Date of publication: 16 January 2026
Scope: This Privacy Policy explains how FutureSpex AB (“FutureSpex”, “we”, “us”, “our”) collects, processes, stores, and shares your personal data when you:
Access our online courses via Thinkific (“Course Platform”)
Participate in course enrolments, assignments, or assessments
Scope: This Privacy Policy explains how FutureSpex AB (“FutureSpex”, “we”, “us”, “our”) collects, processes, stores, and shares your personal data when you:
Access our online courses via Thinkific (“Course Platform”)
Participate in course enrolments, assignments, or assessments
- Use our Career Site for recruitment, applications, or professional connections
By using our courses or Career Site, you consent to the processing described below.1. Data Controller
FutureSpex AB is the data controller for all personal data collected via our Course Platform and Career Site. We are responsible for deciding the purposes and means of processing your data.2. Personal Data We Collect
2.1 All Users / Visitors
FutureSpex AB is the data controller for all personal data collected via our Course Platform and Career Site. We are responsible for deciding the purposes and means of processing your data.2. Personal Data We Collect
2.1 All Users / Visitors
- Device information: IP address, browser type/version, session behavior, traffic source
- Technical/statistical data: pages visited, clicks, duration, cookies
- Communication data: emails, messages submitted through the platform
2.2 Students / Purchasers
- Personal details: name, email, phone, billing address
- Course data: enrolment history, progress, assignments, quizzes, certificates
- Payment information: card details processed by secure third-party providers (Stripe, PayPal)
- Communications and feedback submitted via surveys, emails, or live sessions
2.3 Candidates / Applicants (Career Site)
- CVs, cover letters, assessment results, interview notes, references
- Publicly available information (e.g., LinkedIn profiles, employer websites)
2.4 Referred Individuals
- Information provided by employees, partners, or sister companies for course or recruitment purposes
3. Sources of Personal Data
- Directly from you: during course registration, account creation, career applications, surveys
- References: data from individuals you list as professional references
- Public sources: professional social networks or employer websites
- Partners / sister companies: for administration, promotions, or recruitment purposes
4. Purposes of Processing
We process personal data for:
We process personal data for:
- Course administration: enrolment, assignments, grades, certificates
- Payment processing: invoices, refunds, payment plans
- Security: platform protection, fraud prevention
- Marketing communications: updates about courses, promotions, or offers
- Recruitment and Career Site operations: reviewing applications, conducting interviews, referencing candidates
- Legal compliance: tax, accounting, or regulatory obligations
- Partner sharing: with approved sister companies or partners for administration or promotional purposes
5. Legal Basis for Processing
- Contractual necessity: processing required to deliver your courses or recruitment services
- Legitimate interests: course delivery, security, administrative operations
- Consent: optional marketing communications and surveys
- Legal obligations: compliance with applicable Swedish and EU law
6. Sharing and Disclosure of Personal Data
- Service providers: Thinkific (platform hosting), payment processors (Stripe, PayPal), recruitment platform providers
- Partners / sister companies: only for course administration, promotions, or recruitment activities
- Authorities / legal requirements: if required by law
- Mergers, acquisitions, or company sales: if necessary for corporate restructuring
7. International Transfers
Transfers outside the EU/EEA are only made when necessary and safeguarded using:
Transfers outside the EU/EEA are only made when necessary and safeguarded using:
- EU Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Technical and organizational measures for data protection
8. Retention Periods
- Visitors: 1 year for security and analytics
- Students / Purchasers: duration of course plus retention for certificates, billing, or legal purposes
- Candidates / Applicants: as long as necessary for recruitment or billing purposes
- References: as long as associated Candidate data is maintained
9. Your Rights (GDPR)
Right to be informed, access, correct, delete, restrict processing, object
Right to data portability
Right to withdraw consent for marketing communications
Right to lodge complaints with Swedish Data Protection Authority (IMY)
Right to be informed, access, correct, delete, restrict processing, object
Right to data portability
Right to withdraw consent for marketing communications
Right to lodge complaints with Swedish Data Protection Authority (IMY)
- Contact: [email protected]
10. Marketing Communications
From time to time, FutureSpex may send you information about courses, updates, or offers
May include communications from partners or sister companies for administration
From time to time, FutureSpex may send you information about courses, updates, or offers
May include communications from partners or sister companies for administration
- Communications are optional; you can unsubscribe at any time via email link
11. Security
- We implement encryption, secure storage, and restricted access for authorized personnel only
12. Updates
- Privacy Policy may be updated for legal compliance, platform changes, or partner agreements
- Users are encouraged to review this policy regularly