Protecting your privacy is our priority. This policy explains how Key Knowledge Sweden AB (“Key Knowledge”) handles personal data when you visit keyknowledge.com, contact Key Knowledge, or use the training platform.
Key Knowledge Sweden AB, org. no. 559328-4861, Breviksvägen 87, 135 68 Tyresö, Sweden, is the data controller for the processing described in this policy, except where section 1 applies.
1. Two roles: controller and processor
For most data described in this policy, such as website visitor, contact and billing data, Key Knowledge decides how and why data is processed. Key Knowledge is then the controller.
When a business customer enrols its employees in Key Knowledge courses, Key Knowledge processes learner data (names, email addresses, course progress, assessment results, certificates) on the customer’s behalf and instructions. For that data Key Knowledge is a processor, and the customer is the controller. That processing is governed by the data-processing agreement with the customer, not by this policy. Learners with questions about that data should contact their employer.
2. What Key Knowledge collects
Provided by you: name, email address, phone number, employer, job title, billing details, and anything you include in messages to Key Knowledge or submit through the platform, including questions asked to AI-assisted features such as the AI Tutor.
Collected automatically: IP address, browser type, pages visited, access times and referring website (see section 7).
Payment card details are collected and processed by Stripe, the payment provider used by Key Knowledge. Key Knowledge does not store card numbers.
3. Why the data is processed, and on what legal basis
- To provide the platform and fulfil orders. Legal basis: contract (Art. 6(1)(b) GDPR).
- To issue invoices and keep accounting records. Legal basis: legal obligation (Art. 6(1)(c)), including the Swedish Bookkeeping Act.
- To respond to enquiries and provide support. Legal basis: legitimate interest (Art. 6(1)(f)) in serving customers and prospects.
- To operate, secure and improve the website and platform. Legal basis: legitimate interest in a functioning, secure service.
- To send information about Key Knowledge courses. Legal basis: consent (Art. 6(1)(a)), or legitimate interest for existing customers regarding similar services. You can opt out at any time by emailing Key Knowledge.
- To retain completion records and certificates. Legal basis: legitimate interest and, where applicable, legal obligation, so that customers and learners can evidence training for audit and regulatory purposes.
4. AI-assisted features
Questions submitted to the AI Tutor are processed to generate answers and to maintain the quality and safety of the feature. They are not used to build marketing profiles. AI-assisted features are provided through Sana Labs, the learning platform provider, acting as a sub-processor to Key Knowledge. Underlying AI models may vary and are engaged under EU data-protection standards. Do not include sensitive personal data in questions to the AI Tutor.
5. Who data is shared with
Key Knowledge does not sell personal data. Data is shared only with:
- Service providers (sub-processors) that host and support operations, currently Stripe (payments), Inleed (website hosting) and Sana Labs (learning platform and AI-assisted features). They may only process data on Key Knowledge’s instructions.
- Authorities, where required by law.
6. International transfers
Data is stored within the EU/EEA where possible. Where a service provider processes data outside the EU/EEA, Key Knowledge relies on safeguards under GDPR chapter V, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.
7. Cookies
The Key Knowledge website and platform use only essential cookies, required for functions such as login, security and remembering language settings. No advertising, analytics or other non-essential cookies are used, which is why no cookie consent banner is shown. Cookies can be managed or cleared in your browser settings.
8. How long data is kept
- Enquiries and correspondence: up to 24 months after last contact.
- Customer account and billing data: for the duration of the relationship, then 7 years as required by Swedish accounting law.
- Completion records and certificates: 7 years after issue, to support audit and regulatory evidence needs.
- Contact data used for course information: until you opt out or consent is withdrawn.
When data is no longer needed, it is deleted or anonymised.
9. Your rights
Under the GDPR you may request access to your data, correction, deletion, restriction of processing, data portability, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time.
To exercise a right, email privacy@keyknowledge.com. Key Knowledge responds within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se) or your local supervisory authority.
If Key Knowledge holds your data as a processor on behalf of your employer (section 1), the request will be referred to your employer.
10. Security
Key Knowledge protects personal data with technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access controls and limited internal access. No internet transmission is completely secure, but Key Knowledge works to protect data against unauthorised access, alteration and loss.
11. Children
The services are directed at businesses and their employees. Key Knowledge does not knowingly collect personal data from anyone under 16.
12. Changes to this policy
Key Knowledge may update this policy. Significant changes will be announced by email to registered account contacts or by notice on the website, before they take effect.
Questions or concerns: privacy@keyknowledge.com · +46 (0)76 585 04 40
Key Knowledge Sweden AB
Breviksvägen 87
135 68 Tyresö
Sweden
Last updated: 14 July 2026