Privacy policy

Last updated: October 2, 2025

1. Who is the Data Controller?

WESHAPES is the data controller for the processing of your personal data within our Services (webshop, customer service, etc.).
Contact: Support@weshapes.se

2. What information do we collect?

Contact details: name, email, phone number, address.
Customer and order data: items in cart/wishlist, purchases/returns/exchanges, order numbers.
Payment data: handled by our payment partners (card, Swish, Klarna, etc.) – we do not store full card details.
Account data: login details, preferences.
Technical data/usage: IP address, device and browser information, cookie ID, logs of page visits and interactions.
Communication: customer service inquiries, reviews/feedback.

3. Where do we get the data from?

  • Directly from you (account, purchase, customer service contact).

  • Automatically via cookies and similar technologies.

  • From service providers/partners (payment, shipping, IT, analytics, marketing).

  • From Shopify, which powers our store technology.

4. Why and on what legal basis do we process data?

  • Purchase and delivery (order handling, payment, shipping, returns) – contract performance.

  • Customer service – contract performance / legitimate interest.

  • Account and service operation – contract performance / legitimate interest.

  • Marketing (email, SMS, advertising) – based on consent where required; in some cases legitimate interest. You can always withdraw your consent or unsubscribe.

  • Security, fraud prevention, troubleshooting – legitimate interest and legal obligation.

  • Legal obligations (accounting, consumer rights) – legal obligation.

5. Who do we share data with?

  • Shopify (store platform, hosting, security, analytics, and enhanced features).

  • Payment and shipping providers (to process payments and deliver orders).

  • IT, support, analytics, and marketing partners (only under contract and our instruction).

  • Authorities or legal requests where required by law.

We do not sell your personal data.

6. Relationship with Shopify

Our store is hosted on Shopify, which may process personal data about your interactions with our and other merchants’ stores in order to provide and improve its services (including personalization and security features).
Read more in [Shopify’s Privacy Policy] [LINK] and manage your rights through [Shopify’s Privacy Portal] [LINK] for processing where Shopify acts as the controller.

7. International transfers

If personal data is transferred outside the EU/EEA (e.g., to Shopify’s or our partners’ infrastructure), we use valid transfer mechanisms such as the EU’s Standard Contractual Clauses or transfer to countries deemed to have an adequate level of protection.

8. Data retention

We store data for as long as necessary for each purpose:

  • Purchase information: typically 36 months (for warranty/claims); accounting records for 7 years.

  • Account/communication: as long as the account is active and thereafter as needed to handle claims.

  • Marketing: until you withdraw consent or object.

9. Cookies and tracking

We use cookies and similar technologies for essential functions (e.g., shopping cart), analytics, and marketing.
You can manage cookies in your browser and in our cookie banner/settings page.
See our [Cookie Policy] [LINK].

10. Your rights

Under the GDPR, you have the right (subject to legal exceptions) to:

  • Access your data (data extract).

  • Request correction or deletion.

  • Request restriction of processing.

  • Object to processing (including direct marketing).

  • Request data portability.

  • Withdraw consent at any time (applies going forward).

To exercise your rights, contact us via Support@weshapes.se.
We may need to verify your identity.

11. Security

We use technical and organizational measures to protect your data. However, no method is completely risk-free.

12. Complaints

If you are dissatisfied, please contact us at ....
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

13. Changes

We may update this policy from time to time. The current version is always available on our website and applies from the publication date above.

14. Contact

Questions or data requests: