Last updated: 2026-10-22.
Maddzan AB respects your privacy. This policy explains what personal data we collect, why, and what rights you have.
Data Controller
Maddzan AB
Reg.no: 559157-6938
Email: maddzan@maddzan-art.com
What we collect
- When you order: name, address, email, payment details (handled directly by Stripe).
- When you withdraw from a purchase: name, email and the details of the purchase you give in the withdrawal function.
- When you contact us: your email and the contents of your message.
- Visit statistics: via Cloudflare Web Analytics — which page is viewed, where you came from (referrer), browser, operating system, device type, country and page load time. No cookies, nothing stored in your browser and no tracking across websites. Your IP address is only used to work out the country and is not stored.
Why we process the data
- To fulfil the purchase agreement (Art. 6.1.b GDPR).
- To meet our obligations under Swedish accounting law, and under distance-selling law to send a receipt when you withdraw from a purchase (legal obligation, Art. 6.1.c GDPR).
- For security and service improvement, including visit statistics (legitimate interest, Art. 6.1.f GDPR).
How long we keep the data
- Order and invoice data: 7 years (Swedish accounting law).
- Contact messages: up to 12 months.
- Withdrawal notices: up to 3 years, as long as the purchase can be complained about.
- Visit statistics: kept only in aggregated form at Cloudflare, with nothing that identifies you.
Who we share with
We use the following data processors:
- Stripe — payments (US + EU, EU-US Data Privacy Framework).
- Cloudflare — hosting, checkout function and visit statistics (US, EU-US Data Privacy Framework).
- Postmark (ActiveCampaign) — sends the receipt when you withdraw from a purchase (US, EU-US Data Privacy Framework).
- PostNord — delivery.
We never sell your personal data.
Transfers outside the EU
Stripe, Cloudflare and Postmark are US-based. Transfers are protected by the EU-US Data Privacy Framework and Standard Contractual Clauses (SCC).
Your rights
- Right of access (data export).
- Right to rectification.
- Right to erasure — except for data we are legally required to retain.
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing.
- Right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Cookies
We use no cookies at all. Cloudflare Web Analytics works without cookies and stores nothing in your browser. Three technical entries in your browser store your cart (maddzan_cart_v1), what you sent to checkout (maddzan_checkout_v2, so the right items leave the cart after payment) and that you closed or used the language-switch hint (maddzan_langhint_v1, so it is not shown again) locally — they never leave your device.
Security
All traffic is encrypted via HTTPS/TLS. Card details are handled exclusively by Stripe (PCI DSS Level 1) and never touch our systems.
Contact
Questions about your data? Email maddzan@maddzan-art.com.
Changes
We may update this policy. The latest version is always on this page.