Privacy policy

My Store is the data controller for the personal data described in this policy. That means we decide why and how it is used, and we are answerable for it under the EU General Data Protection Regulation (GDPR).

Trading as

My Store

You can reach us at any time through our contact page.

Data you give us:

• —Order details: name, delivery and billing address, email address, telephone number where you provide one, and what you ordered.
• —Account details, if you create an account: email address, password (stored only in encrypted form) and saved addresses.
• —Messages you send us through the contact form or by email.
• —Your email address, if you choose to subscribe to our updates.

Data collected automatically when you browse:

• —Technical data: IP address, browser and device type, and the pages you visit on this site.
• —Usage data from our analytics, and the actions reported to our advertising measurement tool, as described in our cookie policy.

We never receive or store your full payment card number. Card details are entered directly with our payment provider, which handles them under its own security standards.

Your orders

To take payment, dispatch your order, keep you informed about it and handle returns, refunds and complaints. Legal basis: performance of our contract with you.

Your account

To let you sign in, see your order history and reuse saved addresses. Legal basis: performance of our contract with you.

Accounting

To keep the records of sales that bookkeeping and tax law require us to retain. Legal basis: compliance with a legal obligation.

Support

To answer your questions and keep a record of what was agreed. Legal basis: performance of our contract, or our legitimate interest in handling enquiries.

Security and fraud

To keep the store available, prevent fraudulent orders and protect against misuse. Legal basis: our legitimate interest in protecting the business and our customers.

Analytics

To understand how the store is used so we can improve it. Legal basis: your consent, recorded when you arrive and withdrawable at any time through the Manage cookies link.

Advertising measurement

To see whether our advertising on Facebook and Instagram leads to sales, and to show our products to people likely to be interested. This uses the Meta pixel. Legal basis: your consent, withdrawable at any time through the Manage cookies link.

Marketing emails

To send you news about our collections, where you have asked to receive them. Legal basis: your consent. Every message carries a one-click unsubscribe link.

We do not use your data for automated decision-making that produces legal effects for you, and we never sell it. We do use the Meta pixel for advertising measurement and audience building, which is described in full in our cookie policy, and which you can switch off at any time.

We never sell your personal data. We share it only with the parties that make the shop work, and only with what they need:

• —Our payment provider, to take and where necessary refund payment, and to screen for fraud.
• —Carriers and logistics partners, to deliver your order and manage returns.
• —The ecommerce platform that hosts this store and its email delivery, which processes data on our instructions under a data processing agreement.
• —Our analytics provider, which measures how the store is used.
• —Meta Platforms Ireland Limited, which receives events about your visit — such as products viewed or purchases completed — so we can measure and target our advertising on Facebook and Instagram. Meta uses that data as an independent controller under its own terms.
• —Professional advisers and public authorities, where the law requires us to disclose data.

We aim to keep personal data within the European Economic Area. Where a provider processes data outside it, that transfer is covered by an adequacy decision of the European Commission or by Standard Contractual Clauses together with any additional safeguards required. You may ask us for details of the safeguards applied.

• —Order and invoice records: for as long as bookkeeping and tax law require — in Sweden, seven years from the end of the financial year the order falls in.
• —Account data: for as long as your account is open. Close it and we delete or anonymise what we are not legally obliged to keep.
• —Support messages: normally up to three years, so we can handle complaints and warranty claims.
• —Analytics data: in line with the retention set with our analytics provider, and in any case no longer than needed for the purpose.
• —Marketing consent: until you unsubscribe or withdraw it.

Under the GDPR you may ask us to:

• —Give you access to the personal data we hold about you, and a copy of it.
• —Correct data that is inaccurate or incomplete.
• —Erase data we no longer have a lawful reason to keep.
• —Restrict how we use your data while a question about it is resolved.
• —Provide your data in a portable, machine-readable format, or send it to another controller.
• —Stop using data we process on the basis of our legitimate interests, where you object to that use.

Where we rely on your consent — analytics, advertising measurement, marketing emails — you may withdraw it at any time, without affecting what was lawful before. Use the Manage cookies link in the footer for cookies, or the unsubscribe link in any email.

To exercise any of these rights, contact us through our contact page. We respond within one month. There is no charge, and we may ask you to confirm your identity first.

If you believe we have handled your personal data unlawfully, please tell us first so we can put it right. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se, or with the supervisory authority of the EU country where you live or work.

This site is served over an encrypted connection, access to customer data is limited to the people who need it to do their work, and payment data is handled by our payment provider rather than by us. No system is immune, but where a breach is likely to result in a risk to your rights we notify the supervisory authority and, where required, you.

This site is not intended for children, and we do not knowingly collect data from anyone under 18.

We update this policy when our processing changes or the law requires it. The date at the top of the page shows when it was last revised; material changes are brought to your attention in the store.

Cookies and similar technologies are described separately in our cookie policy.