Privacy Policy
Last updated: July 2026
Dreccano AB ("we", "us") is the controller of personal data collected through dreccano.com. This policy explains what we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).
Data we process
- Account & order data — name, email, shipping and billing address, order history.
- Payment data — processed by Stripe; we do not store card details.
- Technical data — device, browser, IP, and interaction logs, minimised where possible.
- Marketing data — email address if you subscribe to the newsletter.
Legal bases
We process data under Article 6(1) GDPR: to perform your contract (b), to comply with legal obligations (c), for our legitimate interests in running and improving the shop (f), and on the basis of your consent (a) for marketing and non-essential cookies.
Retention
Order data is retained for 7 years to satisfy Swedish bookkeeping obligations. Marketing data is retained until you unsubscribe.
Sharing
We share data with processors acting on our behalf: Stripe (payments), Tapstitch (fulfilment), Resend (email), and our hosting providers. Some processors are located outside the EEA; transfers are protected by Standard Contractual Clauses.
Your rights
You may access, rectify, erase, restrict, or port your data, and object to processing. Contact privacy@dreccano.com. You may also lodge a complaint with the Swedish data protection authority (IMY).