Privacy policy
About this policy
This Privacy Policy explains how Casatlantic AB collects, uses and protects your personal information when you visit casatlantic.com, place an order, create an account, subscribe to our communications or otherwise interact with us.
Casatlantic AB is responsible for the personal information described in this policy. We are registered at Manufakturgatan 11, 417 07 Gothenburg, Sweden, under company registration number 559242-0961. We may update this policy from time to time, and the latest version will always be available on our website.
Information we collect
The information we collect depends on how you interact with us. It may include your name, billing and delivery address, email address, telephone number, account information, order and transaction history, returns and customer service correspondence.
When you use our website, we may also collect technical information such as your IP address, browser and device information, website activity and information collected through cookies and similar technologies. Payment information is handled securely by our payment providers, and we do not store your complete payment card details.
How we collect your information
Most information is provided directly by you when you place an order, create an account, register a return, contact us, subscribe to our newsletter, request a stock notification, participate in a survey or promotion, or otherwise interact with Casatlantic.
We also collect certain information automatically when you use our website through cookies and similar technologies. In some cases, we receive information from companies that help us operate our website, process payments, deliver orders, provide customer service, analyse website activity or communicate with you.
How we use your information
We use your personal information to process and deliver orders, manage payments and returns, provide customer service and maintain customer accounts. This processing is necessary to fulfil our contract with you.
We may also use information to prevent fraud and misuse, operate and improve our website and services, and protect our business and customers where we have a legitimate interest in doing so. Certain information is retained to meet legal requirements, including accounting and tax obligations.
Where required, we rely on your consent to use information for marketing, analytics, advertising and other optional purposes. You can withdraw your consent at any time. Where otherwise permitted by law, we may also send communications relating to our products and services.
Marketing & Cookies
If you subscribe to our newsletter or other marketing communications, we may use your contact information and interactions with Casatlantic to send you information about products, collections, events and other news that may be relevant to you. You can unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us. Unsubscribing from marketing does not affect service messages relating to an order, return or customer service request.
Our website uses cookies and similar technologies to operate correctly, remember preferences, understand how the website is used and, where you have consented, support analytics and advertising. You can manage your cookie preferences at any time through the Cookie Preferences available on our website.
Who we share information with
Personal information is shared only where necessary to operate our business and provide our services. Our online store is operated through Shopify, which provides our ecommerce infrastructure and supports order processing and related services. Shopify may process customer information on our behalf and, for certain services, for its own purposes in accordance with its privacy terms.
Relevant information may also be shared with payment providers, delivery and return carriers, email and communication providers, and services used for fraud prevention, advertising and website analytics. Contentsquare is used to understand how visitors interact with our website and help improve its usability and performance. The information shared is limited to what is appropriate for the relevant purpose, and our service providers are required to handle personal information in accordance with applicable data protection requirements.
Personal information may also be disclosed where required by law, to protect our legal rights, or in connection with a sale, restructuring or transfer of all or part of our business.
International transfers
Some of the companies we work with may process personal information outside the European Economic Area. Where personal information is transferred outside the EEA, we ensure that appropriate safeguards are in place as required by applicable data protection law. These may include an adequacy decision, the European Commission's Standard Contractual Clauses or other approved safeguards.
Shopify may process information in countries including Canada and the United States. Transfers between Shopify entities from the EEA are protected through Shopify's approved Binding Corporate Rules, and other international transfers may be protected through Standard Contractual Clauses or other recognised safeguards. You can contact us if you would like more information about the safeguards used for international transfers.
How long we keep your information
We keep personal information only for as long as necessary for the purpose for which it was collected and to meet applicable legal, accounting and reporting requirements.
How long information is kept depends on what it relates to. Order and transaction records are generally retained for seven years where required by Swedish accounting law. Other information is kept only for as long as necessary for the relevant purpose. Marketing information is kept until you unsubscribe, withdraw your consent where applicable, or we otherwise no longer have a valid reason to retain it. Where information is no longer required, it is deleted or anonymised.
Your rights
Depending on the circumstances, you may have the right to access the personal information we hold about you, correct inaccurate information, request deletion or restriction, object to certain processing, receive certain information in a portable format and withdraw consent where our processing is based on consent. You can object at any time to the use of your personal information for direct marketing.
To exercise your rights, please contact us. We may ask for information necessary to confirm your identity before fulfilling a request. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe your personal information has been handled in breach of applicable data protection law.
Contact
Casatlantic AB
Manufakturgatan 11
417 07 Gothenburg, Sweden
Company registration number 559242-0961
info@casatlantic.com