PRIVACY POLICY (GDPR)

Core Concepts AB values your personal privacy. This Privacy Policy explains how we collect, store, and process your personal data in compliance with the EU General Data Protection Regulation (GDPR).

Data Controller

Core Concepts AB (org.nr 559572-2736) is the data controller responsible for processing your personal data on this website.

What Data We Collect & Why?

• Orders & Shipping: We collect your name, shipping address, email address, phone number, and purchase history to process, deliver, and bill your order.
• Customer Support: If you reach out to us, we retain the correspondence to assist you effectively.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined above, or as required by law (for example, the Swedish Bookkeeping Act (Bokföringslagen), which mandates retaining transaction records for 7 years).

Third-Party Data Sharing

We never sell your personal information. We only share necessary data with trusted service providers essential for operating the webshop:

• Payment Processors: To complete secure transactions at checkout.
• Shipping Providers (PostNord): To deliver your order to your address.
• Hosting Provider (STRATO): For web hosting and infrastructure support.

Your Rights

You have the right to request:

• Access to a summary of the personal data we hold about you.
• Correction of inaccurate or incomplete information.
• Erasure of your personal data (excluding data we are legally obligated to retain).

To exercise your rights, please contact us at corporate@coreconcepts.se.