Last updated: March 2026
Data Controller
Spice Recordings
Götgatan 99, 116 62 Stockholm
spice99@gmail.com
1. Data We Collect and Why
Analytics (Google Analytics)
We use Google Analytics to understand how visitors use our website. Google Analytics collects anonymised information about your visit, such as which pages you view, how long you stay, and what device you use. IP anonymisation is enabled, meaning your full IP address is never stored. Data is processed on the basis of your consent (Art. 6(1)(a) GDPR).
Purchases in Our Shop (Shopify)
Our shop is powered by Shopify. When you make a purchase we process the information required to fulfil your order: name, email address, delivery address, and payment information. Payments are handled through Shopify’s payment solution and we never store card numbers or other sensitive payment data.
Shopify also collects technical data about your visit to the shop — such as IP address and browser information — to prevent fraud and improve the service. Depending on which apps are used in the shop, additional data collection may occur; this policy will be updated accordingly. You can read Shopify’s own privacy policy at shopify.com/legal/privacy.
Data is processed on the basis of contract (Art. 6(1)(b) GDPR).
Contact by Email
If you contact us by email, your email address and the content of your message will be stored for as long as is necessary to handle your enquiry. Data is processed on the basis of legitimate interest (Art. 6(1)(f) GDPR).
2. Cookies
We use cookies for the following purposes:
| Cookie | Purpose | Retention |
|---|---|---|
| Google Analytics (_ga, _gid) | Visitor statistics | 2 years / 24 hours |
| CookieYes (cookieyes-consent) | Stores your cookie preferences | 1 year |
| Shopify (cart, session) | Shopping cart and session | Session / 1 year |
You can withdraw your consent to cookies at any time by clicking “Manage cookies” at the bottom of the page or through your browser settings.
3. How Long We Retain Your Data
We retain your personal data for as long as is necessary for the purposes for which it was collected, or for as long as we are required to do so by law. For example, the Swedish Bookkeeping Act (bokföringslagen) requires transaction records to be kept for seven years.
4. Your Rights
Under the GDPR and the Swedish Data Protection Act (dataskyddslagen, 2018:218) you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict the processing of your data
- Object to processing based on legitimate interest
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise your rights, contact us at spice99@gmail.com. We will respond within 30 days.
5. Complaints
If you believe we are processing your personal data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):
imy.se | +46 8 657 61 00
6. Changes to This Policy
We may update this privacy policy from time to time. For material changes we will notify visitors on the website. The current version is always available on this page.