Last updated: 18 September 2026
At Wall of Art, we respect your privacy and take care to protect your personal information. Here we explain how we use it when you shop with us, browse our website or get in touch, and the choices you have.
Wall of Art AB, company registration number 559086-8161, is the data controller responsible for the processing described in this policy.
You can contact us at info@wallofart.se or write to us at Götgatan 23, 116 46 Stockholm, Sweden.
Your purchases. We use your name, contact and address details, order information and payment details to process purchases, arrange delivery and handle returns or complaints. This is necessary to fulfil our agreement with you and meet applicable legal obligations. We also receive payment and delivery updates from our providers. Required checkout information is needed to complete your order.
Your enquiries. When you contact us, we use the information and attachments you provide to help you. For enquiries about your purchase, this is based on our agreement with you. For other enquiries and collaborations, we rely on our legitimate interest in responding to requests and managing business relationships.
Newsletters and offers. If you subscribe, we use your contact details, preferences and relevant purchase or cart information to send news, inspiration, offers and automated marketing emails. We do this with your consent. Subscribing is optional, and you can unsubscribe at any time.
Website improvements and advertising. We use information such as IP addresses, device identifiers, pages viewed, purchases, email openings and clicks to understand engagement and make our website and marketing more relevant. Optional tracking and personalised advertising rely on consent where required. Otherwise, where legally permitted, we rely on our legitimate interest in improving and promoting our services, subject to your privacy choices.
Legal requirements and security. We retain information needed for bookkeeping and other legal obligations. We also use relevant technical and order information to prevent fraud and misuse and protect our legal rights, based on our legitimate interest in safeguarding our customers and business.
We use technical safeguards and internal procedures to protect personal information against unauthorised access, loss and misuse. Access is limited to those who need it for their work. Providers processing information on our behalf must protect it and follow our instructions.
We share relevant information with providers that help us run our store, process payments, produce and deliver orders, send emails and manage forms, customer service, accounting and IT. These include Shopify, Shopify Payments, Klarna, PayPal, Klaviyo, Google Workspace and Fortnox, together with our Swedish fulfilment partner and delivery carriers.
We use Google Analytics and Microsoft Clarity to understand website use, and Google, Meta, Pinterest and TikTok for advertising. Advertising platforms may receive contact details, including hashed contact details, and purchase or browsing information to match customers, measure results and personalise advertising. This includes customer lists transferred from Klaviyo to Google.
Microsoft Clarity provides heatmaps and recordings of website interactions. We use masking to limit visible personal information. Microsoft also processes this information as a separate data controller, as explained in the Microsoft Privacy Statement.
Shopify hosts our store. Through Shopify Network Intelligence, Shopify also uses information about visits and purchases together with interactions with other merchants and Shopify to provide services, including personalised advertising. Shopify is a separate data controller for these services. The Shopify Consumer Privacy Policy and Shopify Privacy Portal explain its processing and your privacy choices.
Other providers, including payment providers and certain advertising services, may also act as separate data controllers. We may share relevant information with authorities or professional advisers where legally required or necessary for legal claims.
Some providers process information outside the EEA and UK, including in the United States and Canada. These transfers rely on applicable adequacy decisions or approved safeguards, such as Standard Contractual Clauses or Binding Corporate Rules, with additional protection where necessary. Corresponding UK safeguards apply where required.
Contact us for information about the safeguards applicable to your data or a copy of the relevant safeguards.
Orders and accounting. We retain order information to complete purchases and handle applicable returns, warranties and claims. Accounting records are kept until the end of the seventh year following the calendar year in which the financial year ended, as required by Swedish law.
Other customer details. Customer-profile information not required for accounting or an ongoing matter is deleted after three years without a purchase. Newsletter information is handled separately, as described below.
Incomplete checkouts. Personal information relating to incomplete checkouts is deleted after 90 days. A separate newsletter subscription is not affected.
Enquiries and correspondence. Normally deleted when resolved. Relevant information may be retained for up to two years afterwards where needed for agreed follow-up, related complaints or documenting how the matter was handled.
Marketing. We use subscription information while you subscribe. After unsubscribing, marketing emails stop. We delete unnecessary profile information and review profiles blocked from marketing at least every six months. Limited consent and opt-out records may be retained to document and respect your choices.
Website analytics and tracking. Our Cookie Policy explains the technologies we use, how long cookies and the information collected through them are retained, and how you can manage your choices.
Relevant information may be retained longer where legally required or necessary for an ongoing dispute or legal claim.
Depending on the circumstances, you may request access to your information, correction, deletion, restricted use or transfer to another provider. You may also object to processing based on legitimate interests.
You can object to direct marketing at any time. Unsubscribe through any marketing email or contact us. You can withdraw consent without affecting the lawfulness of earlier processing. Manage website tracking through our cookie settings, or contact us about customer-list advertising.
To exercise your rights, email info@wallofart.se. We aim to get back to you within one week and will handle your request as soon as possible, no later than one month after receiving it. If an extension is necessary and permitted by law, we will let you know within that month and explain why.
You may complain to Sweden’s data protection authority, Integritetsskyddsmyndigheten (IMY), or another competent data protection authority.
Advertising disclosures may count as “sale”, “sharing” or “targeted advertising” under US privacy laws. You can exercise applicable opt-out rights through our data sharing opt-out page or by contacting us.
