Privacy & GDPR
Last updated: 10 June 2026
Data controller
Swedexpress AB (org.nr 559276-1109), Badvikshöjden 4, 424 57 Gunnilse, Sweden, is the controller of personal data processed on this site. Contact: support@swedexpress.store.
What we collect
Order details (name, shipping address, email, phone, items purchased), payment confirmation references from our payment provider, optional account data (email, login method), and messages you send via the contact form. We never store full card numbers — card data is handled entirely by Stripe.
Legal basis
We process order data to perform the sales contract (GDPR Art. 6(1)(b)) and to meet legal obligations such as accounting (Art. 6(1)(c)). Optional account data is processed based on the contract with you. Any future non-essential cookies would rely on consent (Art. 6(1)(a)), which you can withdraw at any time.
Who receives your data
We share data only with service providers needed to run the store: Stripe Payments Europe (payment processing), Resend (transactional email delivery, US provider), and Google (only if you choose Google sign-in). Order and account data is stored in our own self-hosted database. We never sell personal data.
International transfers
Some providers (Resend; parts of Stripe's infrastructure) may process data in the United States. Such transfers are protected by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
Retention
Order records are kept for 7 years as required by the Swedish Accounting Act (bokföringslagen). Account data is kept until you delete your account. Contact messages are deleted when no longer needed.
Your rights
You may request access, correction, deletion, restriction, or portability of your data, object to processing, and withdraw any consent at any time. You can delete your account yourself on the Account page. For anything else, contact support@swedexpress.store.
Children
Our store is not directed at children and we do not knowingly collect personal data from anyone under 16.
Complaints
If you believe we process your data unlawfully, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se, or your local EU supervisory authority.
Cookies & local storage
We currently use only strictly necessary first-party cookies and local storage — no analytics, advertising, or third-party trackers. If we ever add non-essential cookies, they will only be set after your consent, which you can change anytime via “Cookie settings” in the footer.
| Name | Purpose | Duration |
|---|---|---|
| cookie_consent | Stores your cookie consent choice | 1 year |
| currency | Remembers selected currency (SEK/EUR) | Session |
| i18n_redirected | Remembers your language choice | 1 year |
| theme | Remembers your theme choice | 1 year |
| swedexpress_cart (localStorage) | Keeps your shopping cart on this device | Until cleared |