Privacy Policy

Last updated: July 2, 2026

This Privacy Policy describes how we collect, use, store, and share personal data when you visit or make a purchase through our website.

We always process your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

We are the data controller responsible for the processing of your personal data.

support@shopartive.com

Personal Data We Collect

We may collect the following types of personal data:

Name
Address
Email address
Telephone number (if provided)
Payment information (processed by payment service providers)
IP address and device information
Purchase history
Website usage and browsing behaviour (through cookies)

How We Collect Personal Data

We collect personal data when you:

Make a purchase through our online store
Contact customer service
Subscribe to our newsletter
Use our website (through cookies and similar technologies)

Purposes of Processing

We process your personal data for the following purposes:

To process and deliver your order
To process payments and returns
To provide customer service
To send order and delivery information
To improve our website and user experience
To carry out marketing activities (only with your consent where required)
To prevent fraud and maintain security

Legal Basis

We process your personal data on the following legal bases:

Performance of a contract (purchases and deliveries)
Compliance with legal obligations (accounting and tax legislation)
Legitimate interests (e.g. improving our services and carrying out basic marketing activities)
Consent (e.g. cookies and targeted advertising)

How We Share Personal Data

We only share personal data where necessary to operate our business, for example with:

Shopify (e-commerce platform)
Payment service providers (e.g. Klarna, Stripe, Visa, Mastercard, Apple Pay, Google Pay, Swish)
Shipping and logistics partners
Marketing platforms (e.g. Google, Meta, TikTok – where enabled)
IT and analytics providers (e.g. Google Analytics)

Depending on the service provided, these parties may process personal data as data processors or as independent data controllers.

Transfers Outside the EU/EEA

Some of our service providers may process personal data outside the EU/EEA, for example in the United States.

Where such transfers take place, we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs).

Depending on the service provided, these parties may process personal data as data processors or as independent data controllers.

Data Retention

We retain personal data only for as long as necessary for the relevant purpose:

Order and accounting data: up to 7 years (in accordance with applicable accounting legislation)
Customer service enquiries: up to 12–24 months
Marketing data: until consent is withdrawn
Analytics data: generally 14–26 months (depending on settings)