What we keep, and why.
We collect what an order needs and nothing else. No tracking pixels, no advertising profiles, no data sold to anyone.
What we collect
When you place an order: your name, email address, delivery address and what you bought. Payment card details are entered directly with Stripe and never reach us. We see only that a payment succeeded, and the last four digits on the receipt Stripe sends.
Browsing the shop sets no analytics, no advertising and no tracking of any kind. There is nothing here counting you.
Why we are allowed to
To perform the contract you entered when you ordered. We cannot ship a cap without an address. Keeping the order afterwards is a legal obligation: Swedish bookkeeping law requires accounting records to be retained for seven years, and an order is an accounting record.
Who else touches it
- Stripe
- Takes the payment. Receives your email and delivery address.
- Resend
- Sends your confirmation. Receives your email address.
- Google Firebase
- Hosts the shop and stores orders, in the EU.
Each processes data on our instructions only. Nobody else receives it.
Cookies and what is stored in your browser
Three things, and none of them profile you. That is why you are not being asked to accept anything.
- Your basket
- Kept in your own browser so it survives a reload. Product codes and quantities, nothing about you. It never reaches us until you check out.
- Stripe
- Sets cookies to detect card fraud, and only on the checkout page. The payment form is not loaded anywhere else.
- Google Fonts
- Our typefaces load from Google, which means Google sees your IP address when a page opens. No cookie is set. We intend to serve them ourselves and remove that.
If we ever add anything that measures or follows you, we will ask first, before it loads, rather than with a banner that has already let it through.
Your rights
You can ask what we hold about you, have it corrected, or have it deleted, except where bookkeeping law requires us to keep it. You can also ask for a copy in a portable format. Email hello@efinitydesign.com and we will answer within a month.
If you think we have handled your data badly, you can complain to Integritetsskyddsmyndigheten (IMY), the Swedish data protection authority.
Who is responsible
A fish named Fred Sweden AB, registration number 559544-9132, is the controller of this data. Contact details are on the contact page.