VOID STUDIO · PRIVACY
PRIVACY
POLICY.
This policy explains what personal data VOID STUDIO processes, why we use it, who may receive it, how long we keep it and the rights available to you.
LAST UPDATED · 16 SEPTEMBER 2026
01
WHO CONTROLS YOUR DATA.
VOID STUDIO is the brand name used for this online store. The person or legal entity responsible for the processing described in this policy is:
02
DATA WE MAY COLLECT.
Name and, where relevant, account/display-name information.
Email address, phone number, billing address and delivery address.
Products, size and colour selections, order values, delivery information, payment status, refunds and return history.
Customer-account details and saved settings. Passwords are stored by the website in protected form and are not visible to VOID STUDIO in plain text.
Messages, withdrawal requests, complaints, photographs you choose to provide and related order notes.
IP address, device/browser information, consent choices, website interactions and analytics data where applicable.
Email address, marketing preferences and information used for permitted email automations and campaign measurement.
Payment method, payment status and transaction references. VOID STUDIO does not store your full payment-card number.
03
WHY WE USE YOUR DATA.
| PURPOSE | TYPICAL DATA | LEGAL BASIS |
|---|---|---|
| Process and fulfil orders | Identity, contact, order and transaction data | Contract · Art. 6(1)(b) |
| Provide customer accounts and order history | Identity, contact, account and order data | Contract · Art. 6(1)(b) |
| Handle returns, withdrawal requests and support | Contact, order, support and return data | Contract and legal obligation · Art. 6(1)(b)/(c) |
| Process payments and reduce fraud | Identity, contact, transaction and technical data | Contract and legitimate interests · Art. 6(1)(b)/(f) |
| Meet accounting, tax and legal requirements | Order, transaction and contact data as required | Legal obligation · Art. 6(1)(c) |
| Send newsletters and marketing automations | Email, preferences, cart/order data where relevant | Consent · Art. 6(1)(a), where consent is required |
| Website analytics using non-essential technologies | Technical and usage data | Consent · Art. 6(1)(a) |
| Protect the website, prevent abuse and defend claims | Technical, account, order and communication data | Legitimate interests · Art. 6(1)(f) |
Where we rely on legitimate interests, the interest is normally operating and securing the store, preventing misuse, and establishing or defending legal claims. We do not use legitimate interests to override a consent requirement for non-essential cookies.
04
ORDERS, ACCOUNTS & CUSTOMER CARE.
When you place an order, we need enough information to create the order, accept payment, prepare the correct product, deliver it and communicate with you about the purchase.
If you create a customer account, we use account data so that you can sign in, view orders, maintain addresses and use other account functions.
If you contact us about an order, use the online withdrawal function, request a return, or make a complaint, we process the information you provide so that we can identify the purchase, respond to you and fulfil our legal and contractual obligations.
Some information is required to enter into or perform the purchase contract. If you do not provide the necessary identity, contact, delivery or payment information, we may not be able to accept or fulfil an order.
05
EMAIL & MARKETING.
VOID STUDIO uses Hostinger Reach for email marketing and configured email automations. Depending on the features enabled, these may include welcome emails, abandoned-cart messages, post-purchase recommendations and repeat-purchase offers.
Marketing emails are sent where we have the required permission or another lawful basis applies. Where processing is based on consent, you can withdraw that consent at any time by using the unsubscribe function in the email or by contacting us.
Withdrawing marketing consent does not affect transactional messages that are necessary for an order, payment, delivery, return, account security or another customer-service request.
06
ANALYTICS & COOKIES.
We use cookies and related technologies for functions such as keeping the shopping cart and customer account working. Strictly necessary technologies may be used without consent where the law permits this.
Non-essential statistics, analytics or marketing technologies are controlled through our cookie-consent system. Where consent is required, they should not be activated until you have made the relevant choice.
We may use Google Analytics to understand how the website is used where the relevant consent has been given. The exact cookies, providers, purposes and storage periods are listed dynamically in our Cookie Policy.
