Lab Legal Governance

1.1 Data Controller Identification

The data controller responsible for personal data processing is DesignForgeWork, registered at 256 64 Torsdagsgatan 72, Helsingborg, Sweden. All inquiries regarding data processing may be directed to [email protected].

1.2 Categories of Personal Data

We collect and process the following categories of personal data:

• Contact identification (name, email address, telephone number)
• Organizational affiliation and professional role
• Project specification details and communication records
• Technical telemetry (IP address, browser type, session duration)

1.3 Legal Basis for Processing

Personal data is processed under Article 6(1)(b) of the EU General Data Protection Regulation (GDPR) — processing necessary for the performance of a contract or pre-contractual measures — and Article 6(1)(f) — legitimate interest in maintaining secure lab operations and service quality.

1.4 Data Retention

Personal data is retained for the duration necessary to fulfill the stated purpose: project communication records are retained for 24 months following the last active engagement. Technical telemetry logs are purged after 12 months. Upon expiry, data is irreversibly deleted from all EU-hosted cloud systems.

1.5 Data Subject Rights

Under the GDPR, you possess the following rights:

• Right of Access — Obtain a copy of all personal data we hold
• Right to Rectification — Correct inaccurate personal data
• Right to Erasure — Request deletion of your personal data
• Right to Restriction — Limit processing in specific circumstances
• Right to Data Portability — Receive data in machine-readable format
• Right to Object — Object to processing based on legitimate interest

To exercise any of these rights, contact our lab at [email protected]. We will respond to all requests within 30 calendar days.

1.6 International Data Transfers

All personal data is processed and stored within the European Economic Area (EEA). Where data transfer outside the EEA is operationally necessary, we rely on EU Standard Contractual Clauses (SCCs) as the appropriate safeguard under Article 46(2)(c) GDPR.

1.7 Supervisory Authority

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe your data processing rights have been violated: imy.se.

2.1 Scope of Engagement

All design services, interface system deliverables, and advisory protocols provided by DesignForgeWork are governed by explicitly contracted Statements of Work (SOW) executed between the Client and DesignForgeWork, registered at 256 64 Torsdagsgatan 72, Helsingborg, Sweden.

2.2 Intellectual Property Transfer

Upon complete settlement of agreed commercial invoices, DesignForgeWork assigns all worldwide intellectual property rights in client-specific design deliverables, component libraries, design tokens, and digital assets directly to the Client. This assignment is irrevocable and includes all derivative works created during the engagement.

2.3 Portfolio Rights

DesignForgeWork reserves the right to display completed project work in professional portfolios and case studies unless explicitly restricted by the executed SOW. All portfolio usage will omit confidential client data and proprietary business information.

2.4 Limitation of Liability

DesignForgeWork's total aggregate liability for any engagement shall not exceed the total fees paid by the Client for the specific service giving rise to the claim. DesignForgeWork shall not be liable for indirect, incidental, consequential, or punitive damages arising from service delivery.

2.5 Governing Law

These Terms of Service are governed by and construed in accordance with the laws of Sweden. Any dispute arising from or relating to these terms shall be subject to the exclusive jurisdiction of the courts of Helsingborg, Sweden.

3.1 Cookie Classification

DesignForgeWork utilizes the following categories of cookies:

3.2 Third-Party Cookies

We do not serve third-party advertising or tracking cookies. Embedded Google Maps on our contact page may set functional cookies governed by Google's privacy policy. You may manage Map-related cookies through your browser settings.

3.3 Managing Cookies

You may accept or decline non-essential cookies through our consent banner displayed upon first visit. You may also configure your browser to block or delete cookies at any time. Note that disabling strictly necessary cookies may impair site functionality.

4.1 Pre-Engagement Cancellation

Clients may cancel a commissioned project within 48 hours of initial payment without penalty. A full refund of all fees paid will be processed within 10 business days to the original payment method.

4.2 Mid-Engagement Refund

For projects cancelled after the 48-hour window but before delivery of the first milestone, DesignForgeWork will retain 25% of the total engagement fee to cover completed research, discovery, and initial design work. The remaining 75% will be refunded within 15 business days.

4.3 Post-Delivery Disputes

If delivered work materially deviates from the agreed SOW specifications, the Client must notify DesignForgeWork within 14 calendar days of delivery. DesignForgeWork will remediate the identified issues at no additional cost. If remediation is not feasible, a partial refund proportional to the scope deviation will be negotiated in good faith.

4.4 Refund Process

All refund requests must be submitted in writing to [email protected] with the subject line "Refund Request — [Project Name]." DesignForgeWork will acknowledge receipt within 2 business days and issue the refund within the timeframe specified in the applicable section above.

4.5 Exceptions

Refunds are not available for completed prototype sprints, accessibility audit reports, or user research deliverables once delivered, as these represent consumable intellectual output. Custom design system deliveries may be refunded in part if the SOW-defined acceptance criteria are demonstrably unmet.