Personal data policy for HISTORLY AB

1. Introduction

HISTORLY AB, corporate no. 559215-5575 ("HISTORLY"), protects your personal privacy and ensures that your personal data is handled in accordance with current legislation, including the General Data Protection Regulation (GDPR). This policy explains what data we collect, why we do it and what rights you have.

We only collect the personal data needed to run our business, deliver our products and give you the best possible customer experience.

---

2. Personal data controller

HISTORLY AB (org. no. 559215-5575) is the personal data controller for the processing of your personal data in accordance with this policy.

---

3. What personal data we process

3.1. When you shop or complete an order

Purpose: Management of purchases, payments, deliveries and complaints.

Personal data:

• Name

• Address

• Telephone number

• Email address

• Order information

• Payment information (handled by payment provider)

Legal basis: Fulfillment of agreements (Art. 6.1.b GDPR).

Storage time: Information linked to accounting documents is saved for 7 years according to the Accounting Act. Other data is saved as long as it is necessary to handle warranty, complaints and service matters - or as long as it is necessary and permitted by law.

---

3.2. When you contact our customer service

Purpose: Customer service, support and handling of warranty/complaint matters.

Personal data:

• Contact details

• Order number

• Previous communication

Legal basis: Fulfillment of contract or legitimate interest in providing good service.

**Storage time: Data is saved as long as it is necessary to handle warranty, complaints and service cases, or as long as a case is active.

---

3.3. Marketing via email

Purpose: Sending offers, product news and relevant information.

Personal data:

• Email address

Legal basis:

• Legitimate interest in marketing to existing customers of similar products, or

• Consent when signing up for newsletters by non-customers.

Storage time: As long as the recipient agrees or until deregistration takes place. only as long as necessary for the purpose and permitted by law.

---

4. How long we save your personal data

We save your data as long as it is permitted by law and necessary for the purposes we describe, with the objective of preserving data as long as possible within legal frameworks.

• Accounting documents are saved in 7 years according to law.

• Customer service and order-related data is saved as long as it is necessary for the purpose and permitted by law.

• Marketing-related data is saved until you withdraw consent or object to treatment.

---

5. Transfer to third parties

We only share personal data with actors who are needed for our operations, for example:

• Payment service providers

• Logistics and shipping company

• Technical operation providers (eg Shopify)

All personal data assistants have contracts according to GDPR and may only process data according to our instructions.

In case of any transfers outside the EU/EEA, we ensure the right safeguards (e.g. standard contract clauses).

---

6. Cookies

Historly.se uses cookies according to our cookie policy, which you can find here https://historly.se/villkor.

---

7. Your rights

You have the right to:

• Get access to your personal data

• Get incorrect information corrected

• Have your data deleted (if no legal basis requires continued storage)

• Limit treatment

• Object to processing based on legitimate interest

• Request data portability

• Withdraw consent when processing is based on consent

We will process your request within 30 days.

---

8. Contact us

Email: hello@historly.com

Feel free to use our contact form on the website if you want to exercise your rights or have questions about our data processing.

---

9. Supervisory authority

If you believe that we are handling your personal data incorrectly, you can contact the Swedish Data Protection Authority:

Email: datainspektionen@datainspektionen.se
Telephone: 08‑657 6100