Integritetspolicy
MARIEDAL DESIGN AB is the controller for the personal data described here. We process it under the GDPR and Dataskyddslagen (2018:218). This page says what we hold, why we hold it, and how long for.
The short version
We ask for what is needed to send you a parcel and answer your questions. We do not ask about your health, we have nowhere to record it, and Metal Match — which is the one place on this site where you might expect to be asked — deliberately asks only about jewellery you have worn.
What we collect and why
When you place an order
Name, email address, phone number, delivery address, country, the pieces you ordered, and anything you wrote in the notes field. We need these to form the contract with you, take payment and deliver the parcel. The legal basis is performance of a contract, and for our accounting records it is a legal obligation.
When you write to us
Name, email address, optionally a phone number, your country, the subject you picked and your message. Legal basis: our legitimate interest in answering people who write to us, and performance of the contract where the message concerns an order.
When you ask about a metal
Name, email address, the SKU you asked about, which aspects of the metal you want to know about, and your question. That form asks about the metal, and it has no field for allergies, diagnoses, medication or anything else about your body. Please do not send us that information — we do not want it and we are not qualified to act on it.
When you use Metal Match
Nothing leaves your browser. The three answers live in the page while you have it open and are gone when you close the tab. They are not sent to us, not stored against you, not used to build a profile and not used for marketing. There is no record for us to keep, so the retention period below does not need to cover one.
When you agree to hear from us
Your email address and the fact that you consented. That box is always separate from the box you tick to let us process your order, and refusing it changes nothing about the order. Legal basis: consent, which you can withdraw at any time using the link in any message we send or by emailing us.
What we do not collect
- Any information about allergies, diagnoses, medication, treatment or any other aspect of your health. There is no field for it in our systems.
- Card numbers. We never see or store them.
- National identity numbers.
- Anything from you if you are under thirteen. We do not knowingly collect it, and if we learn we have, we delete it.
How long we keep things
- Order records
- Seven years, because Swedish bookkeeping law requires it
- Correspondence and metal questions
- Twenty-four months from the last message
- Marketing consent
- Until you withdraw it, then a record of the withdrawal itself
- Metal Match answers
- Never stored — they exist only in your browser tab
- Basket contents
- In your own browser’s local storage until you clear it
Who else sees it
Only processors who need it to do a job for us: our hosting provider, our database provider, the service that sends transactional email, the carrier that delivers your parcel, and the payment provider that takes the payment. Each is bound by a data processing agreement. We do not sell personal data, and we do not share it for anyone else’s marketing.
Some of those providers operate outside the EU and EEA. Where they do, transfers rely on the European Commission’s standard contractual clauses or an adequacy decision.
Your rights
- Ask what we hold about you, and get a copy.
- Have inaccurate details corrected.
- Have data erased where we no longer need it.
- Ask us to restrict processing while something is being sorted out.
- Receive the data you gave us in a portable format.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time, without affecting what was done before.
Email support@mariedaldesign.xyz and we will respond within one month.
Complaining
If you think we have handled your data badly, tell us first — it is usually the quickest fix. You also have the right to complain to the Swedish supervisory authority:
- Integritetsskyddsmyndigheten (IMY)
- imy.se
- Post
- Box 8114, 104 20 Stockholm, Sverige
Security
The site is served over HTTPS throughout, including every form. Access to order data is limited to the people who need it to fulfil orders and answer claims. Payment card details are handled by the payment provider and never reach our systems.
Cookies
Covered separately on the cookies page, including how to refuse the non-essential ones — which is exactly as easy as accepting them.
Age
This shop is for adults. Under thirteen, do not use it. Between thirteen and seventeen, a parent or guardian should place any order. We do not sell jewellery designed for children under fourteen at all, and the metals page explains why.
Controller
- Controller
- MARIEDAL DESIGN AB
- Address
- Nitgatan 6, 441 38 Alingsås, Sverige
- Data enquiries
- support@mariedaldesign.xyz
Last reviewed 16 August 2026.