Legal · 001

Privacy Policy

Last updated: [DATE] · Data controller: [COMPANY NAME / ORG. NO.]
Note — placeholder text. This is a minimal skeleton, not finished legal copy. Fields in [BRACKETS] need your actual details (company name, org. number, address, email, exact retention periods, any third-party services you actually use). Have a lawyer or accountant review this before the page goes live, especially the legal basis and retention sections.

01 Data we collect

When you shop with us or create an account, we collect the information you provide directly, such as:

  • Name and delivery address
  • Email address and phone number
  • Payment details (handled by our payment provider — we never store full card details ourselves)
  • Order history

We also automatically collect some technical information when you visit the site, such as IP address and device information, via cookies — see section 6.

02 Why we collect it

  • To fulfil and deliver your order
  • To handle payment and bookkeeping
  • To contact you about your order if needed
  • For marketing, if you've actively opted in (e.g. newsletter)

04 How long we keep data

We keep your data for as long as necessary for the purpose it was collected, and at minimum as long as required by law — for example, Swedish bookkeeping law (bokföringslagen) requires accounting records to be kept for 7 years. [Fill in your actual process for deleting customer data that's no longer needed.]

05 Who we share data with

We only share data with third parties when necessary to fulfil your order or as required by law, for example:

  • Payment provider (e.g. [Klarna / Stripe / other])
  • Shipping/fulfilment partner (to deliver your order)
  • Accounting service, where relevant

We never sell your data to third parties.

06 Cookies

The site may use cookies for essential functionality, and — with your consent — for analytics and marketing (e.g. TikTok pixel). You can manage or decline cookies in your browser settings. [If you use a cookie consent tool, describe it here and link to its settings.]

07 Your rights

Under GDPR, you have the right to:

  • Request a copy of the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("the right to be forgotten"), to the extent it doesn't conflict with other legal obligations (e.g. bookkeeping requirements)
  • Withdraw consent you've previously given, e.g. for the newsletter
  • Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

08 Contact

Questions about this policy or your personal data? Contact us at [contact@glitzer.store].