Privacy Policy

Identification (name, date of birth; BankID verification where used); contact details (email, phone, address); order & logistics data; payment references from our payment partners (we do not store full card numbers); technical data (IP, device, logs, cookies).

​

​

Purposes & Legal Bases (GDPR)

​

• Provide accounts, orders, delivery — Contract (Art. 6(1)(b)).

• Payments & fraud prevention — Legitimate interests (6(1)(f)) and partner requirements.

• KYC/ID checks for certain gold deliveries or higher‑risk orders — Legal obligation (6(1)(c)); in some cases legitimate interests (6(1)(f)).

• Bookkeeping & tax — Legal obligation (6(1)(c)).

• Support & essential service messages — Contract (6(1)(b)) / legitimate interests (6(1)(f)).

• Marketing emails — Consent (6(1)(a)), revocable at any time.

​

​

Cookies

​

Necessary cookies run by default. Analytics/marketing cookies run only with your consent via our banner; change or withdraw consent anytime in Cookie settings.

​

​

Sharing

​

We do not sell personal data. We share it with payment providers, ID‑verification services (e.g. BankID/KYC), insurers, carriers, and IT/cloud vendors acting as processors under contract, and with public authorities where required by law.

​

​

International Transfers

​

If partners are outside the EU/EEA, we use the EU Standard Contractual Clauses and, where available, adequacy decisions, plus supplementary measures as needed.

​

​

Retention

​

Orders/customer service: contract term + up to 36 months; accounting records: 7 years; KYC/ID where collected: for the period required by law and risk management (typically up to 5 years).