Privacy policy

This policy explains how Welmira processes personal data when you visit our online shop, place an order or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and supplementary Swedish law.

1. Controller

Welmira, Stockholm, Sweden, is the controller for the processing described here. Contact: hello@welmira.com.

2. Personal data we collect

  • Order and customer data collected through Shopify checkout: name, delivery and billing address, email address, phone number (if provided), products ordered, order history.
  • Payment data: payment status and transaction references. Card and payment details are processed by the payment provider; we never see or store full card numbers.
  • Communication: the content of emails and messages you send us.
  • Technical data: IP address, browser and device information, and information about how you use the shop, collected via cookies and similar technologies (see section 8).
  • Newsletter: your email address, if you sign up.

3. Purposes and legal bases

  • Processing and delivering orders, handling returns and complaints: performance of a contract (Art. 6(1)(b) GDPR).
  • Bookkeeping and other legal requirements: legal obligation (Art. 6(1)(c)).
  • Customer service, preventing fraud and misuse, keeping the shop secure and improving it: legitimate interests (Art. 6(1)(f)).
  • Newsletter and non-essential cookies: consent (Art. 6(1)(a)). You can withdraw consent at any time.

4. Retention

  • Accounting records (for example orders and receipts) are kept for seven years after the end of the calendar year in which the financial year ended, as required by the Swedish Bookkeeping Act (bokföringslagen).
  • Other order and customer data is kept as long as needed to fulfil the order and handle any complaints, and then deleted or anonymised.
  • Customer service correspondence is kept as long as needed to handle the matter and any follow-up.
  • Newsletter data is kept until you unsubscribe.

5. Processors and recipients

We share personal data only with parties that help us run the shop, under agreements that protect your data:

  • Shopify (e-commerce platform and checkout).
  • Payment provider (the provider for the payment method you choose at checkout).
  • Shipping carrier (to deliver your order).
  • Authorities, where we are required to by law.

We do not sell your personal data.

6. Transfers outside the EU/EEA

Some of our processors, such as Shopify, may process data outside the EU/EEA. Such transfers take place only on a lawful basis, for example an adequacy decision by the European Commission or the EU standard contractual clauses.

7. Your rights

You have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time. To use your rights, email hello@welmira.com. Some data may need to be kept despite a request for erasure, for example to meet bookkeeping requirements.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se).

8. Cookies

The shop uses cookies that are necessary for it to work, for example to keep your cart and complete checkout. Analytics and marketing cookies are used only if you have consented where consent is required. You can change your choice or delete cookies in your browser settings.

9. Changes

We may update this policy. The current version is always published on this page.

10. Contact

Welmira, Stockholm, Sweden · hello@welmira.com