Privacy Policy

Privacy Policy for Season Merch

Season Merch values your privacy. In this privacy policy, we explain how we
collect, use, share, and protect your personal data when you visit
seasonmerch.com, make a purchase, or otherwise interact with us. The policy
applies to all services, features, and tools provided on or via
seasonmerch.com (collectively referred to as "the Services").

By using the Services, you confirm that you have read this policy and
understand how your data is processed.

If there is a conflict between our general terms and conditions and this privacy policy,
the privacy policy shall apply in matters concerning personal data processing.


Data Controller

Season Merch is the data controller for the personal data processed within
the scope of our Services. For questions about the processing, you can contact us at:

privacy@seasonmerch.com


What personal data we process

"Personal data" refers to information that can directly or indirectly be linked to you
as an individual. De-identified or anonymized data is not considered personal data.

Depending on how you use the Services, we may process the following categories of
data:

• Contact information – name, delivery address, billing address, email address, and
phone number.

• Payment-related information – transaction details, chosen payment method, and
payment confirmations. Card and account numbers are processed by our
payment partners (Klarna, Stripe, Swish) and are never stored by us.

• Account information – if you create a customer account: username, password
(encrypted), order history, and saved settings. You can also shop as
a guest without creating an account.

• Order data – products you have viewed, added to cart, purchased, exchanged, or returned,
as well as your previous purchase history.

• Communication – content of emails, chats, or other communication you have
with our customer service.

• Technical data – IP address, device type, browser, operating system,
language settings, and other unique identifiers.

• Usage data – how you navigate and interact with seasonmerch.com,
including clicks, session duration, and page views.


Where we collect data from

We collect personal data from the following sources:

• Directly from you – when you shop, create an account, subscribe to newsletters,
contact customer service, or otherwise provide data to us.

• Automatically via the Services – through cookies and similar technologies that
record how you use seasonmerch.com.

• From our suppliers – for example, our e-commerce platform Shopify,
payment services, and marketing partners, to the extent they collect
data on our behalf.

• From advertising platforms – Google, Meta (Facebook/Instagram), and TikTok
may share aggregated or pseudonymized data with us about how our
ads perform.


How we use your personal data

We process your personal data for the following purposes and with the support of the following
legal bases:

Fulfillment of the purchase agreement

To manage your order, process payment, ship your goods, handle returns and
complaints, and provide customer support regarding your order. The legal basis is
fulfillment of contract.

Customer account and personal features

To create and administer your customer account, remember your settings, and display your order history. Legal basis: fulfillment of contract or consent.

Marketing and advertising

To send newsletters, promotional emails, and other marketing communications via email,
as well as to show you relevant ads on other platforms. Newsletters are sent
only if you have actively subscribed. Legal basis: consent and legitimate interest
for certain analysis purposes.

You can unsubscribe at any time via the unsubscribe link in each
mailing or by emailing privacy@seasonmerch.com.


Analysis and improvement of the Services

To understand how visitors use seasonmerch.com, measure ad effectiveness, and
continuously improve the customer experience. Legal basis: consent (for analytics cookies and
tracking pixels) or legitimate interest.

Security and fraud prevention

To verify transactions, detect and prevent misuse, fraud, or
other illegal activities, and secure our systems. Legal basis: legitimate interest
and legal obligation.

Legal obligations

To comply with requirements according to, for example, the Accounting Act, the Consumer Sales Act, and
tax legislation, as well as to handle any legal claims. Legal basis:
legal obligation.


Cookies and tracking technologies

Seasonmerch.com uses cookies and similar technologies for the Services to
function, to analyze traffic, and for marketing. We use, among others:

• Google Analytics – to analyze how visitors use the site.
• Google Ads – for advertising and conversion measurement.
• Meta Pixel (Facebook/Instagram) – for advertising and campaign tracking.
• TikTok Pixel – for advertising and campaign tracking.

When you visit seasonmerch.com for the first time, you can choose which cookies you
consent to via our cookie banner. You can change your choice at any time. Necessary
cookies are required for the site to function and cannot be opted out of.

More information can be found in our separate cookie policy.


