Your privacy is important to us. This privacy policy explains how Jewellery by Märta Hillfon collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller for the processing of your personal data is:

Märta Hilfon (Sole Proprietorship)
Organisation number: 19840712-3606
Address: Olserödsvägen 138, 297 95 Degeberga, Sweden
Email: kontakt@martahillfon.se

2. What Data We Collect

We collect the following personal data when you shop with us or use our website:

When Making a Purchase

• Name and contact details (email, phone number)
• Delivery address and billing address
• Order history and purchase information
• Payment details (handled by Klarna)

When Visiting the Website

• IP address and browser information
• Cookies and similar technologies
• Information about how you navigate the website

When Subscribing to Newsletter

• Email address
• Name if provided

3. How We Use Your Data

We process your personal data for the following purposes:

Fulfilling Agreements (Legal Basis: Contract)

• Processing and delivering your order
• Communicating with you about your order
• Handling returns and complaints
• Invoicing and payment

Legal Obligations (Legal Basis: Law)

• Accounting and tax purposes
• Compliance with consumer legislation

Marketing (Legal Basis: Consent)

• Sending newsletters and offers if you have consented
• Personalized recommendations

4. Sharing with Third Parties

We share your personal data with the following third parties to fulfill our obligations to you:

Shopify

Our e-commerce platform Shopify processes your data to manage orders and the website. Shopify has its own data protection practices and is certified under the EU-US Privacy Framework. Read Shopify's Privacy Policy

Klarna

Our payment provider Klarna handles payment information to process purchases and credit assessments. Klarna is the data controller for the processing they perform in connection with payment. Read Klarna's Privacy Policy

Shipping Carriers

To deliver your order, we share your delivery address and contact details with our shipping partners (PostNord, DHL).

5. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access - You can request a copy of the personal data we hold about you.
• Right to Rectification - You can request that incorrect data be corrected.
• Right to Erasure - You can request that your data be deleted (with certain exceptions, e.g., accounting requirements).
• Right to Restriction - You can request that the processing of your data be restricted.
• Right to Data Portability - You can request to receive your data in a machine-readable format.
• Right to Object - You can object to processing based on legitimate interest.
• Right to Withdraw Consent - You can withdraw consent at any time, e.g., for newsletters.

To exercise your rights, contact us at kontakt@martahillfon.se. We will respond to your request within 30 days.

6. How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes for which it was collected:

• Order information: 7 years according to Swedish accounting law
• Customer account: Until you request deletion
• Newsletter subscription: Until you unsubscribe
• Cookies: See the cookies section below

7. Cookies

Our website uses cookies to improve your experience and to ensure the website functions correctly.

Necessary Cookies

These cookies are necessary for the website to function, e.g., to manage your shopping cart and complete purchases.

Analytical Cookies

We use analytical cookies to understand how visitors use the website. These help us improve the website's functionality and content.

Managing Cookies

You can manage cookies through your browser settings. Please note that if you block necessary cookies, the website's functionality may be affected.

8. Security

We take appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All communication with our website is via encrypted connection (HTTPS).

9. Complaints to Supervisory Authority

If you believe we are processing your personal data incorrectly, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY):

Swedish Authority for Privacy Protection (IMY)
Box 8114, 104 20 Stockholm, Sweden
www.imy.se

10. Contact

Do you have questions about our privacy policy or how we handle your personal data? Contact us:

Email: kontakt@martahillfon.se
Address: Olserödsvägen 138, 297 95 Degeberga, Sweden