Privacy and Cookie Policy
Responsible Entity
This website is operated by Visual Oasis (“Visual Oasis”, “we”, “us” or “our”). Visual Oasis is the controller responsible for the processing of personal data described in this policy.
Legal Address
Innansjön 116
937 94 Burträsk
Sweden
Last updated: 29 August 2026
1. Who We Are
This website is operated by Visual Oasis (“Visual Oasis”, “we”, “us” or “our”). Visual Oasis is the controller responsible for the processing of personal data described in this policy.
Website: https://www.visualoasis.design
Postal address: Innansjön 116, 937 94 Burträsk, Sweden
Email: hello@visualoasis.design
This policy explains how we collect, use, store and protect personal data when you visit our website, contact us or otherwise interact with us through the website.
2. Personal Data We Collect
Information You Provide
When you use our contact form or contact us by email, we may collect:
your name
your email address
the name of your project, brand or business
the content of your message
any other information you choose to provide
Please do not include sensitive personal data in your message unless it is necessary for your enquiry.
Technical and Usage Data
When you visit the website, certain technical information may be processed automatically, including:
IP address
browser and device type
operating system
referring page or website
pages viewed and interactions with the website
approximate geographic region derived from an IP address
date, time and duration of a visit
cookie and consent preferences
Some of this information is processed only when you consent to analytics cookies. Limited technical information may also be processed where necessary to deliver, secure and maintain the website.
3. How and Why We Use Personal Data
We process personal data for the following purposes and on the following legal bases:
Responding to Enquiries
We use the information submitted through the contact form or by email to review and respond to your enquiry, discuss a potential project and take steps requested by you before entering into a contract.
Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in communicating with people who contact us.
Providing Our Services
If an enquiry develops into a client relationship, we may use relevant information to prepare proposals, enter into and perform agreements, manage the project and communicate with you.
Legal basis: performance of a contract or taking steps before entering into a contract.
Operating and Securing the Website
We process limited technical data to deliver the website, prevent abuse, maintain security and diagnose technical problems.
Legal basis: our legitimate interest in operating a secure and functional website.
Website Analytics
Where you consent, we use Google Analytics to understand how visitors use the website and to improve its content, structure and performance.
Legal basis: your consent. You can withdraw or change your consent at any time through Cookie Settings in the website footer.
Legal and Administrative Requirements
We may process information where necessary to comply with applicable law, respond to lawful requests, establish or defend legal claims, or maintain records required for accounting and tax purposes.
Legal basis: compliance with a legal obligation and, where applicable, our legitimate interest in protecting our legal rights.
4. Contact Form
The contact form is provided through Framer. Form submissions may be processed by Framer and delivered to us by email or through Framer’s form infrastructure.
The form is intended only for project enquiries and related communication. We do not use contact-form submissions for unsolicited marketing, and submitting the form does not subscribe you to a newsletter.
5. Cookies and Similar Technologies
Cookies are small text files stored on your device. We use necessary cookies and, where you consent, analytics cookies.
Necessary Cookies
Necessary cookies and similar storage are used to:
remember your cookie preferences
provide core website functionality
protect forms and the website from abuse
maintain security and stability
These technologies are necessary for the website to function and cannot always be disabled through the cookie banner. You can still restrict them through your browser, although parts of the website may then stop working correctly.
Analytics Cookies
With your consent, Google Analytics may set the following first-party cookies:
`_ga` — used to distinguish visitors; default duration up to two years
`_ga_<container-id>` — used to maintain session state; default duration up to two years
Browser restrictions or our configuration may shorten these periods.
Google Analytics user-level and event-level data is retained for no longer than the retention period configured in our Analytics property, which is a maximum of 14 months for a standard Google Analytics property. Aggregated reports may be retained for longer because they are not affected by the same user-level retention setting.
Google Tag Manager and Consent Mode
We use Google Tag Manager to manage website tags. Google Tag Manager does not itself create visitor profiles, but it controls when services such as Google Analytics are loaded.
The website uses a consent mechanism designed to communicate your choice to Google through Google Consent Mode. Analytics cookies are not stored or read when analytics consent is denied. Depending on the consent-mode configuration, Google may receive limited cookieless signals, such as consent status, timestamp, user agent, referrer and page-level technical information. These signals are not intended to identify or track an individual across websites.
Managing Your Choice
You can accept or reject optional cookies through the cookie banner. You can later change or withdraw your choice by selecting Cookie Settings in the website footer.
You can also delete or block cookies through your browser settings. Browser-level restrictions may affect website functionality.
6. Service Providers and Recipients
We share personal data only where necessary with service providers that help us operate the website and communicate with visitors. These may include:
Framer — website hosting, content delivery, forms, security and consent functionality
Google Analytics and Google Tag Manager — analytics and tag management, where applicable and subject to your consent choices
Email and technical service providers — delivery and storage of project enquiries and related communications
These providers may process personal data on our behalf or, for certain processing, as independent controllers under their own privacy terms.
We may also disclose personal data where required by law, to protect our legal rights, or in connection with a business reorganisation. We do not sell personal data.
More information is available in Framer’s Privacy Statement and Google’s Privacy Policy.
7. International Data Transfers
Some service providers may process personal data outside Sweden or the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards recognised under the GDPR, such as an adequacy decision, the EU Standard Contractual Clauses or another lawful transfer mechanism.
8. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected:
project enquiries that do not become active client relationships are normally retained for up to 24 months after the last meaningful contact
information connected to an active client relationship is retained for the duration of the relationship and for a reasonable period afterwards
records required under accounting, tax or other applicable law are retained for the legally required period
analytics data is retained as described in the cookie section above
cookie preferences are retained for as long as necessary to remember and respect your choice
We may retain limited information for longer where necessary to establish, exercise or defend legal claims.
9. Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no website or electronic transmission can be guaranteed to be completely secure.
10. Your Rights
Subject to the conditions and limitations in applicable law, you may have the right to:
request access to your personal data
request correction of inaccurate or incomplete data
request deletion of your personal data
request restriction of processing
object to processing based on legitimate interests
receive certain data in a portable format
withdraw consent at any time, without affecting processing carried out before withdrawal
lodge a complaint with a data protection authority
To exercise your rights, contact hello@visualoasis.design. We may need to verify your identity before responding to a request.
In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). Information about submitting a complaint is available at imy.se.
11. Automated Decision-Making
We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects for visitors.
12. AI-Generated and AI-Assisted Content
Some images, video, audio or other creative content displayed on this website may have been created, enhanced or materially altered using artificial intelligence.
This content is used for artistic, conceptual, illustrative or creative purposes. Where AI-generated or AI-manipulated content could reasonably be mistaken for an authentic depiction or recording of a real person, event or place, we aim to disclose its artificial or manipulated nature in a manner appropriate to the context.
AI-generated or AI-assisted content is not intended to mislead visitors or to be presented as documentary evidence of events that did not occur.
This section is provided for transparency. AI-generated content does not in itself involve the processing of a website visitor’s personal data. If an AI-related activity involves personal data, that processing remains subject to the other sections of this policy and applicable data-protection law.
13. Children’s Privacy
This website is not specifically directed at children, and we do not knowingly collect personal data from children through the website. If you believe a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete it.
14. External Links
The website may contain links to third-party websites. We are not responsible for the privacy practices, security or content of those websites. Please review their privacy information separately.
15. Changes to This Policy
We may update this policy when our website, services or legal obligations change. The latest version will always be published on this page with a revised “Last updated” date.
16. Contact
If you have questions about this policy or how we process personal data, contact:
Visual Oasis Innansjön 116 937 94 Burträsk Sweden hello@visualoasis.design