Privacy Policy

01 Data we collect

GLITZER is responsible for the personal data handled by this store. Depending on how you use it, we receive:

• Your name, email address, phone number, and delivery address when you order
• Order contents, payment status, transaction references, and support messages
• Your email address if you subscribe to the newsletter
• A review, display name, order reference, and IP address if you submit a product review

Stripe processes payment details during checkout. GLITZER does not store full card details. Your bag is saved in your browser.

02 How we use your data

We use order information to process payment, arrange delivery, provide customer support, and handle returns or complaints. We use messages to respond to your enquiries and keep records needed for accounting and legal obligations. We check submitted reviews against paid orders before publishing them.

If you subscribe to our newsletter, we use your email address to send it. You can unsubscribe using the link in a newsletter or our unsubscribe page.

03 Legal basis

We process purchase and delivery data to perform our contract with you. We keep accounting records to meet legal obligations. We handle enquiries and verify reviews for our legitimate interests in customer service and trustworthy product information. Newsletter subscriptions are based on your consent, which you can withdraw at any time without affecting earlier processing.

04 How long we keep data

The store database deletes your newsletter address when you unsubscribe. It deletes an unpaid order record when Stripe reports that its checkout session expired. Swedish accounting rules require accounting records to be kept through the seventh year after the calendar year in which the financial year ended.

Contact messages are deleted automatically 30 days after we receive them. Unpaid checkout records are deleted after 30 days at the latest. The IP address stored with a review is removed after 90 days, unpublished reviews are deleted after 90 days, and published reviews are deleted after three years. Completed orders are deleted after the accounting retention period above. Contact us to request deletion of a specific record; a legal duty to keep accounting information can limit a request.

05 Who receives your data

Stripe processes payments. Namecheap Private Email handles our support and newsletter email. Our hosting provider stores the site and its order records. When we place a fulfilment order through AliExpress, we provide the delivery details needed by the marketplace, the seller, and delivery companies: your name, delivery address, and contact details.

AliExpress sellers or delivery providers may be outside the EU/EEA, including in China. AliExpress explains its own international transfers in its privacy policy. Sending your delivery details to a seller or carrier outside the EU/EEA is necessary to deliver the order you placed with us (GDPR Article 49(1)(b)). We send only the details needed for delivery.

06 Cookies & browser storage

The storefront uses browser local storage to remember your bag. You can clear it in your browser settings; doing so resets your bag. We do not load optional analytics or advertising trackers on the storefront.

The site requests fonts from Google Fonts, so your browser connects to Google when loading the page. Stripe’s hosted checkout operates separately and may use technologies necessary for payment and fraud prevention.

07 Your privacy choices

We use only bag storage on the storefront, so there is no optional tracking switch to manage. Newsletter email is used for marketing only if you submit the separate subscription form. You can unsubscribe at any time.

You can clear your bag through your browser storage settings. To ask about or exercise your data rights, contact us below.

08 Your rights

Under the GDPR, depending on the circumstances, you can request access to your personal data, correction, deletion, restriction of processing, or a portable copy. You may also object to certain processing and withdraw consent.

To make a request, contact us below. We may need information to verify your identity. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

09 Contact

For privacy questions or requests, email support@glitzer.store use our contact form. Describe your request and include an order reference if relevant. Please do not send full payment-card details.