Sundby Model Works · Privacy

Privacy Notice

Data controller: Sundby naturhus, sole trader Björn Ivar Wallentinus
Organisation number: 770313-0331
Sundby 80, 186 70 Brottby, Sweden
Phone: 073-042 90 13
Email: bjorn@sundbynaturhus.se

Information we process

Depending on how you use the site, we may process your name and email address; the EU billing country you select before checkout; billing country and address information returned by Stripe; order, product, amount, currency, VAT and refund information; Stripe payment identifiers and limited payment-method information such as card-issuer country; IP address and available country signals used for tax and delivery review; records used to monitor the EU cross-border VAT threshold; records of immediate-delivery consent; withdrawal notices including the submitted statement, order reference, receipt time and acknowledgement status; transactional-email records; messages sent to support or feedback; and technical logs needed to operate and secure the site.

Why we process it

We use personal data to enter into and fulfil purchase contracts, deliver private downloads, send purchase emails, record immediate-delivery consent, receive withdrawal notices and send their acknowledgements, calculate and document VAT, determine whether the current EU cross-border VAT threshold profile can still be used, keep records required by law, prevent abuse, investigate failed deliveries, resolve disputes, answer support requests and model suggestions, and maintain the security and reliability of the website.

Processing needed to take and fulfil an order, deliver the files or answer a purchase-related support request is based on performance of the contract or steps requested before entering it. VAT, accounting and legally required records are processed to comply with legal obligations. Handling unsolicited model suggestions, preventing abuse and maintaining website security relies on our legitimate interests in answering correspondence and protecting the service; you may object to that processing. Country mismatches are review signals, not a finding of fraud: contact us to request human review.

Service providers

We use service providers where necessary to run the shop, including Stripe for payment processing and Brevo through our configured mail-delivery setup for transactional email. The site runs on WordPress hosting infrastructure and currently also uses Jetpack functionality. These providers process information according to their own terms and data-processing arrangements.

Some providers may process data outside Sweden or the EU/EEA. Where required, the relevant transfer safeguards apply.

How long information is kept

Accounting information is normally retained through the end of the seventh year after the calendar year in which the financial year ended. Purchase and tax evidence needed to support those records is retained with them. A request to erase data does not override a legal duty to retain that information.

Support, withdrawal and dispute records are retained while the matter is active and, where necessary, for the applicable period in which a claim may be made or defended. Unrelated model suggestions are assessed according to whether the suggestion or correspondence is still being considered; they are not used to enrol you in marketing. Technical logs are retained according to the operational incident, security and service-provider requirements they support. Contact us for the retention criteria applying to a specific record. We review whether personal data still needs to be kept; these statements are not a claim that automatic deletion has been configured in every service.

Cookies and analytics

We do not currently use visitor analytics on this store. WordPress login and security functions and the payment flow may still use cookies or related technologies that are necessary for those services to work. Stripe processes payment-related information in its own hosted checkout. Optional analytics or marketing functionality will be reviewed separately and, where required, will not be enabled before the necessary consent mechanism is in place.

Your rights

Depending on the circumstances, you may have rights to access your personal data, correct inaccurate data, request deletion, restrict or object to certain processing, and receive certain data in a portable format. Some information cannot be deleted immediately where we must keep it to comply with bookkeeping, tax or other legal obligations.

To exercise your rights, email bjorn@sundbynaturhus.se. You can also lodge a complaint with Integritetsskyddsmyndigheten (IMY).

Payment details

Full card details are handled by Stripe and are not stored in the Sundby Model Works WordPress database.

Feedback and model ideas

Messages sent as feedback or model suggestions are used to review the suggestion and, where contact details are supplied, to reply. Please do not send passwords, payment-card details or sensitive personal information.

Changes to this notice

We may update this notice when the shop, service providers or legal requirements change. The current version is published on this page.

Last updated: 7 October 2026.