Privacy policy

1. The short version

This storefront keeps your basket, your saved items and any discount code in your own browser's local storage. None of that is sent to us; we cannot see it. The only personal data we receive is what you type into an order or send us by email, and the only optional thing is an aggregate page-view count that you can switch off on the cookie bar.

2. Controller

Duvet & Shades AB, Stockholm, trading as Duvet & Shades, runs this storefront and decides what happens to the data below. Questions and requests go to hello@duvetandshades.com.

3. What is stored on your device

Your browser's local storage holds, under keys beginning dvs_:

• the basket — product, size, colour, quantity;
• the saved list — product references only;
• a discount code you have entered;
• the last order reference shown to you on the confirmation page;
• the products you have viewed most recently, so we can show them again;
• whether you have answered the cookie bar.

This information never leaves your browser. It is not transmitted to us or to anyone else, and it disappears when you clear your site data. If you use another browser or device, it will not be there.

4. What we receive, why, on what basis, for how long

Data	Purpose	Legal basis	Retention
Name, delivery address, email, phone	Fulfilling and delivering an order; the trial, returns and guarantee	Contract	7 years (Swedish Accounting Act)
What you ordered and paid	Order handling, the 5-year guarantee	Contract	7 years, then anonymised
Payment confirmation (never card numbers)	Knowing the order is paid	Contract	7 years
Email address on its own	The newsletter, if you asked for it	Consent	Until you unsubscribe
Emails you send us	Answering them; trial and guarantee records	Legitimate interest	3 years after the last message
Aggregate page views	Seeing which pages are read	Consent	13 months, aggregated, no profile

Card details are entered directly with the payment provider and never reach us. This demonstration storefront takes no payment and sends no order data anywhere.

5. Cookies and the cookie bar

• Strictly necessary. The local storage items above and your cookie choice. Always set, because the basket does not work without them.
• Measurement. An aggregate count of pages and products viewed, with no identifier that follows you between visits. Set only if you choose “Allow both” on the cookie bar; not set if you choose “Basket only”.

No advertising cookies, no social-media pixels, no fingerprinting, no sale or sharing of data for marketing.

6. Who else sees it

Only the processors needed to run the shop, each bound by a data processing agreement and each receiving only what its task needs:

• the payment provider — name, email, amount;
• the carrier — name, delivery address, phone number for delivery notices;
• the email service — email address, for order mail and the newsletter;
• the hosting provider — server logs including IP addresses, kept 30 days;
• the laundry that processes trial returns receives no personal data at all.

7. Transfers outside the EEA

Our processors are within the EEA wherever we have a choice. Where one is not, the transfer is made under the European Commission's Standard Contractual Clauses, and we will tell you which processor on request.

8. Your rights

Under the GDPR you may ask for a copy of the data we hold about you, have it corrected or erased, restrict its processing, receive it in a portable format, object to processing based on legitimate interest, and withdraw consent at any time without affecting what was done before. Write to hello@duvetandshades.com; we reply within 30 days and usually within a few. Where accounting law obliges us to keep something, we will say so and delete it when the period ends.

9. Complaints

You may complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or to the supervisory authority in your own country. We would be grateful for the chance to put it right first.

10. Changes

If this policy changes in a way that matters to you, the date at the top changes and a note here says what moved. Earlier versions are available on request.

Terms & conditions