Privacy Policy
Last updated: January 29, 2025
This Privacy Policy describes how Himalayan Wool Shop (the "Site", "we", "us" or "our") collects, uses and shares your personal information during your visits, when you use our Services or make purchases from himalayanwool.se (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). The use of you/your (etc.) in this Privacy Policy refers to you as a user of the Services, whether you are a customer, website visitor or other person about whom we have collected information under this Privacy Policy.
We recommend that you read this privacy policy carefully.
Changes to this privacy policy
We may update this Privacy Policy from time to time, for example to comply with new practices or for other operational, legal or regulatory reasons. The revised Privacy Policy will be posted on the Website, as indicated by the date indicated under "Last Updated", as well as take any other action required by applicable law.
How we collect and use personal data
In order to provide the Services, we collect, and have collected in the past 12 months, your personal data from a variety of sources as described below. The data we collect and use varies depending on how you interact with us.
In addition to the specific purposes listed below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal requirements, enforce any applicable terms of service, and protect the Services, our rights, and the rights of our users and others.
What personal data we collect
The types of personal data we collect about you depend on how you interact with our website and use our services. When we use the term personal data, we mean information that identifies you, relates to you, describes you or can be linked to you in some way. The sections below describe the categories and specific types of personal data we collect.
Data we collect directly from you
Data that you send to us yourself via our services may include:
- Contact details, such as your name, address, telephone number and email address.
- Order information such as name, billing address, delivery address, payment confirmation, email address and phone number.
- Account information such as usernames, passwords, security questions and other information used to protect your account.
- Customer support information such as information you choose to share when you communicate with us, like when you send a message through the Services.
Some features of the Services may require you to directly provide us with certain information about yourself. You can choose not to share such information, but you may not be able to use or access those features.
Information we collect about your use
We may also automatically collect certain information about your interaction with the Services ("Usage Data"). For this purpose, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our website and your account, including information about your device, browser, network connection, IP address and other information about your interaction with the Services.
Information we receive from third parties
Finally, we may also obtain information about you from third parties, including from suppliers and service providers who may collect information on our behalf, for example:
- Companies that support our website and services, such as Shopify.
- Our payment processors who collect payment information (e.g. bank account details, credit or debit card details, billing address) for the purpose of processing your payment in order to distribute your orders and deliver the products or services you have requested, in order to fulfill our contract with you.
- When you visit our website, open or click on emails we send you, or interact with our services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, SDKs, third-party libraries and cookies.
Any information we receive from third parties will be treated in accordance with this privacy policy. Please also read the section below, Third party websites and links.
How we use your personal data
- Providing products and services. We use your personal information to provide you with the Services in order to fulfill our contract with you, including to process your payments, fulfill your orders, to send you notices related to your account, purchases, returns, exchanges, or other transactions, to create, maintain, and otherwise manage your account, to arrange shipping, to facilitate any returns and exchanges, and other functions and features related to your account. We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services that you may choose to use. In that case, Shopify will process your data according to its Privacy Policy and Consumer Protection Policy.
- Marketing and advertising. We may use your personal data for marketing and advertising purposes, such as to send you marketing, advertising and promotional communications by email, text message or regular mail, and to show you advertisements for products or services. This may include using your personal data to better tailor the services and advertising on our website and other websites. If you are a resident of the EEA, the legal basis for this processing of personal data is our legitimate interest in selling our products, under Article 6(1)(f) GDPR.
- Security and fraud prevention. We use your personal data to identify, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your login details secure. We strongly recommend that you do not share your username, password or other access information with anyone else. If you believe your account has been compromised, please contact us immediately. If you are a resident of the EEA, the legal basis for this processing of personal data is our legitimate interest in keeping our website secure for you as well as other customers, under Article 6(1)(f) GDPR.
- Communicate with you and improve the service. We use your personal data to offer you customer support and improve our services. This is a legitimate interest for us to be responsive to you, to provide you with efficient services and to maintain our business relationship with you under Article 6(1)(f) GDPR.
Cookies
Like many others, we use cookies on our website. For more information about the cookies that we use to operate our store with Shopify, please visit https://www.shopify.com/legal/cookies. We use cookies to operate and improve our website and services (including to store information about your activity and preferences), to conduct analytics, and to better understand how users interact with the services (which relates to our legitimate interest in administering, improving, and optimizing the services). We may also allow third parties and service providers to use cookies on our website to better tailor the services, products and advertising on our website and other websites.
Automatic acceptance of cookies is the default setting in most browsers, but you can change the settings in your browser to delete or reject cookies. Please be aware that deleting or blocking cookies may have a negative impact on your experience, and in addition, some services, such as certain features and general functionality, may cease to function in whole or in part. In addition, blocking cookies may not completely prevent our information sharing with third parties, such as our advertising partners.
Our website also recognizes the Global Privacy Control (GPC) signal. This means that you can choose not to have your data used or shared for certain purposes. If you use the GPC to inform us of your preferences, we will interpret the signal as a valid request that you do not want to share your data or receive targeted advertising in the current browser or on the device used. If we can link the device sending the signal to a Shopify account, then your request will be honored for that account as well. For more information about Global Privacy Control (GPC), see https://globalprivacycontrol.org/. We do not accept any other signals from browsers or devices that request to stop tracking beyond GPC.
How we disclose personal data
In certain circumstances, we may disclose your personal data to third parties for the performance of contracts, for legitimate purposes and other reasons covered by this Privacy Policy. Some examples of such circumstances:
- Data may be shared with suppliers or other third parties who perform services on our behalf (e.g. IT management, payment processing, data analysis, customer support, cloud storage, distribution and delivery).
