Privacy Policy

Last updated: 10 October 2026

1. Who is responsible

Adleo Invest AB (corporate identity number 559149-1799), Box 2107, 182 02 Danderyd, Sweden, is the data controller for the personal data processed through leosmidhammar.com, also reachable at leosmidhammar.se and leosmidhammar.eu (the "Site"). You can reach us at contact@leosmidhammar.se.

2. What we collect and why

Visiting the Site: our hosting provider Vercel processes technical data such as your IP address, browser type and the pages you request, in order to deliver the Site and keep it secure. On your first visit to the home page, your approximate country (derived from your IP address) is used to choose a suitable language; it is not stored. Legal basis: legitimate interest.
Contact form: your name, email address and message. These are sent by email to our inbox and are not stored in a database on the Site. We use them only to reply to you. Legal basis: legitimate interest.
Orders: your name, delivery address, email address, phone number (if provided) and order details. We use them to deliver your order, handle returns and complaints, and meet our bookkeeping obligations. Payment card details are handled by Shopify and its payment providers; we never see them. Legal basis: performance of a contract and legal obligation.

3. Cookies

The Site sets only the cookies it needs to work. No analytics, advertising or tracking cookies are set by the Site.

preferredLanguage — remembers your chosen language. Kept for one year.
cartId — keeps track of your shopping cart; set only when you add a print to it. Kept for 30 days.

When you go to checkout, Shopify sets its own cookies as described in Shopify's privacy policy. Strictly necessary cookies do not require consent under the Swedish Electronic Communications Act.

4. Who we share data with

Vercel — hosting of the Site
Supabase — storage of Site content and images
Shopify — online store, checkout and payments
one.com — email, including delivery of contact-form messages
Print and shipping partners — the print lab and carrier that produce and deliver your order receive the name and address needed for delivery
Authorities — for example the Swedish Tax Agency, when required by law

These providers process personal data on our behalf or, for their own purposes, as independent controllers. We never sell your personal data.

5. Transfers outside the EU/EEA

Some of our providers, including Vercel and Shopify, process data in the USA or other countries outside the EU/EEA. Such transfers are based on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

6. How long we keep data

Contact-form messages: as long as needed to handle your enquiry.
Order data: as long as needed for delivery, returns and complaints. Accounting records are kept for seven years, as required by the Swedish Bookkeeping Act.
Technical data at Vercel: for a short period, according to Vercel's own routines.

7. Your rights

Under the GDPR, you have the right to access, correct or request deletion of your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, contact us at contact@leosmidhammar.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, www.imy.se) or the data protection authority in your own EU/EEA country.

8. Changes to this policy

We may update this Privacy Policy from time to time. The date above shows the latest version.

9. Contact

Questions about this policy can be sent to contact@leosmidhammar.se.