VIEW COOKIE POLICY ↗You can change or withdraw your cookie choices through the consent controls provided by Complianz.
07
WHO MAY RECEIVE DATA.
We only share personal data where it is necessary for the purposes described in this policy, where a provider processes data on our behalf, or where disclosure is required by law.
Website hosting, email infrastructure and Hostinger Reach email marketing/automation.
E-commerce functionality and, where selected, payment processing services.
Payment processing and fraud-prevention functions associated with supported card and wallet payments.
Payment services where you select Klarna at checkout.
Delivery information needed to transport and deliver your parcel and provide shipment services.
Analytics services where enabled and consented to.
Cookie-consent management and documentation of consent preferences on the website.
Some providers act as processors on our behalf, while payment, delivery or other providers may process certain information as independent controllers for their own legal obligations and service purposes. Their own privacy information applies to such processing.
We do not sell personal data.
08
INTERNATIONAL DATA TRANSFERS.
Some service providers or their sub-processors may process personal data outside Sweden or outside the European Economic Area.
Where GDPR rules on international transfers apply, transfers must rely on an appropriate transfer mechanism, for example an adequacy decision, approved Standard Contractual Clauses, or another mechanism permitted by applicable data-protection law.
Provider infrastructure and transfer arrangements can change. Current details are available in the privacy documentation of the relevant service provider.
09
HOW LONG WE KEEP DATA.
Transaction and accounting information is kept for the period required by applicable bookkeeping and tax rules. Where Swedish bookkeeping retention rules apply, accounting information is generally retained for seven years.
Account data is kept while the account is active or as needed to provide account functions. Some order records may need to remain even if an account is deleted.
Marketing-contact data is kept until you unsubscribe, withdraw consent, or the information is otherwise no longer needed, subject to limited suppression records where needed to respect an opt-out.
Analytics data is retained according to the settings and retention periods configured for the relevant analytics service.
Customer-service and return records are kept as long as reasonably necessary to resolve the matter and to establish, exercise or defend legal claims, then deleted or anonymised when no longer needed.
We may retain specific information for a longer period where a legal obligation, unresolved dispute, fraud-prevention need or legal claim requires it.
10
YOUR GDPR RIGHTS.
Depending on the circumstances, data-protection law may give you the right to:
- receive information about how your personal data is used
- request access to personal data we hold about you
- request correction of inaccurate or incomplete data
- request erasure where the legal conditions are met
- request restriction of processing in certain situations
- object to processing based on legitimate interests
- receive certain data in a portable format
- withdraw consent at any time where consent is the legal basis
- lodge a complaint with a supervisory authority
To exercise a right, email support@voidstudio.se. We may need to verify your identity before disclosing or changing personal data.
We will respond without undue delay and normally within one month. In legally permitted cases involving complex or numerous requests, that period can be extended, and we will inform you where an extension applies.
In Sweden, complaints can be submitted to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
IMY.SE ↗11
AUTOMATED DECISIONS.
VOID STUDIO does not itself make decisions based solely on automated processing that produce legal or similarly significant effects for you.
Payment providers such as Klarna, Stripe or WooPayments may use automated fraud, identity, payment or credit-assessment systems as part of the services they provide. Where they determine the purposes and means of that processing, their own privacy notices explain the processing and any related rights.
12
HOW WE PROTECT DATA.
We use reasonable technical and organisational safeguards appropriate to the store and the information processed. These include encrypted web connections, restricted administrative access, authenticated email delivery and security measures provided by our hosting and payment providers.
No internet service can guarantee absolute security. If we become aware of a personal-data breach, we will handle it in accordance with applicable legal requirements.
13
CHANGES & CONTACT.
We may update this policy when our services, providers or legal obligations change. The current version and its latest-update date will be published on this page.
Where a change materially affects processing that requires your consent, we will request new consent where the law requires it. Simply continuing to use the website is not treated as consent to optional processing that legally requires an active choice.
Privacy questions and rights requests can be sent to:
SUPPORT@VOIDSTUDIO.SE