Privacy policy

Who is responsible

The data controller is:

Seller

Pö om Pö AB, trading as Anu Raat

Organisation number

To be confirmed

Registered address

To be confirmed

Email

anu@toothfairy.com

VAT number

To be confirmed

What we collect and why

• Orders — name, email, delivery address, items, amounts and currency. Used to deliver your order and handle complaints (legal basis: contract), and to keep accounting records (legal basis: legal obligation).
• Payments — handled by Stripe. We receive payment status and a reference, never your full card number.
• Withdrawal requests — order reference, name, email, selected items and time of submission, to process your withdrawal (legal obligation). We also store a one-way scrambled form of your IP address for a short time to prevent abuse (legitimate interest).
• Your cart and currency choice — stored only in your own browser.

We don't use analytics, advertising or tracking tools, and we don't send marketing emails.

Who we share data with

• Stripe (payment processing) — may process data outside the EU under the EU's standard contractual clauses.
• Lovable and its infrastructure providers (website hosting and database).
• The postal or parcel carrier delivering your order.
• Our accountant and authorities where the law requires it.

We never sell your data.

How long we keep it

• Orders: retention period to be confirmed
• Withdrawal requests: retention period to be confirmed

Your rights

You can ask for access to, correction or deletion of your data, ask us to restrict processing, object to processing based on legitimate interest, and receive your data in a portable format. Write to the email above. You may also complain to the Swedish Authority for Privacy Protection (IMY) or the authority in your EU country.