Privacy Policy

Last updated: April 2026

Who we are

Heurystics is an AI consultancy based in Stockholm, Sweden. When you interact with our website at heurystics.com, we act as the data controller for any personal data collected.

Contact: hello@heurystics.com

What data we collect

Contact form submissions

When you submit our assessment booking form, we collect:

  • Your name
  • Work email address
  • Company name
  • Your role
  • Optional: description of your operational challenge

This data is used solely to respond to your inquiry and schedule a consultation. We do not sell or share this data with third parties.

Analytics data

We use Google Analytics (via Google Tag Manager) to understand how visitors use our website. This collects:

  • Pages visited and time spent
  • Referral source
  • Device type and browser
  • Approximate geographic location (country/city level)

Google Analytics uses cookies to distinguish unique visitors. No personally identifiable information is collected through analytics.

Cookies

Our website uses the following cookies:

  • _ga, _ga_* — Google Analytics tracking cookies. Used to distinguish visitors and track site usage. Expire after 2 years.
  • _gid — Google Analytics session cookie. Expires after 24 hours.

You can disable cookies through your browser settings. The website will continue to function without them.

How we use your data

  • To respond to your contact form submission
  • To schedule and conduct consultations
  • To understand website usage patterns and improve our site

Legal basis for processing

Under GDPR, we process your data based on:

  • Consent — when you submit our contact form
  • Legitimate interest — for website analytics to improve our services

Data retention

Contact form submissions are retained for as long as necessary to fulfill your inquiry and any resulting business relationship. Analytics data is retained according to Google Analytics default settings (26 months).

Your rights

Under GDPR, you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interest
  • Withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at hello@heurystics.com. We will respond within 30 days.

Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Third-party services

  • Google Analytics / Google Tag Manager — website analytics (Google LLC, USA). Data processing governed by Google's privacy policy.
  • Vercel — website hosting (Vercel Inc., USA). Processes server logs including IP addresses.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.