Note — placeholder text. This is a minimal
skeleton, not finished legal copy. Fields in [BRACKETS] need your
actual details (company name, org. number, address, email, exact
retention periods, any third-party services you actually use). Have
a lawyer or accountant review this before the page goes live,
especially the legal basis and retention sections.
01 Data we collect
When you shop with us or create an account, we collect the
information you provide directly, such as:
- Name and delivery address
- Email address and phone number
-
Payment details (handled by our payment provider — we never
store full card details ourselves)
- Order history
We also automatically collect some technical information when you
visit the site, such as IP address and device information, via
cookies — see section 6.
02 Why we collect it
- To fulfil and deliver your order
- To handle payment and bookkeeping
- To contact you about your order if needed
-
For marketing, if you've actively opted in (e.g. newsletter)
03 Legal basis
We process your data where it's
necessary to fulfil our contract with you (your
purchase), and in some cases based on
consent (e.g. newsletter) or a
legal obligation (e.g. Swedish bookkeeping law).
04 How long we keep data
We keep your data for as long as necessary for the purpose it was
collected, and at minimum as long as required by law — for
example, Swedish bookkeeping law (bokföringslagen) requires
accounting records to be kept for 7 years. [Fill
in your actual process for deleting customer data that's no longer
needed.]
05 Who we share data with
We only share data with third parties when necessary to fulfil
your order or as required by law, for example:
- Payment provider (e.g. [Klarna / Stripe / other])
- Shipping/fulfilment partner (to deliver your order)
- Accounting service, where relevant
We never sell your data to third parties.
06 Cookies
The site may use cookies for essential functionality, and — with
your consent — for analytics and marketing (e.g. TikTok pixel).
You can manage or decline cookies in your browser settings. [If
you use a cookie consent tool, describe it here and link to its
settings.]
07 Your rights
Under GDPR, you have the right to:
- Request a copy of the data we hold about you
- Request correction of inaccurate data
-
Request deletion of your data ("the right to be forgotten"), to
the extent it doesn't conflict with other legal obligations
(e.g. bookkeeping requirements)
-
Withdraw consent you've previously given, e.g. for the
newsletter
-
Lodge a complaint with the
Swedish Authority for Privacy Protection (IMY)