What we collect, and why. This page covers resourced.com. It says what happens to what you type here, which services see it, how long it is kept and what you can ask of us.

Who we are

Resourced AB is a Swedish company and the controller of the personal data described on this page. We build Resourced, a product lifecycle management platform for brands that develop physical products.

For anything about your data, write to contact@resourced.com. You can also reach us through our LinkedIn page.

What this covers

This notice is about the website at resourced.com: reading it, using the price estimate on the pricing page, asking for a demo account and booking a call. It does not cover the Resourced platform itself at app.resourced.com. There, we process product data on behalf of the brand that uses it, under that brand’s agreement with us and a data processing agreement, and the brand is the controller.

Visiting the site

The site is hosted on Microsoft Azure in the West Europe region. When you load a page, the hosting service records the usual technical data of a web request: your IP address, the page requested, the time, and what your browser says about itself. We use this only to keep the site running and secure, on the basis of our legitimate interest in doing so, and it is kept briefly by the hosting provider before it is discarded.

We run no advertising, no third-party ad trackers and no social media pixels. Fonts and scripts are served from our own site.

Cookies

The site sets no cookies of its own. Two bought-in scripts do, and they are not treated alike, because they do different things.

HubSpot’s tracking code follows a person: it shows us which pages are read and, once you have asked for a demo, connects your visits to your request so we know what you have already seen. It does not load until you press Allow in the small card at the bottom of the page. When allowed, it sets cookies named hubspotutk, __hstc, __hssc and __hssrc, which identify your browser and count sessions and pages for up to six months; the session ones expire when you close the browser. The legal basis is your consent.

The Leadfeeder tracker looks up the company that owns the internet address your visit comes from, so we can see which brands read the site. It tells us the company, not who you are, and we never use it to build a profile of an individual. It runs from the first page you open, on the basis of our legitimate interest in knowing which businesses are interested in us, weighed against the small intrusion of a lookup that stops at the company. It sets one cookie, _lfa, which tells its own visits apart from one another and is long-lived; Leadfeeder’s own cookie declaration gives the current period.

You can stop the company lookup at any time: press No thanks on the card, or send a Global Privacy Control signal from your browser, and it does not run on the pages you open after that. That is also how you exercise your right to object, and you can write to us instead if you prefer. Your answer is stored in your browser’s local storage, not in a cookie, and you can change it at any time from the Cookies link in the footer.

The price estimate

On the pricing page you can type a brand name, a webshop address, a work email or a LinkedIn page to see your plan. Here is what happens with each.

• A brand name. While you type, our server asks a public company autocomplete (Clearbit, a HubSpot company) for companies matching the name, turns the name into likely web addresses, and reads the front page of each candidate to check that it is a webshop. Your browser then loads the shops’ icons from their own sites or from Google’s and DuckDuckGo’s icon services, which see the shop’s domain and your IP address. If our server is unavailable, your browser asks the autocomplete directly. Nothing about you is sent, only the name typed.
• A webshop address. Our server reads the shop’s public product catalogue or sitemap to count products, articles and SKUs. It reads the shop, not you.
• A work email. The part after the @ is used to find the shop. The address itself is kept in your browser and only sent to us if you go on to ask for a demo. Personal addresses such as Gmail are not accepted, since they do not identify a brand.
• A LinkedIn company page. The company’s name in the address is used to find the shop. We do not read anything from LinkedIn at this step.

Each search is logged on our server with the brand, the shop, what kind of thing was typed, the count and the time, and is recorded in our CRM against the brand’s company record, so we can see which brands have looked at pricing. No record about you as a person is made at this step. The legal basis is our legitimate interest in showing you a price and in knowing which brands are interested.

Asking for a demo

If you ask for a demo account, we take your work email (or your name and email from LinkedIn, see below), the brand and webshop you were counted on, the count and the plan it points to. We create a contact, a company and a deal in our CRM, HubSpot, with a note holding those details, so that we can set up the demo account with your products in it and get in touch within 24 hours to tell you it is ready and offer a time to walk through it.

The demo form also carries the brand and webshop in two visible fields, so that the notification we receive names the brand. With cookies allowed, HubSpot connects your earlier and later visits to your contact record. The legal basis is taking the steps you asked for before any contract, and our legitimate interest in following up on a request for a demo.

Booking a call through Book a demo takes you to HubSpot Meetings, where you give a name and an email to pick a time. That goes into the same CRM.

Sign in with LinkedIn

The demo step offers Continue with LinkedIn. If you use it, LinkedIn asks you to approve sharing your name, your email address and your profile picture with us, and sends us those, once. We keep your name and email on the contact record described above and discard the rest. We cannot post on your behalf, read your connections or see anything else on your profile, and the access LinkedIn grants is used once and not stored. LinkedIn’s own handling of your account is governed by LinkedIn’s privacy policy.

While you are on your way to LinkedIn and back, the brand, shop, count and plan from the pricing page travel in the sign-in request so that the page can be put back where it was. They are signed so they cannot be altered and expire after fifteen minutes.

Who processes it

We use a small number of service providers, each bound by a contract to process data only on our instructions.

• HubSpot (HubSpot Ireland Ltd, data held in HubSpot’s EU data centre): CRM, the tracking code when allowed, and meeting booking.
• Microsoft Azure (West Europe): hosting of the site and the small server functions behind the price estimate and the demo form.
• Clearbit, a HubSpot company (United States): the company autocomplete, which receives the brand name typed.
• Leadfeeder, a Dealfront company (Dealfront Group GmbH, Germany, with Leadfeeder Oy in Finland): the visitor tracker when allowed, which turns an internet address into the company that owns it.
• LinkedIn (LinkedIn Ireland Unlimited Company): sign-in, when you choose it.
• Google and DuckDuckGo (United States): icon services your browser asks for a shop’s icon, seeing the shop’s domain and your IP address.

Where a provider processes data outside the European Economic Area, the transfer rests on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. We do not sell personal data and we do not share it with anyone for their own marketing.

How long we keep it

• Search logs on our server: up to 90 days.
• Company records and search notes in the CRM: for as long as the brand is one we could work with; reviewed yearly.
• Contact records from a demo request or a booking: until the demo is done and the conversation has ended, then up to 24 months from our last contact with you, unless you become a customer, in which case the customer agreement applies. You can ask us to delete them sooner at any time.
• Analytics cookies: up to six months for HubSpot’s, and longer for Leadfeeder’s; both gone at once if you clear them, and neither is set again once you have objected.
• Your cookie choice in local storage: until you clear it or change it.

Your rights

Under the General Data Protection Regulation you can ask us for a copy of the personal data we hold about you, have it corrected or deleted, ask us to restrict or stop processing it, object to processing based on our legitimate interest, and have data you gave us handed over in a portable form. Where we rely on your consent, you can withdraw it at any time; for cookies, use the Cookies link in the footer.

Write to contact@resourced.com and we answer within a month. If you are not satisfied, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), or to the supervisory authority where you live.

The site is not aimed at children, and we do not knowingly collect data about anyone under 16.

Changes

When we change how the site works in a way that touches your data, we change this page and the date at the top with it. The version you are reading is the one that applies.