Privacy policy

Data privacy is important to Customhoj. We want to be open and transparent about how we collect, use and protect your personal data. This privacy policy explains what personal data we process, why we process it, how long we keep it and what rights you have.

Controller

Customhoj Sweden AB (Customhoj) is the controller for the personal data you provide us and is responsible for processing in accordance with applicable data protection law.

Company registration number: 559326-0887
Email: info@customhoj.com (for privacy enquiries)
Postal address: Vagnvägen 4, 311 32 Falkenberg, Sweden

What personal data do we collect?

We process the personal data you provide and data we collect when you use our services. Typical categories include:

Contact information: name, postal address, email address, telephone number.
Order and purchase data: items ordered, order history, invoices, returns, payment reference (only the data needed to complete the purchase).
Identifiers and device data: IP address, browser and device information, cookie identifiers and other technical data used for site functionality and analytics.
Behavioural data: pages viewed, products clicked, searches and browsing behaviour used to personalise offers and improve the site.
Communications: correspondence with customer service via email, phone or social media (support tickets, complaints, warranty claims).

Why we process your personal data (purposes)

We process personal data for the purposes listed below:

Order fulfilment: to process purchases, deliveries, returns and refunds, and to communicate order status.
Payments & accounting: to process payments and keep accounting records required by law.
Customer service: to handle enquiries, complaints, warranty claims and technical support.
Personalised marketing: to show offers and recommendations relevant to you across our channels, where permitted by law or where you have given consent.
Site improvements & analytics: to analyse and improve our services, performance and user experience (often using pseudonymised or aggregated data).
Legal compliance & fraud prevention: to comply with legal obligations, prevent fraud and protect our customers and systems.

Legal bases for processing

We rely on one or more of the following legal bases depending on the processing activity:

Performance of a contract: when processing is necessary to fulfil your order or provide a service you requested.
Legal obligation: when processing is required to comply with laws (for example accounting and tax records).
Legitimate interests: for internal administration, fraud prevention, direct marketing (unless overridden by your interests), and improving our services. We balance these interests with your privacy rights.
Consent: where required (for example certain cookies or direct marketing where you have explicitly consented).

Recipients and processors

We share personal data only with parties that need the data to provide services on our behalf or where required by law. These include:

Payment service providers (to process payments)
Delivery and logistics partners (to deliver orders)
Hosting and IT providers (to operate our website and systems)
Customer support platforms and communication providers
Marketing and analytics providers (for email delivery, advertising and aggregated analytics)

All subprocessors are contractually bound to protect your information and only process it under our instructions. We do not sell or trade your personal data for third-party marketing.

Transfers outside the EEA

Some providers we use may process data outside the European Economic Area (EEA). Any international transfers are performed in accordance with applicable law. We use appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on an adequacy decision where available.

How long we keep your data

We keep personal data only as long as necessary for the purpose it was collected or to comply with legal obligations. Examples:

Order and accounting records: 7 years (Swedish accounting rules)
Customer service correspondence: typically up to 3 years after the last contact, unless needed longer for a specific case
Marketing data (email subscriptions): until you unsubscribe or withdraw consent
Analytics and aggregated/pseudonymised data: retained in anonymised form for ongoing service improvement

Your rights

You have several rights in relation to your personal data. To exercise these rights please contact us at info@customhoj.com. We will respond without undue delay and in accordance with applicable law.

Right of access: request a copy of the personal data we hold about you.
Right to rectification: ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): request deletion unless we are required to keep data (for example for accounting or a pending order).
Right to restriction: request restriction of processing in certain circumstances.
Right to data portability: where applicable, receive your data in a structured, machine-readable format.
Right to object: object to processing based on legitimate interests or direct marketing at any time.
Right to withdraw consent: where processing is based on consent you can withdraw it at any time (this does not affect prior processing).
Right to lodge a complaint: if you believe we process your data unlawfully you may complain to the supervisory authority in your country. In Sweden the authority is Integritetsskyddsmyndigheten (IMY).

Cookies and tracking

We use cookies and similar technologies to make our site work, to provide a personalised experience and to measure and improve our services. Below is a brief overview:

Cookie type	Purpose	Retention
Strictly necessary	Essential for site functions such as shopping cart and login	Session or short-lived
Performance & analytics	Collect aggregate data to improve the site	Typically up to 2 years (varies by provider)
Functional	Remember choices such as language or delivery details	Months to years
Advertising & targeting	Deliver personalised adverts and measure campaigns	Up to 2 years or as set by third parties

If you have previously made a purchase or signed up to our newsletter we may link cookie identifiers to your account in order to improve your experience and show relevant content. You can manage or block cookies via your browser settings or via our cookie banner. Blocking certain cookies may affect site functionality.

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or alteration. Measures include encrypted connections (HTTPS), access controls, pseudonymisation where appropriate and regular security reviews.

Children

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected personal data relating to a child, please contact us and we will take steps to delete the information where appropriate.

Automated decision-making and profiling

We use automated tools for analytics and to personalise marketing and product recommendations. These processes are based on behaviour and purchase history and are not used to make decisions that have legal effects on you. If any profiling would have a significant effect on you we will provide additional information and, where required by law, allow you to object or request human intervention.

Changes to this policy

We may update this privacy policy from time to time. The policy will indicate the date of the last revision. Significant changes will be communicated to our customers where appropriate (for example by email or a notice on the site).

Contact

For questions, requests to exercise your rights or complaints, contact:

Email: info@customhoj.com
Postal: Vagnvägen 4, 311 32 Falkenberg, Sweden
If you remain unsatisfied you may lodge a complaint with your national supervisory authority (in Sweden: Integritetsskyddsmyndigheten (IMY)).

Effective date: 2025-11-08