Privacy Policy

This privacy policy describes how lillestudio collects, uses, stores, and protects personal data in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

The data controller responsible for processing your personal data is lillestudio.

Contact: hej@lillestudio.se

What personal data we collect

We collect personal data when you make a purchase, contact us, or use our website. The data may include:

Name
Address
Email address
Phone number
Payment information
IP address
Order history
Technical information about device and usage

How we collect data

Personal data is collected when you:

Make a purchase
Contact customer service
Sign up for our newsletter
Use our website through cookies and similar technologies

Purposes and legal bases for processing

We process your personal data for the following purposes and on the following legal bases:

Performance of a contract
To manage orders, payments, and deliveries
Legal obligation
To comply with requirements under the Accounting Act and other applicable legislation
Legitimate interest
To improve our website, prevent fraud, and provide customer support
Consent
To send marketing by email when you have actively approved this

Sharing of personal data

We only share your personal data when necessary with:

Payment providers to process payments
Shipping companies to deliver your order
Printing and production partners for print on demand, such as Gelato
IT and system providers, including Shopify

All recipients process personal data in accordance with the GDPR and under data processing agreements where required.

Transfers to third countries

Some of our providers may process personal data outside the EU and EEA. In such cases, an adequate level of protection is ensured through, for example, the European Commission’s standard contractual clauses or equivalent safeguards.

Storage of personal data

We retain your personal data only for as long as necessary to fulfill the purposes of the processing.

Data related to purchases is retained in accordance with the Accounting Act, normally for seven years.

Your rights

Under the GDPR, you have the following rights:

The right to access your personal data
The right to rectify inaccurate data
The right to erasure in certain cases
The right to restriction of processing
The right to object to processing
The right to data portability

To exercise your rights, contact us by email.

Cookies

We use cookies and similar technologies to improve functionality, analyze traffic, and customize content. You can change your cookie settings at any time in your browser or through our cookie banner.