This is a translation. In case of any discrepancy, the Swedish version prevails.
Your privacy matters to us. This policy explains how MemoraMode collects and uses your personal data under the General Data Protection Regulation (GDPR).
1. Data controller
MemoraMode, reg. no. 0203033402
Täljstensvägen 16B, 75240 Uppsala
E-mail: info@memoramode.se
2. What data we process
- Contact and delivery details: name, address, e-mail address and phone number.
- Order details: products, amounts, order number and the payment method you chose. We never receive your full card details.
- Communication: what you write to us via the contact form or e-mail.
- Newsletter: your e-mail address and when you gave your consent.
- Technical information: IP address and browser information needed for security and operation, and cookies as described in our cookie policy.
3. Why we process your data
| Purpose | Legal basis | Retention |
|---|---|---|
| Handling, delivering and following up your order | Contract | Until the complaint period ends (3 years) |
| Bookkeeping | Legal obligation (Swedish Bookkeeping Act) | 7 years after the end of the financial year |
| Customer service and complaints | Legitimate interest / contract | Up to 12 months after the case is closed |
| Newsletter | Consent | Until you unsubscribe |
| Statistics and marketing via cookies | Consent | See the cookie policy |
| Security and fraud prevention | Legitimate interest | Up to 12 months |
4. Who we share data with
- Stripe Payments Europe Ltd – processes payments.
- Klarna Bank AB (publ) – if you choose to pay with Klarna.
- Cloudflare, Inc. – hosts the website and database (processor).
- Resend – sends order confirmations and e-mails (processor).
- Carriers (e.g. PostNord) – deliver your parcel.
- Google and Meta – only if you have consented to statistics or marketing cookies.
- Authorities – when required by law.
We never sell your personal data.
5. Transfers outside the EU/EEA
Some of our providers may process data in the USA. Such transfers are based on the European Commission's adequacy decision for the EU–US Data Privacy Framework and/or the Commission's standard contractual clauses.
6. Your rights
You have the right to access your data, have inaccurate data corrected, have data erased, restrict processing, object to processing based on legitimate interest, receive your data (data portability) and withdraw consent at any time. Contact us at info@memoramode.se.
If you are unhappy with how we process your data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
7. Security
The website uses an encrypted connection (HTTPS). Payments are handled by a PCI DSS certified payment provider and only authorised staff have access to your data.
8. Changes
We may update this policy. The latest version is always available here.