Privacy Policy
Last updated: June 5, 2026
This privacy policy describes how Bucksandspurs (the website, we, us, or our) collects, uses, and shares your personal data when you visit, use our services, purchase from bucksandspurs.se, or otherwise communicate with us regarding the website (collectively called the services). The use of you/your (etc.) in this privacy policy refers to you as a user of the services, whether you are a customer, website visitor, or another person whose data we have collected under this privacy policy.
We recommend that you read this privacy policy carefully.
Changes to this privacy policy
We may occasionally update this privacy policy, for example to align with new procedures or due to other operational, legal, or regulatory reasons. The revised privacy policy will be published on the website, as indicated by the “Last updated” date, and any other measures required by applicable law will be taken.
How we collect and use personal data
To provide the services, we collect, and have collected over the past 12 months, your personal data from a variety of sources as described below. The data we collect and use varies depending on how you interact with us.
In addition to the specific purposes stated below, we may use the data we have collected about you to communicate with you, provide or improve the services, comply with any applicable legal requirements, enforce any applicable terms of service, and to protect the services, our rights, as well as the rights of our users and others.
What personal data we collect
The types of personal data we collect about you depend on how you interact with our website and use our services. When we use the term personal data, we mean information that identifies you, relates to you, describes you, or can in any way be linked to you. The sections below describe the categories and specific types of personal data we collect.
Information we collect directly from you
Information you submit to us through our services may include:
- Contact details such as your name, address, phone number, and email address.
- Order information such as name, billing address, shipping address, payment confirmation, email address, and phone number.
- Account information such as username, password, security questions, and other information used to protect your account.
- Customer support information such as information you choose to share when communicating with us, for example when you send a message via the services.
-
Processing of personal data in withdrawal cases
When you use our digital withdrawal form, we process the personal data necessary to handle your case. This may include name, email address, order number, information about the affected order, which products the case concerns, reason for withdrawal, and any message you leave in the form.
We use the data to identify the correct order, confirm that we have received your withdrawal notice, handle the matter, communicate with you, and fulfill our legal obligations.
The data may be processed by our service providers, such as Shopify and the app or technical solution used to provide the digital withdrawal form.
The data is only stored as long as necessary to handle the matter, fulfill our legal obligations, resolve any disputes, or protect our rights.
Some features of the services may require you to directly provide us with certain information about yourself. You may choose not to share such information, but in that case, it may be impossible for you to use or access these features.
Information we collect about your usage
We may also automatically collect certain information about your interaction with the services ("Usage Data"). For this purpose, we may use cookies, pixels, and similar technologies ("Cookies"). Usage data may include information about how you access and use our website and your account, including details about your device, browser, network connection, IP address, and other information about your interaction with the services.
Information we receive from third parties
We may also ultimately receive information about you from third parties, including suppliers and service providers who may collect information on our behalf, for example:
- Companies that support our website and services, such as Shopify.
- Our payment processors who collect payment information (e.g., bank account details, credit or debit card information, billing address) in order to process your payment to be able to fulfill your orders and deliver the products or services you have requested, to fulfill our contract with you.
- When you visit our website, open or click on emails we send you, or interact with our services or advertisements, we or third parties we cooperate with may automatically collect certain information using online tracking technologies such as pixels, web beacons, SDKs, third-party libraries, and cookies.
All information we receive from third parties will be processed in accordance with this privacy policy. Also read the section below, Third-party websites and links.
How we use your personal data
- Providing products and services. We use your personal data to provide you with the services in order to fulfill our contract with you, including processing your payments, delivering your orders, sending you messages related to your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise managing your account, arranging shipping, facilitating any returns and exchanges, and other features and functions related to your account. We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services you may choose to use. In such cases, Shopify will process your data according to its privacy policy and consumer protection policy.
- Marketing and advertising. We may use your personal data for marketing and advertising purposes, such as sending marketing, advertisements, and promotional communications via email, SMS, or regular mail, and to show you ads for products or services. This may include using your personal data to better tailor the services and advertising on our website and other websites. If you reside in the EEA, the legal basis for this processing of personal data is our legitimate interest in selling our products, pursuant to Article 6(1)(f) GDPR.
