Privacy policy (GDPR)
Last updated 2026-08-24
Polar Vintage AB, registration number 559598-2058, is the data controller for the personal data processed at polarvintage.com. We only collect the data we need to sell, ship and account for your order.
What data we process
Order data: name, email address, delivery and billing address, phone number, order contents and order history.
Payment data: transaction identifiers and payment status. Card numbers are handled by our payment provider — we never see or store them.
Technical data: IP address, browser type and basic usage data needed to operate and secure the site.
Correspondence: messages you send us by email.
Why we process it, and the legal basis
To fulfil your order and provide support — performance of a contract (Art. 6.1 b GDPR).
To keep accounting records — legal obligation under the Swedish Accounting Act (Art. 6.1 c GDPR), retained for seven years.
To handle complaints and legal claims — legitimate interest (Art. 6.1 f GDPR).
To send marketing emails — only with your consent (Art. 6.1 a GDPR), which you can withdraw at any time.
Who we share data with (data processors)
We use the following data processors, each under a data processing agreement:
Shopify Inc. — e-commerce platform, orders and payments
Lovable Cloud (Supabase) — hosting, database and accounts
Etsy Inc. — marketplace listings and orders
PostNord — shipping and tracking
DHL — shipping and tracking
UPS — shipping and tracking
Microsoft — email and office software
In addition, data is shared with payment providers and with authorities where required by law.
Where a processor is located outside the EU/EEA, transfers are protected by the EU Standard Contractual Clauses. We never sell your personal data.
Retention
Order and accounting data is kept for seven years as required by law. Marketing consent data is kept until you withdraw your consent. Support correspondence is kept for up to 24 months.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. You may withdraw consent at any time.
Contact us at info@polarvintage.com to exercise your rights. If you believe we process your data unlawfully, you may complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Security
The site uses encrypted connections (HTTPS). Access to personal data is restricted to those who need it to perform their work.
This document is available in English and Swedish. In case of any discrepancy, the Swedish version prevails.