Privacy policy

Data and purposes

We process contact, account, order, delivery and payment-reference data to collect payment, produce and deliver orders, provide support and handle complaints and returns. Stripe handles full card details; we do not store them.

If you submit a custom request, personal text, social link or testimonial, we process that content to fulfil the request. Testimonials are published only with consent and after approval.

We may use valid shop account and order email addresses for occasional product updates and offers until you opt out. You can unsubscribe from marketing emails using the link in any update. Order and service emails continue when needed. Separate email signups are confirmed by email. We record email choices and opt-outs separately from analytics consent.

Legal bases and recipients

Processing is based on contract, legal obligations, legitimate interests in secure operations and support, and consent where required.

We use Supabase for database, authentication and files, Stripe for payments and tax, Cloudflare for email and a VPS for web hosting. Data is disclosed only when needed for these services or required by law.

With your consent, we use the Meta pixel to measure visits, product views, cart, checkout and paid purchases from advertising. Meta receives the page URL, cookie identifiers and normal browser connection details, such as IP address and browser information. Purchases also include amount, currency and a random order-based event ID. We do not add customer email, phone number or account identity to pixel events. Select Necessary only in Cookie settings to stop new measurement. Meta describes its processing in its privacy policy.

Retention

Order and accounting records are retained for at least seven years under accounting rules. Other data is kept while needed for its purpose, active claims or your account. Published testimonials are removed when consent is withdrawn unless another legal basis requires retention.

Your rights

You may request access, correction, deletion, restriction and portability and object to certain processing. You may withdraw consent without affecting earlier lawful processing. Contact us by email. You may also complain to the Swedish Authority for Privacy Protection (IMY).