When we share your data

We never sell your personal data. We only share it with trusted parties who
need the data for us to be able to deliver the Services, or when we are legally
obligated to do so. The following categories of recipients may process your data:

• E-commerce platform – Shopify, which provides the technical
infrastructure for seasonmerch.com.

• Payment partners – Klarna, Stripe, and Swish handle payment transactions
according to their own privacy policies.

• Logistics and shipping partners – PostNord, DSV, UPS, DHL, BestTransport,
FedEx, and ELS Logistics AB (returns handling), who need name, address
and contact information to deliver your order or receive returns.

• Advertising platforms – Google, Meta, and TikTok for marketing and
ad measurement, provided you have consented to this.

• IT and operating providers – who provide technical services such as
cloud storage and security.

• Authorities – if we are legally obliged to disclose data (e.g.,
the Swedish Tax Agency, police, or court).

• In connection with business transactions – for example, if Season Merch is
acquired by or sold to another company.

All external parties who process data on our behalf are bound by
data processing agreements and may only process the data according to our
instructions.


Transfer of data outside the EU/EEA

We strive to store and process your data within the EU/EEA. As we
use services from Shopify, Google, Meta, and TikTok, among others, your
data may in some cases be transferred to or processed in countries outside the EU/EEA,
for example, the USA.

When a transfer occurs to a third country that does not have an adequacy decision,
we ensure that the transfer is protected by appropriate safeguards, such as the EU
Commission's standard contractual clauses (SCC) or another statutory instrument.

How long we store the data

We only store your personal data for as long as necessary for the purposes above, or
for as long as required by law. As a guideline, the following applies:

• Order data and accounting records: 7 years according to the Accounting Act.

• Customer data linked to an active account: as long as the account is active. Inactive
accounts may be deleted after 3 years of inactivity.

• Marketing mailings: until you unsubscribe.

• Support cases: up to 2 years after the case is closed.

• Cookies and analytics data: according to the settings of each tool, normally up
to 24 months.

When the storage period has expired, the data is deleted or anonymized.

Your rights

According to GDPR, you have the following rights regarding your personal data:

• Right to information and access – you can request an extract from the register of
what data we hold about you.

• Right to rectification – you can request that inaccurate or incomplete data
be corrected.

• Right to erasure ("right to be forgotten") – you can request that we delete your
data, if there is no legal basis for us to retain it.

• Right to restriction – you can request that we temporarily restrict the processing
of your data.

• Right to object – you can object to processing that is based on
legitimate interest, including direct marketing.

• Right to data portability – you can request to receive data you have provided to
us in a structured, machine-readable format.

• Right to withdraw consent – if the processing is based on your
consent, you can withdraw it at any time. The withdrawal does not affect
the lawfulness of processing carried out before the consent was withdrawn.

To exercise any of your rights, contact us at privacy@seasonmerch.com. We will respond to your request within one month. To
protect you, we may need to verify your identity before disclosing information.


Complaints to the supervisory authority

If you believe that we are handling your personal data in violation of applicable law,
you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY), which is
the supervisory authority in Sweden:

Swedish Authority for Privacy Protection (IMY) Website: https://www.imy.se Email:
imy@imy.se


Children's privacy

Seasonmerch.com is not directed at children under 18, and we do not knowingly collect
personal data from minors. If you, as a guardian, discover that your child
has provided personal data to us, please contact privacy@seasonmerch.com so we can delete
the data.

Security

We take technical and organizational measures to protect your personal data
against unauthorized access, loss, or alteration. Among other things, SSL encryption,
access controls, and secure providers are used. Despite this, no internet transfer can be
guaranteed to be completely secure, and we recommend that you never send
sensitive data via insecure channels.

Links to other websites

Seasonmerch.com may contain links to external websites and platforms operated
by third parties. We are not responsible for how these websites process your
personal data. We recommend that you read the privacy policy of each respective website
before providing data there.

Changes to this policy

We may update this privacy policy from time to time, for example, due to changed
routines or legal requirements. The updated version is always published on
seasonmerch.com with a new "Last updated" date. In case of significant changes,
we will also inform you via email or other suitable channel.

Contact
For questions about this privacy policy, our procedures regarding personal data, or to
exercise your rights, you can reach us at: privacy@seasonmerch.com