Privacy Policy
Last updated: August 2026
1. Data Controller
Brandboard Global AB ("we", "us", "Dexter Fine Art") Reg. no.: 559424-1019 Hamngatan 24, c/o CEHÅ Färgkopiering SE-231 42 Trelleborg, Sweden Email: contact@dexterfineart.com Phone: +46 (0)733 28 84 86
2. What personal data do we collect?
2.1 When placing an order
- Name and contact details (email, phone, address)
- Delivery address
- Payment information (handled by our payment provider Stripe – we never store card details)
- Organization number and company name (for invoice payments)
- Order history
2.2 When visiting our website
- IP address
- Browser type and device information
- Page views and interactions
- Cookies (see section 7)
2.3 When contacting us
- Name and email address
- Phone number (optional)
- Inquiry category
- Messages and communication history
3. Why do we process your personal data?
| Purpose | Legal basis |
|---|---|
| Fulfill your order and delivery | Performance of contract |
| Process payments and invoicing | Performance of contract |
| Send order confirmation and delivery updates | Performance of contract |
| Respond to contact inquiries and appointment requests | Legitimate interest |
| Accounting and tax records | Legal obligation |
| Handle complaints and right of withdrawal | Legal obligation |
| Improve our website and services | Legitimate interest |
| Send newsletters and offers (with your consent) | Consent |
4. How long do we keep your data?
- Order data: 7 years (accounting obligation under Swedish law)
- Customer account: As long as the account is active, plus 12 months after closure
- Communication: 24 months after last contact
- Newsletter: Until you unsubscribe
- Website data: 26 months (anonymized thereafter)
5. Who do we share data with?
We share your personal data with:
- Stripe – payment processing (USA, EU-approved via Standard Contractual Clauses)
- Fortnox – invoicing and accounting (Sweden)
- Carriers – delivery of orders (name and address)
- Resend – delivery of transactional emails and contact inquiries (USA, using Standard Contractual Clauses for transfers)
- Google Workspace – email communication
- Vercel – web hosting (USA, EU-approved via Standard Contractual Clauses)
We never sell your personal data to third parties.
6. Your rights
Under the GDPR, you have the right to:
- Access the personal data we process about you
- Rectify inaccurate data
- Request erasure of your data ("right to be forgotten")
- Request restriction of processing
- Object to processing based on legitimate interest
- Data portability – receive your data in a machine-readable format
- Withdraw consent at any time (for consent-based processing)
Contact us at contact@dexterfineart.com to exercise your rights. We respond to requests within 30 days.
7. Cookies
We use cookies to ensure our website functions properly and to improve your experience.
Necessary cookies
Required for basic functionality such as shopping cart and login. No consent required.
Analytics and marketing cookies
Used to understand how visitors use the website and to measure campaigns. Google Tag Manager and the tags in our container load only after you consent.
You can change your choice at any time through Cookie settings in the footer or delete website data in your browser.
8. Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encrypted data transmission (TLS/SSL)
- Secure payment processing via Stripe (PCI DSS certified)
- Restricted access to personal data within the organization
9. Changes
We may update this policy. Material changes will be communicated via email or on the website. The current version is always available at dexterfineart.com/privacy-policy.
10. Complaints
If you believe we are processing your personal data incorrectly, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY):
Integritetsskyddsmyndigheten Box 8114 104 20 Stockholm, Sweden imy.se