Privacy Policy

What we collect and why

When you create an account, place an order, or contact us, we process your name, company, organisation number, email, phone, billing and delivery addresses, and order history. The legal basis is performance of a contract with you or your company (GDPR Art. 6.1.b). For protecting equipment against loss, theft, or damage we may also rely on our legitimate interest (Art. 6.1.f).

When you visit the site, we use strictly necessary cookies to operate the cart, login, and basic security. With your consent (Art. 6.1.a GDPR and 9 kap. 28 § lagen om elektronisk kommunikation) we also use analytics and marketing cookies, including the Meta/Facebook Pixel.

Invoices and accounting records are kept because Swedish law requires it (Art. 6.1.c GDPR and bokforingslagen 7 kap. 2 §).

Who receives your data

We share personal data with our rental software provider Booqable (Salad Days B.V., Netherlands; production data hosted in the United States), our payment provider, our email provider (Google Workspace), and our accountant. With your cookie consent, we also share data with Google Ireland Limited for website analytics (Google Analytics) and Meta Platforms Ireland Ltd. for advertising measurement (Meta/Facebook Pixel). We do not sell personal data.

Transfers outside the EU/EEA

Some of these processors transfer data to the United States. These transfers are protected by the European Commission's Standard Contractual Clauses (Art. 46.2.c GDPR) and, where applicable, the EU–US Data Privacy Framework.

How long we keep it

Account and order data: three years after your last interaction with us. Accounting records: seven years (bokforingslagen). Marketing consent records: until withdrawn, plus 24 months. Website analytics: 14 months.

Your rights

Under GDPR you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing, and to withdraw consent at any time (Articles 15–22). We do not make decisions about you using fully automated processing. To exercise any right, email info@sthlmlights.com — we will respond within one month.

Complaints

You can lodge a complaint with the Swedish supervisory authority: Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, imy@imy.se, imy.se.

Changes

We may update this policy. The “Last updated” date above shows the current version.