Soulspin – Privacy Policy
Last updated: [2026-06-26]
Soulspin AB (“we”, “us”) processes personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy explains what information we collect, why we collect it, who we share it with, and how you can exercise your rights.
1. Personal Data We Collect
We collect personal information that you provide when placing an order, creating an account, signing up for our newsletter, or contacting us. This includes your name, delivery address, email address, and phone number, as well as your order history and payment information. We also collect technical data such as your IP address, device type, browser, and browsing behavior on our site — used for security, analytics, and improving the store experience.
2. Why We Process Your Data
We use your personal data to process and deliver your orders, manage your customer account, handle payments and refunds, and provide customer support. If you have given consent, we also use your email address to send newsletters and marketing updates. Technical and behavioral data is used to improve our website, protect it from fraud and spam, and understand how visitors interact with the store.
3. Legal Basis
We process your data on the following legal bases. Order fulfillment and account management are processed under contract, as they are necessary to complete your purchase. Newsletter and marketing communications are processed under consent, which you can withdraw at any time. Security, analytics, and website functionality are processed under legitimate interest. Accounting and tax records are processed under legal obligation in compliance with Swedish law.
4. Third Parties
We share personal data with trusted partners only when necessary to operate the store. This includes our payment providers WooPayments and PayPal, who handle payment processing and fraud detection. Our shipping carriers PostNord and DHL receive your name and delivery address to fulfill shipments. Google receives data through Google Analytics for WooCommerce, which tracks visitor behavior and purchases on our site, and through Google for WooCommerce, which connects our product catalog to Google Merchant Center. MailPoet and AutomateWoo process customer email addresses and order data to send newsletters, order follow-ups, and automated marketing communications. Jetpack, developed by Automattic, provides site security and visitor statistics. Akismet processes contact form submissions and IP addresses to filter spam.
We never sell your personal data.
5. International Data Transfers
Several of our service providers are based outside the EU and process data on servers located in the United States. This applies to Google (Analytics and Merchant Center), Automattic (Jetpack, WooPayments, and AutomateWoo), PayPal, Akismet, and MailPoet. These transfers are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide an equivalent level of data protection to that required within the EU.
6. Data Retention
Order-related information is stored for 7 years in compliance with Swedish accounting law (Bokföringslagen). Newsletter subscriber data is stored until you unsubscribe. You may request deletion of your customer account at any time, subject to any legal retention obligations that apply.
7. Cookies
Soulspin uses cookies to operate the store and understand how it is used. Essential cookies are required for core functionality such as your shopping cart, checkout, and login session — these are set automatically and cannot be disabled without affecting the store. Payment cookies are set by WooPayments/Stripe and PayPal during checkout for fraud detection and payment processing. Analytics cookies are set by Google Analytics and Jetpack to collect anonymised data about how visitors interact with the site, such as which pages are visited and how long visitors stay. Analytics cookies require your consent before being set.
You can manage or withdraw your cookie consent at any time through the cookie banner on our website. You can also manage cookies through your browser settings, though disabling essential cookies may affect your ability to use the store.
8. Your Rights
Under GDPR, you have the right to access your personal data, request correction or deletion, restrict or object to processing, withdraw consent at any time, and request a copy of your data (data portability). To exercise any of these rights, contact us at info.soulspin@gmail.com.
If you believe we are processing your data in violation of GDPR, you have the right to lodge a complaint with the Swedish supervisory authority, IMY (Integritetsskyddsmyndigheten), at http://www.imy.se.
9. Contact
For questions about this Privacy Policy, contact us at info.soulspin@gmail.com.
10. Changes to This Policy
We may update this policy when necessary. Any changes will be published on this page and take effect upon publication.
11. reCaptcha
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.