Leo Smidhammar

Privacy Policy

Last updated: 31 August 2026

1. Who we are

This Privacy Policy explains how Leo Smidhammar, Djursholm, Sweden ("we", "us"), operating leosmidhammar.se (the "Site"), collects and uses personal data. We are the data controller for the personal data described below. You can reach us at contact@leosmidhammar.se.

2. What we collect

  • Contact form: when you send us a message, we collect your name, email address, and message content. This is sent directly to our inbox by email and is not stored in a database on the Site.
  • Orders: when you buy a print, checkout and payment are handled entirely by Shopify. Shopify collects and processes your name, address, and payment details as an independent data controller under its own privacy policy — we only receive order confirmations needed to fulfill your purchase.
  • Cookies: the Site uses a small number of strictly necessary cookies — one to remember your language preference, and one (set only if you add an item to your cart) to keep track of your Shopify cart. Neither is used for advertising or tracking, and no analytics or marketing cookies are set by the Site itself.

3. Why we use it and our legal basis

We use contact-form data to respond to your enquiry (legitimate interest). Order-related data is processed by Shopify to perform the sales contract with you. Cookies described above are strictly necessary for the Site to function and do not require consent under applicable law.

4. Who we share data with

We use the following third-party service providers, each acting as an independent controller or processor for the data they handle:

  • Shopify — checkout, payments, and order fulfillment
  • Supabase — hosting of Site content and the admin login
  • Our email provider (one.com) — delivery of contact-form messages to our inbox

We do not sell your personal data to anyone.

5. International transfers

Some of our service providers may process data outside the EU/EEA. Where this happens, they are required to provide appropriate safeguards, such as the EU Standard Contractual Clauses, as required under GDPR.

6. How long we keep it

Contact-form messages exist only as an email in our inbox and are kept only as long as needed to handle your enquiry. Order data is retained by Shopify per its own policy and applicable accounting law.

7. Your rights

Under the GDPR, you have the right to access, correct, or request deletion of your personal data, to restrict or object to its processing, and to data portability. To exercise any of these rights, contact us at contact@leosmidhammar.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), or the data protection authority in your own EU/EEA country.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision.

9. Contact

Questions about this policy can be sent to contact@leosmidhammar.se.