• Consent — non-essential cookies and marketing communications (Art. 6(1)(a)), which you can withdraw at any time.

6. Retention

Quote request data is kept for as long as needed to handle the request and any resulting business relationship. Uploaded files are deleted once the request or order is completed and applicable warranty periods have expired, unless you ask us to keep them. Invoices and accounting records are kept for the period required by law. Consent-based data is kept until you withdraw consent.

7. Your rights

You may at any time:

• Withdraw consent where processing is based on consent.
• Object to processing based on legitimate interests, including direct marketing.
• Access your data and receive a copy.
• Request rectification or erasure of your data.
• Restrict processing or receive your data in a portable format.
• Lodge a complaint with your competent data protection authority.

8. Exercising your rights

Send requests to hello@exefy.eu. Requests are free of charge and answered as soon as possible, and always within one month.

9. Changes to this policy

We may update this policy. The latest version and update date are always shown on this page.