Privacy Policy

Personal information you provide:

• Name and contact information (email, phone number)
• Delivery address for product orders
• Payment status for your order (card and payment details are handled by Stripe and, if you choose it, Klarna)
• Billing details (name, address, company registration number for businesses) when you accept a quote
• Correspondence and communication with us
• Preferences and requests regarding products and services

Information collected automatically:

• IP address and browser type
• Device type and operating system
• Page visits and navigation patterns
• Date and time of your visit
• Cookies and similar tracking technologies

We use the data for the following purposes, with the stated legal basis:

• Answer enquiries and prepare quotes – Steps taken at your request before entering a contract (Art. 6(1)(b)).
• Process, deliver and install orders, take payment – Performance of a contract (Art. 6(1)(b)).
• Customer service, complaints and warranty claims – Performance of a contract and legal obligation under consumer law (Art. 6(1)(b) and (c)).
• Bookkeeping and invoicing – Legal obligation under the Swedish Accounting Act (Art. 6(1)(c)).
• Security, abuse prevention and troubleshooting of the website – Legitimate interest in a secure and working service (Art. 6(1)(f)).
• Following up on quotes you have received – Legitimate interest; you may object at any time.
• Visitor statistics and functional cookies – Consent (Art. 6(1)(a)) via cookie settings.
• Marketing by email – Consent (Art. 6(1)(a)), which you can withdraw at any time.

We implement a variety of security measures to maintain the safety of your personal information:

• SSL encryption for all data transmission
• Secure servers with restricted access
• Regular security audits
• Encrypted databases
• Strict access control for personal data

Card and payment details are handled directly by Stripe (and Klarna if you choose Klarna at checkout) and are never stored on our servers.

We use cookies and similar technologies in four categories. You decide what to allow via the cookie banner or the "Cookie settings" link in the footer. Your choice is stored and logged as proof under GDPR Article 7.

• Necessary: Required for login, cart, language and security. Cannot be disabled. Legal basis: legitimate interest (Swedish ECA Ch.6 §18 exemption).
• Functional: Stores preferences such as recently viewed products. Requires consent.
• Analytics: First-party statistics about site usage. All data is processed by us – no third party, no transfer outside the EU. Requires consent.
• Marketing: Not used today. Should we ever set marketing cookies, your explicit consent is required first.

You can withdraw or change your consent at any time via "Cookie settings" at the bottom of the page. Withdrawing is as easy as giving consent.

We only share personal data with service providers necessary to run the business. All are data processors with signed DPAs, processing data within the EU/EEA or under EU Standard Contractual Clauses.

• Supabase (EU): Database and authentication.
• Resend (EU): Delivery of quotes, invoices and confirmations.
• Stripe (EU/US, SCC): Secure card payment processing.
• Klarna: If you choose Klarna at checkout, Klarna becomes an independent controller for the payment under its own privacy policy.
• Cloudflare: DDoS protection and site delivery.
• Shipping providers (e.g. PostNord, DHL) – only when you order products to be delivered.

We never sell your personal data and we use no ad networks, social-media pixels or third-party analytics (e.g. Google Analytics, Meta Pixel).

Under GDPR you have the following rights regarding your personal data:

• Right to access: You can request a copy of your personal data
• Right to rectification: You can request correction of incorrect information
• Right to erasure: You can request that we delete your data
• Right to restriction: You can request restricted processing of your data
• Right to data portability: You can receive your data in structured format
• Right to object: You can object to processing of your data

To exercise any of these rights, contact us at info@glasnova.se

We store your personal data only as long as necessary to:

• Fulfill the purposes described in this policy
• Comply with legal, accounting or reporting requirements
• Resolve disputes and enforce our agreements

Typically, order information is stored for 7 years according to accounting law. Marketing information is deleted when you unsubscribe or after 24 months of inactivity.

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

We recommend that you review this policy regularly for any changes.