Privacy policy

Last updated: 4 July 2026

We keep this simple. Bon Flow collects very little personal data, uses no tracking cookies, and never sells your information. This page explains what we do collect, why, and the control you have over it.

Who we are

Bon Flow is a practical AI clarity and activation company, operated by RnBz AB (org. nr 559277-8335), with its registered office in Malmö, Sweden. RnBz AB is the data controller responsible for the personal data described here.

Bon Flow (RnBz AB)
Email: info@bonflow.io

What we collect and why

When you book a call. Our booking button uses Microsoft Bookings. To schedule and hold the meeting, we collect the name, email address, and any details you choose to add. Legal basis: to take steps at your request before entering into an agreement, and our legitimate interest in arranging the meeting.
When you email us. If you contact us, we process your email address and the content of your message so we can reply and follow up. Legal basis: our legitimate interest in responding to you.
Website analytics. We use Plausible Analytics, a privacy-friendly, EU-hosted tool. It measures visits in aggregate, sets no cookies, and does not collect personal data or track you across other sites. Legal basis: our legitimate interest in understanding how the site is used.
Server logs. Our hosting provider automatically logs technical data such as IP address, browser type, and timestamps to keep the site running and secure. Legal basis: our legitimate interest in security and reliable operation.

Cookies

This website does not use cookies for tracking or advertising. Because we run no non-essential cookies, there is no cookie consent banner to click through.

Who processes your data

We share data only with the service providers that help us run the business, and only for the purposes above:

Microsoft - booking and email (Microsoft 365 / Bookings).
Plausible Analytics - aggregated, cookieless website statistics (EU-hosted).
Our hosting provider - website hosting and server logs.

These providers act on our instructions. Where a provider processes data outside the EU/EEA, that transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

We keep personal data only as long as we need it for the purpose it was collected, then delete it. Booking and email correspondence are kept for the duration of our conversation and any resulting engagement; server logs are kept for a short period for security.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to our use of your personal data, and the right to data portability. To exercise any of these, email us at info@bonflow.io and we will respond.

If you believe we have handled your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.

Changes to this policy

If we change how we handle data, we will update this page and the date above.