Privacy Policy
Privacy Policy for Yumeki
At Yumeki, we value your privacy and want you to feel confident about how we handle your personal data when you shop with us. This Privacy Policy explains what information we collect, how we use it and what rights you have.
Our principles for handling personal data
- We only collect personal data that is necessary to provide our services.
- Personal data is only used for the purpose for which it was collected.
- Data is deleted when it is no longer needed.
- We always strive to maintain a high level of data protection and security.
What is personal data?
Personal data is information that can be linked to you as an individual, either directly or indirectly. This may include your name, address, email address, IP address and other information.
What does processing personal data mean?
Processing means anything we do with your data, such as collecting, storing, using, transferring or deleting it.
Data controller
Starkholm International AB, company registration number 559542-6916, Ruddammsbacken 28, 114 21 Stockholm, Sweden, is the data controller responsible for the processing of your personal data.
What personal data do we collect and why?
1. Processing your order
- Name
- Personal identity number (only when necessary)
- Contact details (address, email address and telephone number)
- Payment information
- Information about your order, such as the products you have purchased and your delivery address.
The purpose is to process and deliver your order, handle payments and manage any complaints or claims.
Legal basis: Performance of a contract.
2. Customer service
- Name
- Personal identity number (when necessary)
- Contact details; correspondence with you
- Payment and purchase information.
The purpose is to assist you with questions and issues relating to your order or our services.
Legal basis: Legitimate interest.
3. Improving our services and systems
- Correspondence and feedback
- Technical data relating to how you use our website, such as IP address, browser settings and technical device information
- Data relating to your interactions with our services, such as clicks and browsing history.
The purpose is to analyse and improve our services and systems.
Legal basis: Legitimate interest.
4. Targeted marketing
- Contact details
- Purchase and usage data.
The purpose is to send you offers and relevant information via email, SMS and other communication channels.
Legal basis: Legitimate interest.
5. Access to My Orders
- Name
- Contact details
- Purchase history
- Payment history.
The purpose is to allow you to track and manage your orders.
Legal basis: Legitimate interest.
6. Personalised shopping experience
- Purchase and usage data
- Customer preferences.
The purpose is to provide personalised recommendations and tailor content and offers to you.
Legal basis: Legitimate interest.
Who do we share your personal data with?
We work with various companies that help us operate our business, including delivery and shipping companies, payment providers such as Stripe, marketing agencies, and IT providers responsible for hosting, operation and support.
All of these data processors process personal data in accordance with our instructions and are bound by agreements designed to ensure that your information is handled securely.
We may also share your information with public authorities where we are legally required to do so.
Where is your personal data processed?
We aim to ensure that all processing takes place within the EU/EEA. Where processing outside the EU/EEA is necessary, we ensure that it is carried out in accordance with applicable laws and with appropriate safeguards in place.
How long do we keep your personal data?
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected or for as long as we are legally required to retain it.
For accounting purposes, information is retained for seven (7) years in accordance with Swedish accounting legislation. For purposes related to legislation on measures against money laundering and terrorist financing, certain information may be retained for up to five (5) years.
In all other cases, personal data is deleted or anonymised no later than 48 months after the purpose for processing has ended.
Your rights
You have the right to request access to your personal data; request correction of inaccurate information; request deletion of your personal data in certain circumstances; request restriction of processing; and request that your personal data be transferred to another provider (data portability).
Where our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. When consent is withdrawn, we will stop processing your data for the purpose for which the consent was given.
Please contact us at hello@yumeki.se to exercise your rights. To protect your privacy, we may ask you to verify your identity before providing information or making changes in response to your request.
How do we handle personal identity numbers?
We only use personal identity numbers when absolutely necessary for secure identification or other valid purposes, and we minimise their use as much as possible.
Cookies and similar technologies
We use cookies to improve your experience on our website. For more information about cookies and how you can manage them, please see our Cookies page.
How do we protect your personal data?
We use appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss or damage.
Supervisory authority
The Swedish Authority for Privacy Protection (IMY) supervises compliance with data protection legislation in Sweden. You can contact IMY if you have a complaint regarding how we handle your personal data.
For more information, please visit the Swedish Authority for Privacy Protection.
Changes to our Privacy Policy
We may update how we process personal data from time to time. Significant changes will be communicated on our website and, where appropriate, by email in advance.