Privacy policy

Foxy Consultancy

Version: 14-05-2026

This Privacy Policy explains how Foxy Consultancy collects, uses, and protects your personal data. Foxy Consultancy is committed to handling your data with care and in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish privacy legislation.

1. Data Controller

1. The data controller is Eszter Matla-Fodor, operating under the name Foxy Consultancy, registered in Sweden with organisation number 8812019746.
2. Contact: info@foxyconsultancy.com

2. What Personal Data We Collect

1. Contact details: name, email address, phone number, postal address.
2. Financial data: income details, invoices, bank account numbers, and related financial records necessary for bookkeeping or tax services.
3. Tax data: tax identification numbers, tax returns, declarations, and correspondence with tax authorities.
4. Business data: company registration details, VAT numbers, and other business-related information.
5. Communication data: emails, messages, and other correspondence exchanged in the context of the services.

3. Purpose and Legal Basis

1. Performance of the agreement: personal data is processed to the extent necessary to deliver the agreed services (legal basis: performance of a contract, Article 6(1)(b) GDPR).
2. Legal obligations: certain data may be processed to comply with legal obligations, such as bookkeeping requirements or anti-money laundering regulations (legal basis: legal obligation, Article 6(1)(c) GDPR).
3. Legitimate interests: data may be processed for administrative purposes, invoicing, and maintaining client records (legal basis: legitimate interests, Article 6(1)(f) GDPR).

4. Retention Periods

1. Financial and tax records are retained for a minimum of 7 years in accordance with Swedish bookkeeping law (Bokföringslagen).
2. Other personal data is retained for as long as necessary for the purpose for which it was collected, or as required by law.
3. Upon expiry of the retention period, data is securely deleted or anonymised.

5. Sharing of Personal Data

1. Foxy Consultancy does not sell personal data to third parties.
2. Data may be shared with third parties only where necessary for the performance of services, such as accountancy software providers, or where required by law (e.g. tax authorities in Sweden or the Netherlands).
3. Any third parties with whom data is shared are bound by confidentiality obligations and, where applicable, a data processing agreement.

6. Data Security

1. Foxy Consultancy takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
2. Access to client data is restricted to the extent necessary for the performance of services.

7. Your Rights

1. You have the right to access the personal data held about you.
2. You have the right to rectify inaccurate or incomplete data.
3. You have the right to request erasure of your data, subject to legal retention obligations.
4. You have the right to object to or restrict the processing of your data.
5. You have the right to data portability where technically feasible.
6. To exercise any of these rights, please contact info@foxyconsultancy.com. Requests will be handled within 30 days.

8. Complaints

1. If you have concerns about how your personal data is handled, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at www.imy.se, or with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl if the matter relates to Dutch data subjects.

9. Changes to This Policy

1. This Privacy Policy may be updated from time to time. The current version is always available on the Foxy Consultancy website.
2. Material changes will be communicated to active clients by email.