Privacy Policy
Legal Review Required
This page contains placeholder information — marked in [brackets] — that must be confirmed by SITJAO PRO's business owner and reviewed by qualified legal counsel before this store operates in production.
This Privacy Policy explains what personal data SITJAO PRO ([Legal company name — pending confirmation], registered at [Registered business address — pending confirmation]) collects when you use this website, why we collect it, and what rights you have over it.
What data we collect
Account data: name, email address, phone number, and — if provided — company name and VAT number. Order data: shipping and billing address, order contents, and order history. Technical data: IP address, browser type, and cookie data (see our Cookie Policy for details). We never collect or store your full payment card details — payments are processed directly by Stripe, our payment provider.
How we use your data
To process and fulfil your orders, manage your account, respond to support requests, send transactional emails (order confirmations, shipping updates, and similar), comply with legal and accounting obligations, and — only where you've given consent via our cookie banner — to understand site usage.
Legal basis for processing
We process order and account data because it is necessary to perform our contract with you (fulfilling your order) or to comply with a legal obligation (such as accounting and tax record-keeping). Where we ask for your consent — for example, non-essential cookies — we only process that data if you've said yes, and you can withdraw consent at any time.
Who we share your data with
We share the minimum data necessary with: Stripe (payment processing, including Klarna and Swish payments routed through Stripe), Resend (transactional email delivery), and our hosting infrastructure providers. These providers only receive what they need to perform their specific service and are not permitted to use your data for their own purposes. We do not sell your personal data to anyone.
How long we keep your data
Order and payment records are kept for as long as required by applicable accounting and tax law [retention period — pending confirmation, typically 7 years in Sweden]. Account data is kept for as long as your account is active, or until you request deletion (see our GDPR account controls in My Account → Settings).
Your rights
Under GDPR, you have the right to access the personal data we hold about you, request correction of inaccurate data, request erasure of your data, restrict or object to certain processing, and receive your data in a portable format. You can access and export your own data, or request account deletion, from My Account → Settings. You also have the right to lodge a complaint with your local data protection supervisory authority [Integritetsskyddsmyndigheten (IMY) in Sweden — pending confirmation of applicable authority].
Cookies
We use cookies and similar technologies as described in our Cookie Policy, including a consent mechanism that lets you choose which non-essential categories to allow.
Children's privacy
This website is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.
Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at [support email — pending confirmation].