Privacy Policy
Last updated: February 2026
1. Data Controller
Brandboard Global AB ("we", "us", "Dexter Fine Art") Reg. no.: 559424-1019 Hamngatan 24, c/o CEHÅ Färgkopiering SE-231 42 Trelleborg, Sweden Email: contact@dexterfineart.com Phone: +46 73 855 19 53
2. What personal data do we collect?
2.1 When placing an order
- Name and contact details (email, phone, address)
- Delivery address
- Payment information (handled by our payment provider Stripe – we never store card details)
- Organization number and company name (for invoice payments)
- Order history
2.2 When visiting our website
- IP address
- Browser type and device information
- Page views and interactions
- Cookies (see section 7)
2.3 When contacting us
- Name and email address
- Messages and communication history
3. Why do we process your personal data?
| Purpose | Legal basis |
|---|---|
| Fulfill your order and delivery | Performance of contract |
| Process payments and invoicing | Performance of contract |
| Send order confirmation and delivery updates | Performance of contract |
| Accounting and tax records | Legal obligation |
| Handle complaints and right of withdrawal | Legal obligation |
| Improve our website and services | Legitimate interest |
| Send newsletters and offers (with your consent) | Consent |
4. How long do we keep your data?
- Order data: 7 years (accounting obligation under Swedish law)
- Customer account: As long as the account is active, plus 12 months after closure
- Communication: 24 months after last contact
- Newsletter: Until you unsubscribe
- Website data: 26 months (anonymized thereafter)
5. Who do we share data with?
We share your personal data with:
- Stripe – payment processing (USA, EU-approved via Standard Contractual Clauses)
- Fortnox – invoicing and accounting (Sweden)
- Carriers – delivery of orders (name and address)
- Google Workspace – email communication
- Vercel – web hosting (USA, EU-approved via Standard Contractual Clauses)
We never sell your personal data to third parties.
6. Your rights
Under the GDPR, you have the right to:
- Access the personal data we process about you
- Rectify inaccurate data
- Request erasure of your data ("right to be forgotten")
- Request restriction of processing
- Object to processing based on legitimate interest
- Data portability – receive your data in a machine-readable format
- Withdraw consent at any time (for consent-based processing)
Contact us at contact@dexterfineart.com to exercise your rights. We respond to requests within 30 days.
7. Cookies
We use cookies to ensure our website functions properly and to improve your experience.
Necessary cookies
Required for basic functionality such as shopping cart and login. No consent required.
Analytics cookies
Used to understand how visitors use the website. Requires your consent.
You can manage your cookie settings via the cookie banner on our website or in your browser settings.
8. Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encrypted data transmission (TLS/SSL)
- Secure payment processing via Stripe (PCI DSS certified)
- Restricted access to personal data within the organization
9. Changes
We may update this policy. Material changes will be communicated via email or on the website. The current version is always available at dexterfineart.com/privacy-policy.
10. Complaints
If you believe we are processing your personal data incorrectly, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY):
Integritetsskyddsmyndigheten Box 8114 104 20 Stockholm, Sweden imy.se