Last updated: February 16, 2026

1. Introduction

Glimja AB (org. no. 556891-7867), Litslena Sneby 2, 745 96 Enköping, Sweden, operates the website Glimja.com and associated services and features ("the Services").

We care about your personal privacy and are responsible for processing your personal data according to this policy.

This privacy policy describes how we collect, use, store, and share your personal data when you:

• visit our website
• make purchases
• contact us
• register an account
• subscribe to newsletters
• otherwise use our services

By using our Services, you confirm that you have read this privacy policy.

2. What is personal data?

Personal data is information that can directly or indirectly be linked to an identifiable natural person, for example:

• Name
• Personal identity number (for credit purchases)
• Address
• Phone number
• Email address
• IP address
• Purchase history

3. What personal data we collect

Depending on how you use our services, we may collect the following data:

Contact details

Name, address, delivery address, billing address, email address, and phone number.

Payment details

Payment information, transaction data, and payment history.
(Card details are handled by certified payment service providers and are not stored by us.)

Account details

Username, password (encrypted), settings, and preferences.

Order and transaction details

Information about products you buy, return, or add to your cart.

Communication details

Information you provide when contacting customer service.

Technical information

IP address, device information, browser type, and usage data via cookies.

4. How we collect data

We collect personal data:

• Directly from you when you make purchases or contact us
• Automatically via cookies and similar technologies
• From our payment and system providers
• From Shopify, which provides our e-commerce platform

5. Purpose and legal basis

We process your personal data for the following purposes:

To fulfill contracts

• Manage orders
• Deliver products
• Handle payments
• Manage returns

For customer service

• Answer questions
• Handle complaints

For marketing

• Send newsletters (with consent)
• Show relevant offers

You can unsubscribe from marketing at any time.

For legal obligations

• Accounting requirements
• Consumer law obligations
• Fraud prevention

For legitimate interest

• Improve our website
• Analyze purchasing behavior
• Ensure IT security

6. Payments – Qliro

When you choose to pay via Qliro, we share certain personal data with Qliro, such as:

• Name
• Personal identity number (for invoice/installment)
• Address
• Email
• Phone number
• Order information

This is done so that Qliro can:

• Manage payment
• Conduct credit checks
• Offer payment options
• Prevent fraud
• Fulfill legal requirements

Qliro is responsible for its own processing of your data.
More information is available in Qliro's privacy policy.

7. Shopify

Our store is operated via Shopify. Shopify processes personal data to provide and improve the platform.

This may involve transferring data outside the EU/EEA. In such cases, approved safeguards such as the EU standard contractual clauses are used.

Shopify's privacy policy is available at: https://privacy.shopify.com

8. Sharing of Personal Data

We only share data when necessary with:

• Payment service providers (e.g., Qliro)
• Shipping companies
• IT providers
• Accounting system
• Newsletter system

All data processors handle data according to our instructions and applicable law.

We never sell your personal data.

9. Retention Period

We store your data as long as necessary for:

• Contractual relationship
• Accounting requirements (usually 7 years)
• Handling complaints
• Ongoing customer relationship

Newsletter data is stored until you unsubscribe.

10. Your Rights under GDPR

You have the right to:

• Access your data
• Have incorrect data corrected
• Have data deleted
• Restrict processing
• Object to processing
• Obtain your data in a structured format (data portability)
• Withdraw consent

Contact us at hej@glimja.se to exercise your rights.

You also have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY).

11. Security

We use technical and organizational security measures to protect your personal data.

Please note that no transfer over the internet is completely secure.

12. Children

Our services are not directed at children under 16 years old. We do not knowingly collect personal data from children.

13. Cookies

We use cookies to:

• Make the website function properly
• Improve user experience
• Analyze traffic
• Enable marketing

You can change cookie settings in your browser at any time.

14. International Transfers

If personal data is transferred outside the EU/EEA, we ensure that legal safeguards are used.

15. Changes to the Policy

We may update this policy as needed. The latest version is always published on Glimja.com.

16. Contact Information

Glimja AB
Reg. no: 556891-7867
Litslena Sneby 2
745 96 Enköping
Email: hej@glimja.se
Phone: +46 (0)10 551 35 50

We are responsible for processing your personal data.