Last updated: 16 February 2026

1. Introduction

Glimja AB (company registration no. 556891-7867), Litslena Sneby 2, 745 96 Enköping, Sweden, operates the Glimja.com website and associated services and features (the “Services”).

We respect your personal privacy and are the data controller for the processing of your personal data under this policy.

This privacy policy describes how we collect, use, store and share your personal data when you:

• visit our website
• make purchases
• contact us
• register an account
• subscribe to newsletters
• use our services in other ways

By using our Services, you confirm that you have read this privacy policy.

2. What is personal data?

Personal data is information that can be directly or indirectly linked to an identifiable natural person, such as:

• Name
• Personal identity number (for credit purchases)
• Address
• Telephone number
• Email address
• IP address
• Purchase history

3. What personal data we collect

Depending on how you use our services, we may collect the following data:

Contact details

Name, address, delivery address, billing address, email address and telephone number.

Payment details

Payment information, transaction data and payment history.
(Card details are handled by certified payment service providers and are not stored by us.)

Account details

Username, password (encrypted), settings and preferences.

Order and transaction details

Information about products you purchase, return or add to your cart.

Communication details

Information you provide when you contact customer service.

Technical information

IP address, device information, browser type and usage data via cookies.

4. How we collect data

We collect personal data:

• Directly from you when you make purchases or contact us
• Automatically via cookies and similar technologies
• From our payment and system providers
• From Shopify, which provides our e-commerce platform

5. Purposes and legal basis

We process your personal data for the following purposes:

To fulfill contracts

• Manage orders
• Deliver products
• Handle payments
• Administer returns

For customer service

• Answer questions
• Handle complaints

For marketing

• Send newsletters (with consent)
• Display relevant offers

You can unsubscribe from marketing at any time.

For legal obligations

• Accounting requirements
• Consumer law obligations
• Fraud prevention

For legitimate interest

• Improve our website
• Analyze purchasing behavior
• Ensure IT security

6. Payments – Qliro

When you choose to pay via Qliro, we share certain personal data with Qliro, such as:

• Name
• Personal identity number (for invoice/installment payments)
• Address
• Email
• Telephone number
• Order information

This is done so that Qliro can:

• Administer the payment
• Conduct credit assessments
• Offer payment options
• Prevent fraud
• Comply with legal requirements

Qliro is the data controller for its own processing of your data.
More information is available in Qliro's privacy policy.

7. Shopify

Our store is powered by Shopify. Shopify processes personal data to provide and improve the platform.

This may involve transferring data outside the EU/EEA. In such cases, approved safeguards such as the EU's standard contractual clauses are used.

Shopify's privacy policy is available at: https://privacy.shopify.com

8. Sharing of personal data

We only share data when necessary with:

• Payment service providers (e.g. Qliro)
• Shipping companies
• IT providers
• Accounting system
• Newsletter system

All data processors process data according to our instructions and applicable law.

We never sell your personal data.

9. Storage period

We store your data for as long as necessary for:

• The contractual relationship
• Accounting requirements (usually 7 years)
• Handling complaints
• Ongoing customer relationship

Newsletter data is stored until you unsubscribe.

10. Your rights under the GDPR

You have the right to:

• Access your data
• Have inaccurate data corrected
• Have data erased
• Restrict processing
• Object to processing
• Receive your data in a structured format (data portability)
• Withdraw consent

Contact us at hej@glimja.se to exercise your rights.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

11. Security

We use technical and organizational security measures to protect your personal data.

Please note that no transfer over the internet is completely secure.

12. Children

Our services are not directed at children under 16. We do not knowingly collect personal data about children.

13. Cookies

We use cookies to:

• Make the website function properly
• Improve the user experience
• Analyze traffic
• Enable marketing

You can change your cookie settings in your browser at any time.

14. International transfers

If personal data is transferred outside the EU/EEA, we ensure that legally required safeguards are used.

15. SMS

Information about your consent and your registration for SMS mailings will not be sold, rented out, or shared with third parties for marketing purposes.

16. Changes to the policy

We may update this policy when necessary. The latest version is always published on Glimja.com.

17. Contact details

Glimja AB
Company registration no.: 556891-7867
Litslena Sneby 2
745 96 Enköping
Email: hej@glimja.se
Phone: +46 (0)10 551 35 50

We are the data controller for the processing of your personal data.