Privacy Policy

Privacy policy

Last updated: 17 September 2026

This privacy policy explains how Garphyttan Outdoor AB processes personal data when you visit our website, shop with us, contact customer service, subscribe to communications or otherwise use our services.

1. Data controller

Garphyttan Outdoor AB, company registration number 559489-6655, is the data controller for the processing described in this policy.

Garphyttan Outdoor AB
c/o Rune Wänerstedt AB
Box 253
533 23 Götene
Sweden

Email: customercare@garphyttan.com
Telephone: +46 (0)511-44 13 71

2. Personal data we process

Depending on how you use our services, we may process:

  • Contact and identity details, such as your name, email address, telephone number, delivery address and billing address
  • Order and purchase information, such as products ordered, prices, discounts, payment status, delivery details, returns and complaints
  • Payment-related information required to complete and administer a payment; full card details are normally handled by the payment provider rather than Garphyttan
  • Customer service information, such as messages, case history and information you provide in connection with questions, returns, complaints or warranty claims
  • Marketing information, such as subscription status, consent choices, campaign responses, email opens and clicks
  • Usage and device information, such as IP address, browser, device, pages visited, approximate location and interactions with the website, where such processing is permitted
  • Reviews and other information you voluntarily provide when submitting a review.

3. Why we process personal data

3.1 Purchases, payments and delivery

We process contact, order, payment and delivery information to receive and administer your order, deliver products, handle payment, send order information and manage returns, exchanges and refunds. This processing is necessary to perform our contract with you. We also process certain information to comply with legal obligations, including accounting requirements.

3.2 Customer service, complaints and warranties

We use your contact, order and case information to answer questions and manage returns, complaints, warranty claims and other requests. The processing is based on performing our contract with you, complying with legal obligations and our legitimate interests in providing customer service and establishing, exercising or defending legal claims.

3.3 Newsletters and customer communications

If you subscribe to our newsletters or other marketing communications, we process your email address, preferences and engagement with our messages to send relevant communications and improve our content. The processing is based on your consent where consent is required. In certain existing customer relationships, we may send marketing based on our legitimate interests and the applicable rules on electronic marketing. You can unsubscribe at any time by using the link in the message or contacting us.

3.4 Business analysis and development

We analyse sales, orders, products, customer relationships and aggregated behaviour to monitor our business, improve our product range, plan inventory and develop the customer experience. For internal sales analysis, relevant data is synchronised from WooCommerce to Metorik. This processing is mainly based on our legitimate interest in analysing and developing our business. Analytics based on non-essential cookies or similar technologies are used only after you have provided the required consent.

3.5 Personalisation and advertising

With your consent, we may use cookies, pixels and similar technologies to measure campaigns, understand how the website is used and display more relevant advertising. We may also use customer and contact information to create or match advertising audiences where permitted. Data may be processed by providers such as Google, Meta and Microsoft. You can change or withdraw your consent at any time through the cookie settings on our website. You may also object to the use of your personal data for direct marketing by contacting us. Further information is available in our cookie policy.

3.6 Customer reviews

After a purchase, we may invite you to review a product or your shopping experience through Lipscore. For this purpose, your name, email address and relevant order information may be shared with the service. The processing is based on our legitimate interest in collecting feedback, improving our products and helping other customers make informed purchasing decisions. You may object to these messages at any time.

3.7 Security and prevention of misuse

We may process technical information, order information and communications to protect our website and services, detect fraud and misuse, and manage security incidents. This processing is based on our legitimate interest in maintaining security and protecting Garphyttan, our customers and other affected parties.

4. Where the data comes from

We mainly obtain personal data directly from you, for example when you place an order, contact us or subscribe to communications. We may also receive information from our payment, delivery, analytics and marketing providers and collect technical information through the website where permitted.

5. Who we share personal data with

We share personal data only where necessary for the purposes described in this policy. Recipients may include:

  • E-commerce and IT providers, including WordPress and WooCommerce
  • Metorik for sales analysis and reporting based on data from WooCommerce
  • Klaviyo for customer communications, segmentation and marketing messages
  • Walley, Stripe and other payment providers displayed at checkout
  • DSV, UPS and other transport and logistics providers
  • Lipscore for collecting and publishing customer reviews
  • Google, Meta and Microsoft for consent-based analytics, measurement and advertising
  • providers of hosting, website operations, security, translation and technical support
  • Public authorities or other recipients where required by law or necessary to protect our rights.

Some recipients process personal data as our processors and may only process it according to our instructions and a data processing agreement. Other organisations, including certain payment providers, may act as independent controllers for their own processing. In those cases, their own privacy policies also apply.

6. Transfers outside the EU and EEA

Some of our providers or their subprocessors may process personal data outside the European Union and European Economic Area, including in the United States. Where personal data is transferred outside the EU and EEA, we ensure that a valid transfer mechanism is in place, such as an adequacy decision or the European Commission’s standard contractual clauses, together with supplementary safeguards where necessary. You may contact us for further information about the safeguards used.

7. How long we retain personal data

We do not retain personal data for longer than necessary for each purpose:

  • Order and payment records are retained for as long as required under accounting and other applicable laws, normally for seven years after the end of the calendar year in which the relevant financial year ended
  • Information required for returns, complaints, warranty claims and legal claims is retained for as long as needed to handle the matter and thereafter for as long as a claim may be brought
  • Customer service communications are retained for as long as needed to resolve the matter and follow up the customer relationship
  • Newsletter and marketing information is retained until you unsubscribe, withdraw consent or the information is no longer needed; limited information may be retained to ensure that we continue to respect your opt-out
  • Cookie and usage information is retained for the periods stated in our Cookie Policy and cookie settings.

When personal data is no longer needed, it is deleted or anonymised. We may retain it for longer where required by law or necessary to establish, exercise or defend legal claims.

8. Cookies and similar technologies

We use necessary cookies to make the website and checkout function. Analytics and marketing cookies are used only after you have provided consent. Our Cookie Policy explains which cookies and services are used, their purposes and retention periods. You can change your choices through the cookie settings on the website.

9. Profiling and automated decisions

We may use information about purchases, products viewed and engagement with communications to create customer segments and tailor product recommendations, communications and advertising. This profiling is used for marketing and to improve the customer experience. We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

10. Your rights

Depending on the circumstances, you have the right to:

  • Receive information about and access the personal data we process about you
  • Have inaccurate or incomplete personal data corrected
  • Request deletion of personal data or restriction of processing
  • Object to processing based on legitimate interests and always object to direct marketing
  • Withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal
  • Receive certain personal data in a structured, commonly used and machine-readable format and, where possible, have it transferred to another controller.

To exercise your rights, contact us at customercare@garphyttan.com. We may need to verify your identity before responding to your request.

If you believe that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection, IMY, or the supervisory authority in the country where you live or work. Further information is available at www.imy.se.

11. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss and other unlawful processing. Access to personal data is limited to people and providers who need it to perform their duties.

12. Changes to this policy

We may update this privacy policy when our services or processing activities change or when required by new laws or guidance. The latest version is always available on our website, and the date of the latest update is shown at the top. We will provide appropriate notice of material changes.

13. Contact

If you have questions about this policy or how we process personal data, please contact us:

Garphyttan Outdoor AB
Company registration number 559489-6655
c/o Rune Wänerstedt AB
Box 253
533 23 Götene
Sweden
Email: customercare@garphyttan.com
Telephone: +46 (0)511-44 13 71