D'AVENIR

Privacy Policy

At D'AVENIR, protecting your privacy is part of creating a thoughtful and personal experience. This policy explains what personal data we collect, why we process it, how long we keep it and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish legislation.

Who is responsible for your data

D'AVENIR AB, organisation number 559581-4731, is the controller for the personal data described in this policy. You can reach us about anything on this page at contact@daveniratelier.com.

What we collect

Depending on how you interact with us, we may collect:

  • Order details: your name, email address, postal address, telephone number, the configuration of the piece you ordered, and your order history.
  • Payment information: handled by our payment providers. We receive confirmation that a payment succeeded, and never see or store your full card details.
  • Consultation enquiries: your name, email address, and whatever you choose to tell us about the piece, the occasion or your budget.
  • Correspondence: emails and messages you send us, and our replies.
  • Website data: information collected through cookies and similar technology, described below.

Why we process it, and on what legal basis

We only process personal data where we have a legal basis to do so:

  • To take, produce and deliver your order, and to communicate with you about it. Legal basis: performance of our contract with you.
  • To respond to a consultation enquiry or a question you send us. Legal basis: steps taken at your request before entering into a contract, or our legitimate interest in answering the people who contact us.
  • To handle complaints, returns and servicing. Legal basis: performance of our contract with you, and our legal obligations under consumer law.
  • To keep accounting records. Legal basis: our legal obligation under the Swedish Bookkeeping Act (bokföringslagen).
  • To keep the website secure and working, and to prevent fraud. Legal basis: our legitimate interest in operating a functioning, secure service.
  • To measure how the site is used and, where relevant, to show you our advertising. Legal basis: your consent, which you can withdraw at any time.

How long we keep it

  • Order and transaction records: seven years after the end of the financial year in which the order was placed, as required by the Swedish Bookkeeping Act.
  • Correspondence about a piece we have made: three years from delivery, matching the statutory complaints period.
  • Consultation enquiries that do not lead to an order: 24 months, after which they are deleted.
  • Your cookie choices: 12 months, after which we ask again.
  • Consent to marketing: until you withdraw it.

Who we share it with

We share personal data only where it is necessary to run our business, and only with providers bound by a data processing agreement. We never sell personal data. The providers we rely on are:

  • Shopify, for our commerce platform and hosted checkout.
  • Vercel, for website hosting.
  • Web3Forms, which delivers consultation enquiries submitted through our website to our inbox.
  • Our payment providers, for processing payments.
  • Our shipping partners, for delivering your order.
  • Google and Meta, for website analytics and advertising, and only where you have consented.

Transfers outside the EU/EEA

Some of these providers are established outside the EU/EEA, or use sub-processors that are. Where personal data is transferred outside the EU/EEA, we rely on the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission's standard contractual clauses together with any additional safeguards required. You can ask us for details of the mechanism used for a particular provider.

Cookies

Our website uses cookies to make it work, to remember your choices, and, with your consent, to understand how the site is used and to support our advertising.

Cookies that are strictly necessary for the website to function are set without consent. Analytics and marketing cookies are only set after you have agreed to them, and nothing in those categories loads before you do.

You can change or withdraw your choices at any time through the cookie settings link in the footer.

Your rights

Under the GDPR you have the right to:

  • ask what personal data we hold about you and receive a copy of it (access)
  • have inaccurate data corrected (rectification)
  • have data deleted where the law allows (erasure)
  • ask us to restrict how we process your data (restriction)
  • object to processing we carry out on the basis of legitimate interest
  • receive data you gave us in a machine-readable format, or have it sent to another provider (portability)
  • withdraw your consent at any time, where our processing is based on consent

To exercise any of these rights, contact us at contact@daveniratelier.com.

If you believe we are handling your personal data incorrectly, you also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy.se.

Changes

We may update this policy to reflect changes in our business, our legal obligations or how the website works. The current version is always the one published on this page.

Contact

If you have any questions about this policy or how we process your personal data, please contact us at contact@daveniratelier.com.