Privacy policy

Handling of Personal Data

At Curly, it is extremely important to us that you, as a customer, can feel confident that we follow all established guidelines regarding the use of personal data. It is vital to us that you can always trust that we strictly comply with the laws and regulations governing the processing of personal data.

General

We collect, disclose, and store your personal data. This privacy policy applies when Curly provides services and products, such as when you shop with us, contact our customer service, visit our websites, or create a membership account.

Data Controller

We are the data controller, ensuring that the processing of your personal data is carried out in accordance with applicable legislation.

What personal data does Curly process?

Our data policy means that we store and handle as little of your information as possible. This means that we only use the data necessary to process your order and maintain communication with you. The personal data we collect from you as a customer includes:

  • Name

  • Address (delivery and billing address)

  • Email address

  • Phone number

  • Customer number

  • Purchase history

  • IP address and information about the use of our website

  • Personal data you provide when contacting, for example, customer service

To process your order fully, we share your information with our partners. We also collect your address details from third-party services for address updates. When you visit our website, we store the following information for administrative and technical reasons: type and version of browser used, date and time of visit, and your IP address. This data is anonymized and used for our statistics and to improve our internet and online services. The anonymized data is separated from your personal information, stored in a secure system, and cannot be linked to a specific person. This ensures that your personal data is always protected.

When do we process personal data?

We process your personal data when you visit our website, shop with us, subscribe to our newsletter, create a membership account, or contact our customer service. The reason we collect this information is to provide the service and functionality expected and to fulfill our part of, for example, a purchase agreement.

How long is personal data stored?

We only store personal data for as long as is justified by the purpose. The storage time may vary depending on the type of data and the purpose. See below:

  • Legal basis: Fulfillment of a purchase agreement
    Storage time: 3 years after completed purchase

  • Legal basis: Fulfillment of a legal obligation
    Storage time: As long as required by applicable law, e.g., 7 years according to the Swedish Accounting Act

  • Legal basis: Fulfillment of a purchase agreement and consent
    Storage time: 12 months after completed purchase or until consent is withdrawn

How do we protect your personal data?

We have taken all necessary security measures to protect your personal data, and you can feel completely safe when providing your personal information to us. We prevent unauthorized access, distribution, and modification, including by storing personal data in databases protected by access control and firewalls. When communicating personal data to partners, data processing agreements are always in place, and communication is encrypted.

Possible changes to the privacy policy

We reserve the right to change our data protection declarations if necessary due to new technology or similar reasons. Please ensure that you have the most current version. If we change fundamental sections of this privacy policy, we will notify you on our website.