Classicbootz

PRIVACY POLICY

Last updated: October 15, 2026

This Privacy Policy explains how Classicbootz collects, uses and shares personal data when you visit classicbootz.com, purchase products, create an account, submit an offer to sell us an item or contact us.

WHO IS RESPONSIBLE FOR YOUR DATA?

The business responsible for your personal data is:

Trading name: Classicbootz
Email: classicbootz@gmail.com

In this policy, “we”, “us” and “our” refer to this business.

PERSONAL DATA WE COLLECT

Depending on how you interact with us, we may collect:

• Contact details, including your name, email address, telephone number and delivery or billing address.
• Order details, including products, sizes, amounts, currency, payment status, delivery information, returns and refunds.
• Account details, including your email address, saved addresses and authentication information.
• Messages and information you provide when contacting customer support.
• Information submitted through our Sell form, including item descriptions, condition, photographs, asking price and any optional Instagram username or message.
• Technical information, including your IP address, browser, device information and security logs.
• Shopping preferences, such as your selected currency and items in your cart.

Please do not send payment card details, identity documents or other sensitive information through ordinary email or website messages unless specifically requested through an appropriate secure process.

HOW WE RECEIVE YOUR DATA

We receive personal data directly from you when you place an order, create an account, complete a form or contact us.

We also receive relevant information from payment providers and delivery companies, such as payment confirmation and shipment status. Some technical information is collected automatically when you use the website.

WHY WE USE YOUR DATA

Orders and delivery
We use your information to process purchases, arrange delivery, provide order updates and handle returns. The legal basis is performance of our contract with you.

Customer accounts
If you choose to create an account, we use your information to provide account access, saved details and order history. The legal basis is performance of the account service you request. Creating an account is optional.

Offers to sell products to us
We use information submitted through our Sell form to assess your offer and communicate with you. The legal basis is taking steps at your request before entering into a contract.

Customer support
We use your information to answer questions and resolve problems. Depending on the enquiry, the legal basis is performance of a contract or our legitimate interest in providing effective customer service.

Legal obligations
We retain and use information where required for accounting, tax, consumer protection and other legal obligations. The legal basis is compliance with a legal obligation.

Security and fraud prevention
We use relevant technical and transaction information to protect accounts, prevent misuse, investigate suspected fraud and establish or defend legal claims. The legal basis is our legitimate interest in protecting our business and customers.

Marketing
If we offer email newsletters, we will ask for your consent before sending them. You can unsubscribe at any time using the link in the message or by contacting us. Withdrawing marketing consent does not stop essential order or account emails.

PAYMENTS

Payments are processed by Stripe. Payment information is provided through the payment provider’s secure checkout. Our store does not store your full card number or card security code.

We receive information needed to manage your order, such as payment status, transaction references and limited payment-method details.

Stripe may also process personal data for its own legal, security and fraud-prevention purposes under its privacy policy:

https://stripe.com/privacy

WHO WE SHARE DATA WITH

We share relevant personal data only where needed for the purposes described in this policy. Recipients may include:

• Website, hosting, database and authentication providers supporting our Lovable-based store.
• Stripe and any payment-method providers used for your transaction.
• PostNord and, for specially arranged deliveries, DHL Express.
• Email-delivery providers used for order and account messages.
• Google, when you contact our Gmail inbox or we handle customer correspondence there.
• Accounting providers and professional advisers where needed.
• Public authorities where disclosure is required by law.

Delivery companies receive the information needed to transport your order, such as your name, address, contact details and relevant customs information.

Some providers process data on our behalf, while others act as independent data controllers for their own activities.

COOKIES AND SIMILAR TECHNOLOGIES

The website may use cookies and similar browser storage to support functions such as account sessions, cart contents, security and requested preferences.

Non-essential technologies used for analytics, advertising or third-party content require consent where applicable. Refusing these technologies must not prevent you from making a purchase.

Where optional technologies are enabled, you must be able to change or withdraw your consent through the website’s cookie controls.

The website’s cookie information should identify the technologies actually used, their purposes, providers and storage periods.

CURRENCY AND APPROXIMATE LOCATION

Your IP address or similar technical information may be used to estimate your country and suggest a currency. This does not require precise GPS location.

You can change the displayed currency yourself. Your choice may be remembered in your browser.

INTERNATIONAL TRANSFERS

Some providers may process personal data outside the EU or EEA.

Where applicable, these transfers must be supported by a recognised legal mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with additional safeguards where necessary.

You can contact us for information about the safeguards applicable to your data and how to obtain a copy.

HOW LONG WE KEEP YOUR DATA

We keep personal data only for as long as needed for the purpose for which it was collected.

• Order and accounting records are retained for the period required by applicable accounting and tax legislation.
• Account information is retained while the account remains active, unless a longer period is required for legal obligations or claims.
• Customer correspondence and Sell submissions are retained for as long as needed to handle the enquiry, offer or resulting transaction.
• Security logs are retained for a period proportionate to their security purpose.
• Marketing details are used until you unsubscribe or withdraw consent. We may retain a minimal suppression record to respect your choice.

When information is no longer needed, it is deleted or anonymised. Deleting an account does not require us to delete records that we must retain by law.

YOUR RIGHTS

Subject to the conditions in applicable data protection law, you may request:

• Access to your personal data and information about its use.
• Correction of inaccurate or incomplete data.
• Deletion of your data.
• Restriction of processing.
• A portable copy of certain data.
• Withdrawal of consent where processing relies on consent.

You may also object to processing based on legitimate interests, including profiling based on those interests. You have an unconditional right to object to the use of your personal data for direct marketing.

To exercise your rights, email classicbootz@gmail.com.

We may request proportionate information to verify your identity. We normally respond within one month. Where legally permitted, this period may be extended, and we will explain the reason.

COMPLAINTS

If you have concerns about how we handle your personal data, please contact us.

You may also lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY):

https://www.imy.se

If you live elsewhere in the EEA, you may contact your local data protection authority.

SECURITY

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure. No system can guarantee absolute security.

Keep your account credentials confidential and contact us if you suspect unauthorised use of your account.

THIRD-PARTY LINKS AND SOCIAL CONTENT

Our website may link to Instagram or other external services. Their handling of personal data is governed by their own privacy policies.

Where embedded content involves optional tracking, it should only load after consent where required.

CHANGES TO THIS POLICY

We may update this policy to reflect changes to our services, providers or legal obligations. The latest version will be published here with an updated date. Where required, we will provide additional notice of material changes.

CONTACT

For privacy questions or requests concerning your personal data:

classicbootz@gmail.com