- Data may be shared with business and marketing partners to deliver services and advertising to you. Our business and marketing partners will use your data in accordance with their privacy notices.
- When you request or otherwise consent to us providing certain information to third parties, for example to deliver products to you or when you use social media widgets or login-based integrations, we may also share your information.
- Data may be shared with our affiliates or within our group as part of our legitimate interests in running a successful business.
- Data may be shared in the context of a business event, such as a merger or bankruptcy, for the purpose of complying with applicable legal obligations (for example, in response to subpoenas, search warrants), enforcing applicable terms of use, and protecting and enforcing the Services, our rights, and the rights of our users and other individuals.
In the last 12 months, we have disclosed We disclose personal information from the following categories and sensitive information about users for the purposes described above in How we collect and use your personal information and How we disclose personal information:
| Category | Beneficiary categories |
|---|---|
|
|
We do not use or disclose sensitive personal data without your consent or to draw conclusions about you.
With your consent, we share personal data for the purpose of carrying out advertising and marketing activities as described below.
We have "sold" and "shared" (as defined by applicable law) personal data in the preceding twelve months for the purpose of carrying out advertising and marketing activities as described below.
| Category of personal data | Beneficiary categories |
|---|---|
| Identifiers such as name, email address and phone number | Business and marketing partners |
| Commercial information, such as records of products or services purchased | Business and marketing partners |
| Usage data | Business and marketing partners |
Third party websites and links
Our website may provide links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should read their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the integrity or security of such websites, including the accuracy, completeness and reliability of the information contained on those websites. Information that you provide yourself on wholly or partially publicly accessible sites, including information that you share on third-party social networking platforms, may also be viewed by others who use the Services and/or those who use those third-party platforms without any limitation on how it may be used by us or third parties. The mere fact that we include links of this kind does not mean that we endorse the content of such platforms, nor their owners or operations, beyond what is expressly made clear in the Services.
Data concerning children
The Services are not intended for use by children and we do not knowingly collect personal data about children. If a child in your care has provided us with their personal data, you can contact us using the contact details below to request its deletion.
Until the effective date of this Privacy Policy, we are not aware that we have "shared" or "sold" (as defined by applicable law) personal data relating to individuals under the age of 16.
Security and storage of your data
Please note that no security measures are perfect or impossible to circumvent, and we cannot guarantee that security is perfect. In addition, any information you send to us may lack protection during transmission. We recommend that you do not use insecure methods to send sensitive or confidential information to us.
How long we keep your personal data depends on various factors, such as whether we need it to manage your account, provide the Services, fulfill legal obligations, resolve disputes, or enforce other applicable contracts and policies.
Your rights
Depending on where you live, you may have some or all of the rights below regarding your personal data. However, these rights are not absolute and may only apply in certain circumstances, in which case the law allows us to refuse your request.
- Right of access/knowledge: You may have the right to request access to the personal data we hold about you, including information about how we use and share your information.
- Right to erasure: You may have the right to request that we erase the personal data we hold.
- Right to rectification: You may have the right to request that we rectify the personal data we hold if it is inaccurate.
- Right to portability: You may, in certain circumstances and subject to certain exceptions, have the right to obtain a copy of the personal data we hold about you and to request that we transfer it to a third party.
- Right to opt-out of sales, sharing or targeted advertising: You may have the right to instruct us not to "sell" or "share" your personal data or to indicate that your personal data may not be used for purposes that are considered "targeted advertising", as defined by applicable privacy laws. If you visit our website with the GPC signal enabled (depending on your location), we will automatically interpret this as a request to deny the "sale" or "sharing" of data for the device and browser you use to visit the website.
- Restrict processing: You may have the right to request that we no longer process your personal data or restrict our processing of it.
- Withdrawing consent: Where we rely on consent to process your personal data, you may have the right to withdraw your consent.
- Appeal: If we refuse your request, you may have the right to appeal our decision. You can do so by replying to our rejection notice.
- Managing communication preferences: We may send you promotional emails, and you can opt out of receiving such emails by using the unsubscribe feature found in all of our communications to you. If you opt out of receiving such emails, we may still send you non-promotional messages, such as information about your account or orders.
You can exercise these rights where indicated on our website or by contacting us using the contact details below.
Exercising your rights will not affect your status with us. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a reasoned response to your request. Under applicable law, you may appoint a representative to make requests on your behalf to exercise your rights. Before we accept such a request from a representative, that representative must provide evidence that you have authorized them to act on your behalf, and you may also need to personally verify your identity to us. We will respond to your request within the time specified by applicable law.
Complaints
If you have a complaint about how we process your personal data, please contact us using the contact details below. Depending on where you live, if you are not satisfied with the way we have handled your complaint, you may have the right to appeal our decision by contacting us using the contact details below. You can also choose to send your complaint to the European Data Protection Authority (EDPA). In the EEA, you can find a list of responsible data protection supervisory authorities here.
International users
Please note that we may transfer, store and process your personal data outside your country of residence. Your personal data will also be processed by staff and external service providers (third parties) and partners in these countries.
If we transfer your personal data out of Europe, we will rely on recognized transfer mechanisms, such as the European Commission's standard contractual clauses, or equivalent agreements from the relevant competent authority in the United Kingdom (as applicable) unless the data transfer is to a country deemed to ensure an adequate level of protection.
Contact us
If you have any questions about our privacy practices or this privacy policy, or if you wish to exercise any of your rights, please call or email us at himalayanwoolshopsweden@gmail.com, or alternatively you can contact us at Filipstadsbacken 16, Farsta, 123 43, SE.
For the purposes of applicable data protection law, and unless explicitly stated otherwise, we are the controller of your personal data.