Privacy notice

Portis Group helps companies book meetings with other companies that have a good reason to talk to them. This page explains what personal data we handle, why, and what you can do about it.

Who we are

Portis Group is operated by Jimmy Lovén, a sole proprietor in Sweden (org. no. 741125-7517, Parkv. 21, 136 38 Handen, Sweden). We are the controller of the data described here. Contact: outreach@portis.group.

Who this concerns

1. People we write to. Business contacts at other companies whom we approach about a business matter.
2. People who contact us. Anyone who uses the contact form or writes to us.
3. Visitors to portis.group.

1. People we write to

What we hold. Your name, work email address, job title, company, a link to your public professional profile if we used one, and short notes on why your company seemed relevant (for example a public job posting or a public company page). We only keep what we need to write to you and to remember that you asked us to stop.

Where it comes from. Publicly available business sources: your company's own website, public job postings and company directories. Every message we send tells you where we found your address and why we wrote.

Why, and on what basis. To offer a business introduction relevant to your role. Our legal basis is legitimate interest (GDPR Art. 6(1)(f)). We write to work addresses only, about business matters only, and only to people whose role makes the subject relevant. We do not make automated decisions that affect you, and we do not sell or share your data for advertising.

How long. If you do not reply, we delete your contact record about three months after our first message. Records of evidence for why we wrote are deleted after two years at the latest. The body of sent messages is cleared after six months and the message log is deleted after 24 months. Replies you send us are kept while the conversation is active and for at most 24 months.

If you say no. Reply "no" or write to outreach@portis.group. We stop writing to you immediately and keep only your email address on a do-not-contact list so that we never write to you again.

2. People who contact us

If you use the contact form we receive your name, job title, email address and message, plus technical data used to block abuse. The form is protected by Cloudflare Turnstile, which loads when the page opens, before you make any cookie choice, as a necessary security protection. This can mean that Cloudflare sees your IP address and browser data. Your IP address is not stored by us as such: we keep a salted, irreversible hash for a couple of hours to limit repeated submissions. We use the information to reply to you. The basis is our legitimate interest in answering enquiries (or steps at your request before an agreement). Submissions are deleted automatically after 12 months.

3. Visitors to this website

The site is hosted on Google Firebase Hosting. We use Google Analytics 4 to understand how the site is used, but only if you accept analytics cookies in the banner. Declining has no effect on what you can do on the site. You can change your choice at any time via "Cookie settings" in the footer of every page. Fonts are served from our own site, not from Google. The theme choice (light or dark) is stored in your browser's local storage on your device only.

Who else handles data for us

We use service providers for email delivery, hosting and network protection, website analytics, and an AI service that helps sort incoming replies. Some of them are based in or process data in the United States. They act on our instructions. A current list is available on request at outreach@portis.group.

Your rights

Everyone: ask what we hold about you, ask us to correct or delete it, and object to us writing to you. Write to outreach@portis.group. We reply as soon as we can, and always within 30 days.

If you are in the EU, EEA or UK: you also have the rights of the GDPR, including access, rectification, erasure, restriction, portability and the right to object to processing based on legitimate interest and to direct marketing (which we always honour). You may complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to your local authority.

If you are a resident of California or another US state with a privacy law: you may ask to know, correct or delete the personal information we hold about you, and to opt out of sale or sharing. We do not sell or share personal information for advertising. We will not treat you differently for using these rights.

Commercial email

Our messages follow the rules for commercial email, including the US CAN-SPAM Act: they say who we are, give our postal address, and carry a working opt-out that we honour immediately.

Changes

We will update this page when our practices change and change the date at the top.