Privacy Policy

Who handles your data

Controller: [LEGAL SELLER NAME], [BUSINESS ADDRESS], Sweden. Privacy contact: Prodedmond@gmail.com. Effective date: [AFTER APPROVAL].

Orders and contact messages

We keep order references, products, totals, currency, payment status and references, timestamps, the email supplied by Stripe, and delivery-consent wording, version and time. A private access token protects downloads. We use these details to fulfil purchases and demonstrate consent (contract performance and, where applicable, legal obligations).

The contact form stores your name, email and message privately in Lovable Cloud to handle your request. It does not currently send notification emails. Enquiry handling and proportionate security rely on legitimate interests, or pre-contract steps where relevant. Accounting records are kept to meet legal obligations. Retention periods for orders, consent and contact messages: [TO CONFIRM]; no automated deletion schedule is currently configured. Swedish accounting material generally requires retention through the seventh year following the relevant financial year; applicability must be confirmed.

Payment, hosting and other providers

Stripe processes payment, billing, email and technical information under its privacy notice (stripe.com/privacy). We do not store card details. Lovable Cloud hosts private order records, contact messages and ZIP files; paid orders receive one-hour signed links. Provider roles, agreements, subprocessors, locations and international-transfer safeguards: [TO CONFIRM]. Processing is not guaranteed to stay in Sweden or the EU.

The cart stays in session memory. A sessionStorage record limits repeated reloads after loading failures. Google Fonts and hosted image/audio providers receive network requests needed to serve assets. Stripe may use cookies, browser storage and fraud-prevention signals. The installed authentication client may store existing sessions, including preview sessions; there is no storefront login. No advertising pixels or separate marketing analytics are currently installed.

Visitor analytics

Lovable’s visitor analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

On the published site, it records pages visited, referral source, country, browser, operating system, device type, time on page, page-load speed, errors and button/link clicks. Detailed data is kept for 90 days and daily summaries for a year. The editor preview is not counted; no separate custom interaction events are sent.

No banner is currently connected, so clicks are recorded for every visitor under the present configuration. Page visits, time on page, speed and errors are also recorded for every visitor, without cookies or identifying anyone. Analytics legal basis and regional consent requirements: [TO REVIEW BEFORE PUBLICATION].

Your rights and security

Where GDPR applies, you may request access, correction, deletion, restriction or portability and object to legitimate-interest processing. Consent can be withdrawn for the future where used; delivery consent is not blanket privacy consent. Legal retention duties may limit deletion. Contact Prodedmond@gmail.com; we may verify identity proportionately and normally respond within one month, explaining any lawful extension. You may complain to Sweden’s IMY (imy.se) or your competent supervisory authority.

We use private storage, payment verification and temporary download links, but no system is completely secure. Keep your full order link secret. No store-run automated decisions with legal or similarly significant effects are currently implemented; Stripe’s own processing follows its notice.