DRAFT – needs legal review. This text is not yet final and must be checked by a lawyer before launch.
Privacy policy
Last updated: 29 October 2026 (draft)
This policy explains how AuPairMatch.se handles personal data about au pairs and host families. We keep it as simple as we can. If anything is unclear, email us.
1. Who is responsible
The data controller is Lyon AM AB (org.nr 559281-8677), Sweden, which runs AuPairMatch.se. Contact: [email protected].
2. What we collect
From au pairs: first name(s) and surname as in your passport, preferred name, date of birth, email, phone, country, start date, languages and English level, education, yes/no answers (infant experience, previous au pair experience, driving licence, swimming, smoking, whether you're comfortable living with pets), your "About me" text, profile photo, and the date you gave consent. Later in the process, if you are matched: passport/ID copies and other documents needed for checks, the contract and the residence permit application.
From families: name, email, phone, preferred au pair type and start date, household details (adults, children's ages, area, and pets the household has: cat/dog/other, with an optional description), your "Au pair wanted" post if you publish one (title, start date, duration and description, shown publicly together with your kommun, children's ages and pets, but never your name or contact details), your messages, shortlists and interview requests. If you go ahead with a placement: contract details and payment records.
Technical data: basic server logs (such as IP address and browser type) kept by our hosting provider for security.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Matching au pairs and families, showing profiles, arranging interviews | Steps before a contract at your request (6.1 b) and your consent (6.1 a) |
| Identity and security checks before a placement | Legitimate interest in keeping au pairs and families safe (6.1 f) |
| Preparing and managing the au pair contract | Contract (6.1 b) |
| Helping with the residence permit application to Migrationsverket | Contract (6.1 b), at your request |
| Payment records and bookkeeping, including reporting to Skatteverket | Legal obligation (6.1 c), e.g. Swedish bookkeeping law |
| Occasional news by email (only if you opt in) | Consent (6.1 a), which you can withdraw at any time |
4. What families see
Before shortlisting (anyone browsing, no account): first initial, age, country, languages, English level, start month and the yes/no answers. No surname, date of birth, photo, "About me" text or contact details.
After a registered family shortlists an au pair: that family can also see the au pair's first or preferred name, photo and "About me" text, so they can prepare an interview. Contact details are shared only when both sides agree to an interview. Passport details are never shown to families.
5. Who processes data for us
We use Cloudflare, Inc. to host the website, database and file storage. Cloudflare is our processor and only handles data on our instructions. Our database is stored in the EU (Cloudflare D1, EU jurisdiction). Some data, such as server logs or support access, may still be transferred to the USA; such transfers are covered by the EU Standard Contractual Clauses (SCCs) and Cloudflare's certification under the EU–US Data Privacy Framework. We may also share data with Migrationsverket and Skatteverket when needed for the purposes above. We never sell personal data.
6. How long we keep it
We keep your profile for 12 months after your last activity, then delete it. You can ask us to delete it sooner at any time. Records we must keep by law (for example bookkeeping records, normally 7 years) are kept for as long as the law requires.
7. Your rights
You have the right to access your data, have it corrected (rectification), have it deleted (erasure), object to processing based on legitimate interest, get it in a portable format (portability), and to withdraw consent at any time. Email [email protected]; we answer within one month. To ask us to delete your data, email us with the subject "Delete my AuPairMatch data" (or go to /delete-my-data). You can also complain to the Swedish data protection authority, IMY (Integritetsskyddsmyndigheten, imy.se).
8. Cookies
We only use cookies that are strictly necessary for the site to work, for example to keep you signed in. We do not use advertising or tracking cookies, so we do not ask for cookie consent.
9. Minimum age
AuPairMatch.se is for people aged 18 or older. Au pairs must be 18–29 years old when they register, and Migrationsverket must decide the residence permit before their 30th birthday. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
10. Changes
If we change this policy, we will update the date above and tell registered users about important changes by email.