PRIVACY POLICY

PRIVACY POLICY

Our core values regarding user privacy policy and data protection.
Data is a liability, it should only be collected and processed when necessary.
► We loathe spam as much as you do!
► We will never sell, rent or otherwise distribute or make public your personal information.

RELEVANT LEGISLATION

Our business and internal computer systems are designed to comply with data protection and user privacy laws. This website and its privacy policy also follow these laws. We comply with the following national and international legislation:

UK Data Protection Act 2018 (for UK customers)
EU General Data Protection Regulation 2016/679 (GDPR)
California Consumer Privacy Act (CCPA) (for US customers)
LGPD for Brazil
PIPEDA for Canada
Australian Privacy Act 

Compliance with the above stringent laws means this site and its privacy policy are likely also compliant with data protection laws in many other countries. This site’s privacy policy applies to all users whose data is processed, regardless of their location.

ABOUT SECURITY MEASURES

This website is hosted by Loopia in a Swedish data center located in Västerås, Sweden. All data transmitted between your browser and our website is encrypted using HTTPS with SSL/TLS protocols. We use secure servers and access controls to protect your information. Additionally, we have monitoring and alert systems in place to detect and respond to any unusual activity or potential security incidents on the website.

Please note that while our primary servers are located in Sweden, some of our third-party service providers (such as Google, Microsoft, Stripe, and Apple) may process your personal data outside the EU/EEA. In such cases, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws and this privacy policy.

OUR THIRD DATA PROCESSORS

We use selected third-party service providers to process personal data. These providers follow our privacy policy and data protection laws. When needed, they use safeguards for international transfers, such as Standard Contractual Clauses (SCCs). Our main processors include:

• Google (policy)
• Stripe (policy)
• PayPal (policy)
• Kustum (policy)
• Apple (policy)
• Instantly (policy)
• Fraktjakt (policy)
• PostNord (policy) 
• Ingrid (policy) 
• Sendify (policy)
• Google (policy)
• Microsoft (policy)

DATA BREACHES

We will report any unlawful data breach of this website’s database or the databases of our third-party data processors. This report will be made to relevant persons and authorities within 72 hours of the breach. Reporting will occur if it is apparent that personal data stored in an identifiable manner has been stolen.

DATA CONTROLLER

The data controller of this website is Equimade AB, a Swedish company with company number: SE556751909401
The registered office is:
Sandby 1642
SE- 247 92 Södra Sandby
Sweden

USER RIGHTS UNDER GDPR AND SIMILAR LAWS

You have the right to object to processing and the right to lodge a complaint with a supervisory authority. You have the right to:
– Access, correct, delete, or restrict your data
– Data portability
– Withdraw consent of collection at any time

You can exercise these rights by contacting us via email, contact form, or through your account settings, in the way you prefer.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority or the Swedish Data Protection Authority (IMY).

PERSONAL INFORMATION THIS WEBSITE COLLECTS & WHY WE USE IT

The Equimade website collects and uses personal information for the following reasons:

– All personal data collected during the shopping process

During the checkout and/or account creation the following information that is collected includes:
– Names, email addresses, phone numbers
– Billing and shipping addresses
– Payment information (even if the payment gateway is processed by third parties)
– Order history and transactional data

– Contact forms and email links

If you contact us via the form on our “Contact Us” page or via email, the data you provide is not stored by this website. It is also not processed by third-party processors. Instead, your data is compiled into an email and sent to us using SMTP. Our SMTP servers are protected by TLS (SSL) encryption, using SHA-2, 256-bit cryptography. This encrypts the email content before it’s sent online. We then decrypt it on our local devices. Note that not all email servers are this secure. Therefore, please consider email as an insecure medium. Avoid including personal, confidential, or sensitive information in emails.