Privacy policy

When you interact with us we might come to process your personal information/data and here we explain how and why we do so. Personal data is information that can identify a specific person. We respect your privacy and do our outmost to keep your information safe and secure. Our website contain links directing you to external websites, if you follow such links you leave our site and we encourage you to read relevant privacy notices.

Please read this Privacy Policy carefully. By using and accessing any of our services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

1.   Who processes the personal data?

Luxrosata AB (“we”, “us” or “our”), reg no. 559529-8075, operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience (the "Services") and we are responsible for processing your personal information / data. For the purpose of applicable data protection laws, we are the data controller of your personal information.

2.   From where or whom do we collect information about you?

We mainly process information that you have provided to us by visiting our webshop, reaching out to us, placing orders or taking part in events. We may collect the following from you or our partners;

  • Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties such as Shopify, who powers our shop and checkout function or Stripe who acts as payment processor or Gelato who fulfils our printed orders or other suppliers facilitating our provision of the Services.

3.   Where is personal information processed?

We are based in Sweden and aim to process your personal information within the EU, but we might also use suppliers, business partners, IT tools etc which are located outside of the EU. When using third party tools or suppliers that are based outside of the EU, we only transfer personal information where there is an adequate level of protection thereof and in line with applicable data protection legislation.

4.   Why do we process your personal information?

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfil your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
  • Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
  • Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
  • Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
  • Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

5.   What categories of personal information do we process?

To provide our services we collect information on your device, browser, connection, IP address or other identifiers.

To sell products or services we process the following; name, contact information, delivery instructions, information about your order/purchase, delivery and possibly identification numbers, age verification or other data needed for payment, tax, insurance or shipping such as any financial or transactional information.

If you have any complaints we process the claim you put forward to us.

If you set up an account we process username, password, security questions, preferences and settings.

To keep you informed of our Service and other creative endeavours we process your name and email or your request to not receive communications. We may also keep any information you have opted to share with us via email or by using our contact form.

When you visit our shop, we also process cookie related information. You can read more in general about Shopify Cookies here. You can access specific cookie preferences manually by using Cookie preferences in the footer menu of our shop.

6.   Children’s Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

7.   With whom do we share your personal information?

We never sell any personal information. We only share it when we need to in order to conduct our operations. Such sharing could be to enter your personal information (or allowing yourself to provide your information) into the various administrative tools, applications and systems that we use whereby our suppliers might be able to access your information. Your information can also be shared with entities fulfilling and/or shipping your order, and possibly keeping it insured or to payment providers who process your payment or refund. If your order is shipped cross border information about the shipment will most likely come to the attention of official tax and/or customs authorities. If required by law, we share your information with authorities.

Our Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.

If you order prints or merchandise your data will be shared with Gelato who fulfil our orders, see Gelato Privacy Policy.

8.   On what legal basis do we process your personal information?

We process your information based on the agreement we have with you if we are supplying you goods or services. Some processing is also carried out to fulfil our legal obligations, such as complying with consumer legislation, bookkeeping requirements or other mandatory rules and regulations.

If we communicate with you in matters not related to a specific purchase, we do so based on our legitimate interest to conduct our operations or because you have solicited such communications.

9.   For how long do we keep your personal information?

At least for as long as it is needed to fulfil orders or comply with legal requirements, such as bookkeeping (generally 7+ years), process right of complaints (generally never more than 5 years), etc and at most for as long as we assume you might want to hear from us, unless we have received any indicators to the contrary.

10.   What are your legal rights when we process your personal information?

You have certain rights in relation to your personal information. Mainly you have the right to;

  • Information – such as information about our processing and access to your data.
  • Rectification – you may request that we correct inaccurate information
  • Erasure – you can ask us to delete information (the right to be ‘forgotten’)
  • Limitation –  in certain cases you can demand that processing is limited.
  • Objection – you have the right to object to your personal data being used.
  • Withdrawal of Consent –  if we rely on your consent to process your personal information, you have the right to withdraw such consent.
  • Complain – you can lodge a complaint with IMY, see below link.

You can read a more detailed explanation of your rights by visiting IMY, the Swedish Authority for Privacy Protection, who also provide a wealth of information on Privacy overall.

You may also reach out directly to Shopify’s Privacy Portal to manage your data and make requests.

Do not hesitate to contact us if the information above is not clear enough or if you want to understand more about how it applies to you.

11.   Contact us

If you have any questions or want to exercise any of your rights, you can reach out to us at luxrosata+privacy@gmail.com. We will do our best to answer your questions.

***

Implemented on 1st of January 2026