Last updated: November 2, 2026
This Privacy Policy explains how Winterglow collects, uses and protects your personal data when you visit our store or buy from us.
1. Who we are
The data controller is Eddie Korial (sole proprietorship), Opphemsgatan 4, 582 24 Linköping, Sweden. Contact: eddie.inatem@outlook.com.
2. What we collect
- Contact and delivery details: name, address, email and phone number.
- Order details: what you bought, price, payment method and order history. Card details are handled by the payment provider – we never see them in full.
- Communication: what you write to us, for example in a support request.
- Technical information: IP address, device, browser and how you use the site, including via cookies.
3. Why we use it
- To fulfil your order – take payment, ship the item and handle returns.
- To comply with the law, such as accounting rules.
- For customer service, security and fraud prevention.
- For newsletters and targeted marketing – only with your consent. You can unsubscribe at any time via the link in every email or change your cookie choices.
4. Who we share it with
We never sell your personal data. We share it only with the service providers we need to run the store:
- Shopify – the platform the store runs on.
- Payment providers, such as Shopify Payments – to process your payment.
- Our supplier and fulfilment service ScaleOrder and their logistics partners – who pack and ship your order and therefore receive your name, address and phone number.
- Advertising and analytics services (such as Meta and Google) – only if you have accepted marketing cookies.
- Authorities – where required by law.
5. International transfers
We are based in Sweden and some of our providers process data in other countries. We ensure such transfers have a lawful basis.
6. How long we keep it
- Order and payment records are kept for seven years, as required by Swedish accounting law.
- Support requests are kept as long as needed to handle the request and any claims.
- Newsletter data is kept until you unsubscribe.
7. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to processing, to receive your data in a portable format and to withdraw consent at any time. Email us at eddie.inatem@outlook.com and we'll help. We may need to verify your identity first. We do not discriminate against you for exercising your rights.
8. Cookies
We use necessary cookies so the cart and checkout work. Analytics and marketing cookies are used only if you accept them in the cookie banner, and you can change your choice at any time.
9. Changes
We may update this policy. The latest version is always available here, with the date of the last change.