- Security and fraud prevention. We use your personal data to identify, investigate, or take action regarding any fraudulent, illegal, or harmful activity. If you choose to use the services and register an account, you are responsible for keeping your login details secure. We strongly recommend that you do not share your username, password, or other access information with anyone else. If you believe your account has been compromised, contact us immediately. If you reside in the EEA, the legal basis for this processing of personal data is our legitimate interest in keeping our website safe for both you and other customers, pursuant to Article 6(1)(f) GDPR.
- Communicate with you and improve the service. We use your personal data to offer you customer support and improve our services. This is a legitimate interest for us so that we can be responsive to you, provide you with effective services, and maintain our business relationship with you under Article 6 (1) (f) GDPR.
Cookies
Like many others, we use cookies on our website. For more information about the cookies we use to operate our store with Shopify, visit https://www.shopify.com/legal/cookies. We use cookies to operate and improve our website and services (including to save information about your activity and preferences), to conduct analyses and gain a better understanding of how users interact with the services (which concerns our legitimate interest to administer, improve, and optimize the services). We may also allow third parties and service providers to use cookies on our website to better tailor the services, products, and advertising on our website and other websites.
Accepting cookies automatically is the default in most browsers, but you can change your browser settings to delete or reject cookies. Keep in mind that your experience may be negatively affected if you remove or block cookies, and some services, such as certain features and general functionality, may stop working fully or partially. Additionally, blocking cookies may not completely prevent our information sharing with third parties, such as our advertising partners.
Our website also recognizes the GPC signal (Global Privacy Control). This means you can choose not to have your data used or shared for certain purposes. If you use GPC to inform us of your preferences, we will interpret the signal as a valid request not to share your data or receive targeted advertising in the current browser or on the device used. If we can link the device sending the signal to a Shopify account, your request will also be respected for that account. More information about GPC (Global Privacy Control) is available at https://globalprivacycontrol.org/. We do not accept any other signals from browsers or devices requesting to stop tracking beyond GPC.
How we disclose personal data
Under certain circumstances, we may disclose your personal data to third parties to fulfill contracts, for legitimate purposes, and other reasons covered by this privacy policy. Some examples of such circumstances:
- Data may be shared with suppliers or other third parties performing services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, distribution, and delivery).
- Data may be shared with business and marketing partners to deliver services and advertising to you. Our business and marketing partners will use your data in accordance with their privacy notices.
- When you request or otherwise consent to us disclosing certain data to third parties, for example to deliver products to you or when you use social media widgets or login-based integrations, we may also share your data.
- Data may be shared with our affiliates or within our group as part of our legitimate interests in conducting a successful business.
- Data may be shared in connection with a business transaction, such as a merger or bankruptcy, to comply with applicable legal obligations (for example, in response to subpoenas, search warrants), enforce applicable user terms, and protect and defend the services, our rights, as well as the rights of our users and others.
In the past twelve months, we have disclosed personal data from the following categories and sensitive user information for the purposes described above in How we collect and use your personal information and How we disclose personal information:
| Category | Recipient categories |
|---|---|
|
|
We neither use nor disclose sensitive personal data without your consent or to draw conclusions about you.
With your consent, we share personal data for the purpose of carrying out advertising and marketing activities as described below.
We have “sold” and “shared” (as defined by applicable law) personal data during the past twelve months for the purpose of carrying out advertising and marketing activities as described below.
| Category of personal data | Recipient categories |
|---|---|
| Identifiers such as name, email address, and phone number | Business and marketing partners |
| Commercial information, such as records of purchased products or services | Business and marketing partners |
| Usage data | Business and marketing partners |
Third-party websites and links
Our website may provide links to websites or other online platforms operated by third parties. If you follow links to websites not affiliated with or controlled by us, you should read their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such websites, including whether the information on those websites is accurate, complete, and reliable. Information you provide yourself on fully or partially publicly accessible places, including information you share on third-party social networking platforms, may also be seen by others using the services and/or those using these third-party platforms without any limitation on how it may be used by us or third parties. The mere fact that we include such links does not imply that we endorse the content on such platforms, nor their owners or operations, beyond what is explicitly stated in the services.
