Privacy policy
This policy explains how Pawsome Nordic (org. no. 11, Sweden) – “we” – handles your personal data when you use this website. We are the data controller. Contact: [email protected].
What we collect and why
- Order data – email address, the products you bought, amount, order number, time of purchase and your consent to immediate delivery. Purpose: to deliver your downloads, answer questions and handle complaints. Legal basis: performance of a contract (GDPR art. 6.1 b).
- Bookkeeping – order and payment records. Purpose: Swedish bookkeeping law (bokföringslagen). Legal basis: legal obligation (art. 6.1 c). Kept for 7 years.
- Download log – how many times each link has been used and when. Purpose: to limit sharing of files and to help you if a download fails. Legal basis: legitimate interest (art. 6.1 f).
- Technical data – IP address, held briefly in server memory to stop abuse (rate limiting). Not stored in our database.
Payments
Payments are handled by Stripe Payments Europe Ltd. We never see or store your card details. For Swish payments Stripe acts as the payment recipient. Stripe processes your payment data under its own privacy policy: stripe.com/privacy.
Who else processes your data
- Stripe – payments (see above).
- Our email delivery provider – to send your order email.
- Cloudflare – network security and delivery of this website.
These providers act on our behalf or as independent controllers for payments. Some may transfer data outside the EU/EEA using the EU standard contractual clauses or the EU–US Data Privacy Framework.
Cookies and local storage
We do not use tracking or advertising cookies. Your cart is saved in your own browser (local storage) so it is still there when you come back. It never leaves your device until you check out.
How long we keep data
Order data: up to 7 years (bookkeeping). Download links stop working after 10 days.
Your rights
You have the right to access, correct or delete your data, to restrict or object to processing, and to data portability, within the limits of the law (for example, we must keep bookkeeping records). Contact us at the address above. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.