Privacy policy
Egenbyggt Sweden AB, org.nr 559305-7242, Blåhallonvägen 11, 516 34 Dalsjöfors. Kontakt: [email protected].
Data controller
Egenbyggt Sweden AB is responsible for the shop’s processing of personal data. Contact [email protected] with questions or to exercise your rights. The company’s contact details are also in the purchase terms.
Data and purposes
We process names, email addresses, previously provided address and company details, carts, order items, prices, VAT, payment references, customer service messages and access rights. Passwords are stored as hashes. Temporary links are stored as hashes in access tables; the email queue contains private delivery links and discount codes for sending. Performance of a contract is the basis for purchases, delivery and necessary customer communication. Applicable accounting is based on legal obligations. Security checks and handling enquiries are based on legitimate interests. The purchase terms describe our single review email 10 days after purchase. Previous unsubscribes are respected. You can decline review emails through the link in the message or by contacting us. Declining does not affect your purchase or access to purchased content.
Providers and payments
Oderland hosts and stores the site. Brevo sends site emails. Stripe handles card payments and Swish is used when offered. Providers receive the information needed for their task, such as the recipient’s email address and the amount of an order. Card numbers and CVC codes are handled by the payment provider and are not stored in the shop database. Payment providers may also process data to fulfil their own statutory obligations under their privacy policies. Contact us for information about our providers and the safeguards applicable to processing outside the EU/EEA.
Retention and rights
We retain data for as long as needed to handle purchases, provide access to purchased content, offer customer service and comply with legal requirements. Some order details may need to be retained after an account closes. Reset links are valid for 30 minutes and private delivery links normally for seven days; these periods are not deletion deadlines for the entire order. Backups are kept separate from the active shop. You may request access, correction, deletion, restriction or data portability where the rules grant these rights, and object to processing based on legitimate interests. You may withdraw your choice about review emails without affecting your purchase. We may need to verify your identity proportionately. You may complain to the Swedish Authority for Privacy Protection, imy.se.