Privacy policy

Data and purposes

We process contact, account, order, delivery and payment-reference data to collect payment, produce and deliver orders, provide support and handle complaints and returns. Stripe handles full card details; we do not store them.

If you submit a custom request, personal text, social link or testimonial, we process that content to fulfil the request. Testimonials are published only with consent and after approval.

Legal bases and recipients

Processing is based on contract, legal obligations, legitimate interests in secure operations and support, and consent where required.

We use Supabase for database, authentication and files, Stripe for payments and tax, Loopia for email and a VPS for web hosting. Data is disclosed only when needed for these services or required by law.

Retention

Order and accounting records are retained for at least seven years under accounting rules. Other data is kept while needed for its purpose, active claims or your account. Published testimonials are removed when consent is withdrawn unless another legal basis requires retention.

Your rights

You may request access, correction, deletion, restriction and portability and object to certain processing. You may withdraw consent without affecting earlier lawful processing. Contact us by email. You may also complain to the Swedish Authority for Privacy Protection (IMY).