Privacy Policy

Last updated: August 16, 2026

Wittenfelt AB ("Wittenfelt", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit wittenfelt.com, make a purchase, contact us, subscribe to marketing communications or otherwise interact with our services.

Wittenfelt AB is the data controller for the personal information described in this Privacy Policy, except where another party acts as an independent data controller.

Personal Information We Collect

Depending on how you interact with Wittenfelt, we may collect and process the following categories of personal information:

• Contact information, such as your name, email address, telephone number, billing address and shipping address.

• Order and transaction information, including products purchased, returns, refunds, order history and payment status.

• Payment information, which is processed through our payment providers. Wittenfelt does not directly store complete payment card details.

• Account information, if you create or use a customer account.

• Communications, including information you provide when contacting our customer service.

• Device and technical information, including IP address, browser type, device information and similar technical identifiers.

• Usage information, such as how you interact with our website, pages viewed and actions taken.

• Marketing information, including your marketing preferences and, where applicable, interactions with our advertisements and marketing communications.

How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order, contact us, create an account or subscribe to marketing communications.

• Automatically when you use our website, including through cookies and similar technologies.

• From service providers that help us operate our store and fulfil orders.

• From advertising, analytics and marketing partners where permitted by applicable law and your cookie or marketing choices.

How We Use Your Personal Information

We process personal information only where we have an appropriate legal basis.

Orders and Customer Service

We use personal information to:

• Process and fulfil your orders.

• Process payments.

• Arrange delivery.

• Manage returns and refunds.

• Communicate with you about your order.

• Provide customer support.

The legal basis for this processing is generally that it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Legal and Accounting Obligations

We may process and retain certain information where necessary to comply with applicable laws, including accounting, tax and consumer protection requirements.

The legal basis for this processing is compliance with our legal obligations.

Marketing

Where permitted by applicable law, we may use your contact information to send you news, product information, offers and other marketing communications.

Where consent is required, we rely on your consent. You can unsubscribe from email marketing at any time by using the unsubscribe link included in our emails.

We may also process certain information for marketing based on our legitimate interests where permitted by applicable law.

Analytics and Improvement

We may use information about how visitors interact with our website to understand website performance, improve the shopping experience and develop our services.

Depending on the technology used and applicable law, this processing may be based on your consent or our legitimate interests.

Advertising

Subject to your choices and applicable law, we may use cookies and similar technologies to measure advertising performance and show relevant advertising through third-party advertising platforms.

Where consent is legally required for such technologies, they will be used on the basis of your consent.

Security and Fraud Prevention

We may process personal information where necessary to protect Wittenfelt, our customers and our services against fraud, misuse, security threats and other unlawful activity.

This processing may be based on our legitimate interests in maintaining a secure e-commerce service and, where applicable, compliance with legal obligations.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, remember preferences, understand how visitors use our website and, where permitted, support analytics and advertising.

Some cookies are necessary for the website to function. Other cookies, including certain analytics and advertising cookies, may require your consent.

You can manage your cookie preferences through the cookie settings available on our website.

Shopify

Our online store is powered by Shopify. Shopify processes personal information to provide the e-commerce infrastructure that enables us to operate our online store.

Information submitted through our store may therefore be processed by Shopify and its service providers.

For more information about Shopify's processing of personal information, please refer to Shopify's own privacy information.

Service Providers and Third Parties

We may share personal information with trusted service providers where necessary to operate our business and provide our services.

These may include providers of:

• E-commerce and website services.

• Payment processing.

• Shipping and fulfilment.

• IT and hosting services.

• Analytics.

• Email and marketing services.

• Advertising services.

• Accounting and administrative services.

• Customer support services.

We only disclose personal information where there is an appropriate purpose and legal basis for doing so.

We may also disclose information where required by law, in connection with legal proceedings or to protect our legal rights.

International Data Transfers

Some of our service providers may process personal information outside Sweden or the European Economic Area (EEA).

Where personal information is transferred outside the EEA, we take appropriate measures as required by applicable data protection law. These may include transfers to countries recognised as providing an adequate level of protection or the use of approved safeguards such as the European Commission's Standard Contractual Clauses.

How Long We Keep Your Information

We retain personal information only for as long as necessary for the purpose for which it was collected or as required by applicable law.

Retention periods may therefore vary depending on the type of information and why it is processed.

For example, certain transaction and accounting information may need to be retained to comply with legal obligations even after your customer relationship with Wittenfelt has ended.

When personal information is no longer required, we will delete or anonymise it in accordance with applicable requirements.

Your Rights

If the GDPR applies to the processing of your personal information, you may have the right to:

• Request access to the personal information we hold about you.

• Request correction of inaccurate or incomplete information.

• Request deletion of your personal information in certain circumstances.

• Request restriction of processing in certain circumstances.

• Object to certain processing, including processing based on legitimate interests.

• Receive certain personal information in a portable format where applicable.

• Withdraw your consent at any time where processing is based on consent.

• Object to the use of your personal information for direct marketing.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact us at info@wittenfelt.com.

We may need to verify your identity before completing certain requests.

Complaints

If you have concerns about how Wittenfelt processes your personal information, please contact us at info@wittenfelt.com so that we can address your concerns.

You also have the right to lodge a complaint with the relevant data protection supervisory authority.

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Children's Privacy

Our services are not intended for children, and we do not knowingly collect personal information from children in circumstances where such processing would not be permitted by applicable law.

If you believe that a child has provided us with personal information improperly, please contact us.

Security

We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or business practices.

When we make changes, we will update the "Last updated" date at the top of this policy and provide additional notice where required by law.

Contact

If you have questions about this Privacy Policy, how we process your personal information or wish to exercise your data protection rights, please contact:

Wittenfelt AB
Email: info@wittenfelt.com
Sweden