Last updated: 2026-02-03

This Privacy Policy explains how Mates Handicrafts AB (“we”, “us”, “our”) collects and processes personal data when you visit or shop from our webshop. It also explains how we use cookies.

1) Data Controller (Who we are)

Mates Handicrafts AB
Org.nr: 559557-8435
Address: Vildrosgatan 23, 25459 Helsingborg, Sweden
Email: info@mateshandicrafts.com

Mates Handicrafts AB is the data controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR).

2) What personal data we collect

We collect personal data depending on how you use our webshop:

A) Order and customer information

• Name
• Billing address and delivery address
• Email address and phone number
• Order details (items purchased, order value, delivery method)
• Communication relating to your order

B) Payment information

Payments are processed through external payment providers (e.g., Klarna and Swish). We receive payment status/confirmation and information needed to link payment to your order.
We do not store full card details on our own servers.

C) Customer service and communication

If you contact us, we process the information you provide (e.g., messages, order number and details needed to assist you).

D) Technical data (basic)

We may process limited technical data such as IP address and device/browser information for security, fraud prevention and basic site functionality.

3) Why we process your data (Purposes + legal basis)

We process personal data for the purposes below:

To process and deliver your order
Legal basis: Contract (GDPR Art. 6(1)(b))

To manage payments and prevent fraud/abuse
Legal basis: Contract and/or Legitimate interest (Art. 6(1)(b) / 6(1)(f))

Customer support, returns, complaints and warranty matters
Legal basis: Contract and/or Legitimate interest (Art. 6(1)(b) / 6(1)(f))

To comply with legal obligations (accounting/bookkeeping)
Legal basis: Legal obligation (Art. 6(1)(c))

Marketing communication (newsletter/offers), if you sign up
Legal basis: Consent (Art. 6(1)(a))
You can unsubscribe at any time via the link in emails or by contacting us.

Website analytics (currently not used)
We currently do not use Google Analytics (GA4) or Meta Pixel tracking on our website. If we introduce analytics tools in the future, we will update this policy and request cookie consent before any optional cookies are activated.

4) Who we share your data with

We share personal data only when needed to operate the webshop, process your order, and deliver products:

Payment providers

• Klarna
• Swish

Shipping and logistics partners

• DHL
• FedEx
• UPS

Website operations and IT/hosting

We use technical service providers (hosting, website tools, and essential plugins) to operate the webshop. These providers may process personal data only on our instructions and only to the extent required to provide their services.

We do not sell your personal data.

5) International transfers (outside EU/EEA)

Some service providers involved in website operations or communications may process data outside the EU/EEA. If personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are used in accordance with GDPR (for example, EU adequacy decisions or Standard Contractual Clauses where applicable).

6) How long we keep your data (Retention)

We keep personal data only as long as necessary for the purposes described above:

Orders, invoices and accounting records: stored according to Swedish bookkeeping requirements (typically 7 years)

Customer service correspondence: kept as long as needed to handle the matter and any related claims

Newsletter/marketing consent data: kept until you unsubscribe/withdraw consent (we may keep a minimal record to respect your opt-out)

7) Your rights under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion (where applicable)
• Restrict processing
• Object to processing based on legitimate interest (especially direct marketing)
• Data portability (in certain cases)
• Withdraw consent at any time (for consent-based processing)

To exercise your rights, contact us at info@mateshandicrafts.com.

You also have the right to lodge a complaint with Sweden’s data protection authority:
Integritetsskyddsmyndigheten (IMY).

8) Security

We use appropriate technical and organisational measures to protect personal data, such as secure connections (TLS/SSL), access controls, and limiting access to authorised persons only.

Cookie Policy