Data concerning children
The services are not intended for use by children, and we do not knowingly collect personal data from children. If a child you are a guardian of has provided their personal data to us, you may contact us using the contact details below to request deletion.
Up until the date this privacy policy came into effect, we are not aware that we have "shared" or "sold" (as defined by applicable law) personal data concerning individuals under 16 years of age.
Security and storage of your data
Please note that no security measures are perfect or impenetrable, and we cannot guarantee that security is flawless. Any information you send to us may also be unprotected during transmission. We recommend that you do not use insecure methods to send sensitive or confidential information to us.
How long we retain your personal data depends on various factors, such as whether we need it to manage your account, provide the services, fulfill legal obligations, resolve disputes, or enforce other applicable contracts and policies.
Your rights
Depending on where you live, you may have some or all of the rights below regarding your personal data. However, these rights are not absolute, and it is possible that they only apply under certain circumstances, and the law allows us to deny your request in such cases.
- Right to access/knowledge: You may have the right to request access to the personal data we have about you, including information about how we use and share your information.
- Right to deletion: You may have the right to request that we delete the personal data we hold about you.
- Right to correction: You may have the right to request that we correct any personal data we hold about you if it is inaccurate.
- Right to data portability: Under certain circumstances and with some exceptions, you may have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party.
- Right to opt out of sale, sharing, or targeted advertising: You may have the right to instruct us not to “sell” or “share” your personal data or to specify that your personal data should not be used for purposes considered “targeted advertising,” as defined by applicable privacy laws. If you visit our website with the GPC signal enabled (depending on your location), we will automatically interpret this as a request to deny “sale” or “sharing” of data for the device and browser you use to visit the website.
- Restrict processing: You may have the right to request that we no longer process your personal data or limit our processing of it.
- Withdraw consent: In cases where we rely on consent to process your personal data, you may have the right to withdraw your consent.
- Appeal: If we deny your request, you may have the right to appeal our decision. You can do this by replying to our denial message.
- Manage communication settings: We may send you promotional emails, and you can choose to stop receiving such emails by using the unsubscribe feature included in all our messages to you. If you choose to stop receiving such emails, we may still send you messages that do not contain promotions, such as information about your account or your orders.
You can exercise these rights where indicated on our website or by contacting us via the contact details below.
Your status with us will not be affected by exercising your rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a well-founded response to your request. Under applicable law, you may appoint a representative who can make requests on your behalf to exercise your rights. Before accepting such a request from a representative, this representative must provide proof that you have authorized them to act on your behalf, and you may also need to personally verify your identity to us. We will respond to your request within the timeframe specified by applicable law.
Complaints
If you have complaints about how we process your personal data, contact us using the contact details below. If you are not satisfied with how we have handled your complaint, depending on where you live, you may have the right to appeal our decision by contacting us using the contact details below. You may also choose to send your complaint to the Swedish Authority for Privacy Protection (IMY). Within the EEA, you can find a list of responsible data protection supervisory authorities here.
International users
Please note that we may transfer, store, and process your personal data outside the country where you reside. Your personal data is also processed by staff and external service providers (third parties) and partners in these countries.
If we transfer your personal data outside of Europe, we will rely on recognized transfer mechanisms, such as the European Commission’s standard contractual clauses, or equivalent agreements from the relevant competent authority in the United Kingdom (depending on what is applicable), unless the data transfer is to a country that has been assessed to ensure an adequate level of protection.
Contact
If you have questions about our privacy practices or this privacy policy, or if you want to exercise any of your rights, call or email us at info@bucksandspurs.se, or you can contact us at Skeppargatan 74, 14, Stockholm, 114 59, SE.
With regard to applicable data protection legislation, and unless otherwise expressly stated, we are the data controller of your personal data.