This privacy policy describes how Rebel Against Ordinary Design (reg. no. 559577-7250, "RAOD", "we", "us") collects, uses, and protects your personal data when you shop at or visit our webshop www.raod.se.
1. Data Controller
Rebel Against Ordinary Design (reg. no. 559577-7250) is the data controller responsible for the processing of your personal data in connection with purchases and visits to www.raod.se.
Contact: info@raod.se
Postal address: Simrishamnsvägen 18, 273 36 Tomelilla, Sweden
2. What Personal Data We Collect
We collect the following categories of data about you:
- Contact and delivery details: name, address, e-mail address, phone number, delivery country.
- Order details: which products you have ordered, order value, order history.
- Payment details: handled primarily by our payment service provider (Stripe). We do not normally store full card details ourselves.
- Technical information: IP address, device type, browser, and how you use our website, via cookies and similar technologies (see Section 7).
- Communications: information you provide when contacting us, for example regarding complaints or the right of withdrawal.
- Marketing information: if you sign up for our newsletter.
3. Why We Process Your Data and the Legal Basis
| Purpose | Legal basis |
|---|---|
| Processing your order, payment, and delivery | Performance of a contract |
| Handling the right of withdrawal, complaints, and warranty claims | Performance of a contract, and legal obligation (consumer protection legislation) |
| Bookkeeping and accounting | Legal obligation (Swedish Bookkeeping Act) |
| Sending order confirmations and important customer information | Performance of a contract |
| Sending newsletters and marketing | Consent (you may opt out at any time) |
| Improving and analysing the website (cookies and statistics) | Consent, or alternatively legitimate interest for necessary functions |
| Preventing fraud and misuse | Legitimate interest |
4. Who We Share Your Data With
We share your data only to the extent necessary to operate the business, including with:
- Payment service providers to process your payment: Stripe.
- Shipping companies and carriers for delivery of your order: PostNord and DHL.
- IT and platform providers who operate our webshop and store data (e.g. e-commerce platform, hosting): Hostinger.
- Authorities, if we are required by law to disclose information.
We print and dispatch every order ourselves, so no outside printing partner receives your details. We do not send newsletters at present, so no e-mail marketing tool receives them either.
We never sell your personal data to third parties.
5. How Long We Retain Your Data
- Order records and accounting documentation: retained for at least 7 years under the Swedish Bookkeeping Act.
- Customer data related to warranties and complaints: retained for as long as the right to complain applies (up to 3 years in Sweden, see the Terms and Conditions), plus a reasonable period thereafter.
- Marketing data (e.g. newsletter): retained until you unsubscribe or have been inactive for an extended period.
- Cookies and analytics data: retained according to the periods stated in our cookie policy.
We delete or anonymise data once it is no longer needed for the purposes above.
6. Your Rights
You have the right to:
- Access (request a copy of) the data we hold about you.
- Have inaccurate data corrected.
- Request deletion of your data ("the right to be forgotten"), to the extent we are not required to retain it (e.g. under the Bookkeeping Act).
- Request that processing be restricted.
- Object to processing based on legitimate interest, including direct marketing.
- Receive your data in a structured format and transfer it to another service (data portability), where the processing is based on contract or consent.
- Withdraw any consent given at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Contact us at info@raod.se to exercise any of these rights.
Complaints to a Supervisory Authority
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with:
- Sweden and the rest of the EU/EEA: your local data protection authority. In Sweden, the Swedish Authority for Privacy Protection (IMY), www.imy.se.
- United Kingdom: the Information Commissioner's Office (ICO), www.ico.org.uk.
7. Cookies
Our website uses cookies and similar technologies to make the website function, to remember your shopping cart, for statistics and analytics, and (with your consent) for marketing. You can manage your cookie preferences through your browser settings. See our cookie policy.
8. Children
Our webshop is not directed at children under the age of 18, and we do not knowingly collect personal data from children.
9. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.
10. Changes to This Policy
We may update this privacy policy from time to time. The latest version is always published on our website, together with the date of the last update.
Last updated: 08-09-2026
11. Contact
Do you have questions about how we process your personal data? Contact us at info@raod.se.