Privacy policy

Last updated: January 12, 2026

This privacy policy describes how I, Jonas Lindholm, collect and handle your personal data when you shop from jonaslindholm.se or otherwise contact me.

Data Controller

JONAS LINDHOLM
Åhusvägen 21, 1302
121 51 Johanneshov
Sweden
Email: contact@jonaslindholm.se

I am the data controller for the information you provide to me. I have not appointed a data protection officer as my business does not require one under the GDPR.

What data do I collect?

When you shop from me, I collect:

Name, email address, phone number
Delivery and billing address
Payment information (handled by my payment providers)
Order history and purchase information

When you visit my website, I collect:

Information about how you use the website (via cookies)
IP address, browser type and device information

Why do I collect your information?

I use your personal data to:

Process and deliver your order (legal basis: performance of contract, Article 6(1)(b) GDPR)
Process payments (legal basis: performance of contract, Article 6(1)(b) GDPR)
Send order confirmations and delivery information (legal basis: performance of contract, Article 6(1)(b) GDPR)
Accounting and invoicing (legal basis: legal obligation, Article 6(1)(c) GDPR)
Customer support (legal basis: legitimate interest, Article 6(1)(f) GDPR)
Marketing to existing customers (legal basis: legitimate interest, Article 6(1)(f) GDPR)
Marketing to new customers via newsletter (legal basis: consent, Article 6(1)(a) GDPR)
Prevent fraud and keep the website secure (legal basis: legitimate interest, Article 6(1)(f) GDPR)
Improve the website and customer experience (legal basis: legitimate interest, Article 6(1)(f) GDPR)

Who do I share your information with?

I share your information with the following third-party vendors who help me run my business:

Shopify - e-commerce platform that powers my website
Shopify Payments - card payments (Visa, Mastercard, Maestro), Apple Pay and Google Pay
Klarna - installment payments and invoice
Mondido - Swish payments
DHL - shipping, delivery and tracking of packages

These providers process your information in accordance with their own privacy policies and only for the purposes for which I have hired them. I never sell your personal information to third parties.

How long do I save your data?

Order data and invoices: 7 years (according to the Swedish Accounting Act)
Marketing data (newsletter): Until you unsubscribe
Account details: Until you request that your account be deleted
Cookies and web analytics: Up to 24 months

Cookies

I use cookies to make the website work and to improve your experience. Cookies also help me understand how visitors use the website.

You can change your cookie settings in your browser at any time, but some features of the website may then stop working.

Read more about Shopify's use of cookies here: https://www.shopify.com/legal/cookies

Your rights under GDPR

You have the following rights regarding your personal data:

Right of access - You can request a copy of the information I hold about you
Right to rectification - You can request that I correct incorrect information
Right to erasure - You can request that I delete your data (with certain exceptions, such as accounting requirements)
Right to data portability - You can request to receive your data in a machine-readable format
Right to withdraw consent - You can unsubscribe from newsletters at any time
Right to object - You can object to processing based on legitimate interest
Right to restrict processing - You can request that I restrict how I use your data

Contact me at contact@jonaslindholm.se and I will help you. I normally respond within 30 days.

International data transfers

Some of my suppliers (e.g. Shopify) may process your data outside the EU/EEA. When this happens, I use the EU Commission's Standard Contractual Clauses to ensure your data is protected under the GDPR.

Security

I take technical and organizational measures to protect your personal data against unauthorized access, loss or misuse. However, no security measure is 100% secure, and I cannot guarantee absolute security.

Children

To shop from my website, you must be at least 18 years old. I do not collect information from persons under the age of 18. If you are a guardian and discover that your child has provided me with information, please contact me and I will delete it.

Complaint

If you have any complaints about how I handle your personal data, please contact me first at contact@jonaslindholm.se.

If you are not satisfied with my response, you have the right to file a complaint to:

Swedish Authority for Privacy Protection (IMY)
Website: www.imy.se

Changes to this policy

I may update this privacy policy as needed. The latest version is always available at jonaslindholm.se. Major changes will be notified via email to registered customers.

Contact

Do you have questions about how I handle your personal data?
Contact me at: contact@jonaslindholm.se