Privacy Policy
Privacy Policy for saligstudio.com
Last updated: [2026-08-07]
Salig AB (“we”, “us”) cares about your privacy. This policy describes what personal data we collect when you visit or shop at saligstudio.com, or place an order via Instagram/email, why we collect it, how long it is kept, and what rights you have.
1. Data Controller
Salig AB
Registration number: 559303-9034
Address: Junohällsvägen 11, 112 64 Stockholm, Sweden
Website: https://saligstudio.com
Email: info@saligstudio.com
Salig AB is the data controller for the processing of personal data described in this policy.
2. What data we collect
2.1 When you shop in our webshop
When you make a purchase, we collect:
- Name
- Shipping address and, if applicable, billing address
- Email address
- Phone number (if provided)
- Order history (products, amounts, dates)
Card payment details are handled directly by our payment provider, Stripe (see section 4) — we never store full card details ourselves. On the website, card payment via Stripe is the only payment method available.
We do not offer customer accounts. All purchases are made as a guest, and order data is stored in our WooCommerce database (on our own server, see section 3).
2.2 When you order via Instagram or email
We also accept orders via direct message on Instagram or by email. In connection with this, we collect:
- Name
- Shipping address
- Email address and/or Instagram username
- Order details (products, amounts)
Payment for these orders is made by invoice/bank transfer, not through the website. The data is handled manually by us and stored in our email and Instagram correspondence, as well as in our order management.
2.3 When you use the contact form
If you contact us via the contact form on the website (built with the Contact Form 7 plugin), we collect the information you enter yourself, such as name, email address, and message. The message is forwarded directly to us by email and is not stored in any database on the website.
2.4 If you are under 18
Under Swedish law, a parent’s or guardian’s signature is required for orders where the customer is under 18 years of age. In these cases, we also collect the guardian’s name and signature/approval in connection with the order.
2.5 Newsletter
We do not currently send newsletters through any automated tool. In individual cases, newsletters or offers may be sent out manually by email by the person running the shop. This is only sent to customers who have given their consent, and you can unsubscribe at any time by contacting us.
2.6 Cookies
See section 5 for a full list of the cookies we use.
3. Where your data is stored
The website and its database are hosted on our own server, located within the EU/EEA. No data is transferred outside the EU/EEA in connection with running the website itself.
An exception is our payment provider, Stripe — see section 4.
4. Payments
Website: We use Stripe to handle card payments. When you complete a purchase on the website, your payment details are sent directly to Stripe, which processes them in accordance with its own privacy policy. Stripe acts as an independent data controller for payment data and may in some cases transfer data outside the EU/EEA, which is done under approved safeguards (e.g. the EU’s Standard Contractual Clauses).
Read more in Stripe’s Privacy Policy.
Instagram/email: Orders placed via Instagram or email are paid by invoice/bank transfer directly to our bank account, without Stripe’s involvement.
5. Cookies
We use a cookie banner (built into our theme, WoodMart) where you can manage your cookie preferences on your first visit.
The cookies used on the website are listed below:
| Cookie | Purpose | Lifetime | Category |
|---|---|---|---|
woocommerce_geo_hash | Set by WooCommerce to show the correct pricing and content based on your country | 1 hour | Necessary |
wc_cart_hash_[hash] | Keeps track of the contents of your shopping cart | Session/persistent | Functional |
wc_fragments_[hash] | Ensures your cart contents display correctly without reloading the page | Session | Functional |
wcml_client_currency | Set by the WPML Multilingual & Multicurrency plugin to show prices in the correct currency | 2 days | Functional |
wcml_client_currency_language | Set by the same plugin to link the currency to the correct language version | 2 days | Functional |
wcml_client_country | Set by the same plugin to determine which country you’re visiting from and show the correct price | 2 days | Functional |
The website does not load any third-party services (such as analytics or marketing tools) when visited. The cookies present are set exclusively by WordPress/WooCommerce and our own plugins, primarily to make the webshop function correctly.
6. Why we process your data (legal basis)
| Purpose | Legal basis |
|---|---|
| Manage and deliver your order (website, Instagram, or email) | Performance of a contract |
| Handle payment via Stripe or bank transfer | Performance of a contract |
| Show correct pricing/currency based on your country | Legitimate interest |
| Respond to inquiries via the contact form | Legitimate interest / consent |
| Obtain guardian approval for purchases by minors | Legal obligation |
| Send newsletters/offers | Consent |
| Bookkeeping | Legal obligation (Swedish Bookkeeping Act) |
7. How long we keep your data
- Order data (website, Instagram, email): Kept for as long as needed to fulfil the purchase, and in accordance with the Swedish Bookkeeping Act’s requirement that accounting records be kept for at least 7 years.
- Contact form: Messages are not stored on the website, but may remain in our email correspondence for as long as relevant to the inquiry.
- Newsletter: Your email address is kept until you unsubscribe.
- Cookies: See the lifetimes listed in the table in section 5.
8. Who we share your data with
- Stripe – to process payment for purchases made on the website.
- Shipping carriers – whichever carrier best suits your order (e.g. depending on weight, destination, and delivery method) receives your name and shipping address in order to deliver your order.
We never sell your personal data to third parties.
9. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Request a copy of your data (access)
- Request correction of inaccurate data
- Request deletion of your data (“the right to be forgotten”)
- Request restriction of processing
- Object to processing based on legitimate interest
- Request data portability
Contact us at info@saligstudio.com to exercise any of these rights. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.
10. Changes to this policy
We may update this privacy policy, for example due to changes in legal requirements or if we start using new services/plugins. The date of the most recent update is shown at the top of the document.
11. Contact
If you have questions about how we process your personal data, contact us at info@saligstudio.com.