Who is responsible for your data
Crewbury is the data controller for personal data handled through this website and our order pages. We follow the EU General Data Protection Regulation (GDPR).
- Trading nameCrewbury
- Company[registered company name]
- Org. number[organisationsnummer]
- VAT number[VAT number (SE…01)]
- Address[registered address], Sweden
- Emailhello@crewbury.com
What we collect and why
- Orders: name, email, phone (optional), company, delivery address, optional tax or customs ID, the items you choose and the logo or artwork you upload. Used to make, ship and support your order (contract, GDPR art. 6(1)(b)).
- Payments: handled by Stripe. We receive the payment status and amount, never your card number.
- Accounting: order and payment records kept to meet Swedish bookkeeping law (legal obligation, art. 6(1)(c)).
- Prepared merch previews: if we created a merch preview for your business, we used publicly available business information such as your company name, website and logo (legitimate interest, art. 6(1)(f)). You can ask us to delete it at any time.
- Store analytics: only if you allow it, anonymous counts of which products are viewed (consent, art. 6(1)(a)). We use no advertising trackers.
- Security and support: technical logs and our email correspondence with you (legitimate interest).
Who we share it with
Only the services needed to run the shop, acting on our instructions: Stripe (payments), Printful (production and shipping, including your delivery details), Supabase (database and file storage), Vercel (website hosting) and Resend (order emails). Some of these process data outside the EU, mainly in the United States; such transfers rely on the EU–US Data Privacy Framework or the EU's standard contractual clauses. We never sell your data.
How long we keep it
Order and accounting records are kept for seven years, as Swedish bookkeeping law requires. Uploaded logos and artwork are kept while needed for your order, complaints or a reorder you request, and deleted on request. Merch previews and outreach records are deleted when you ask.
Your rights
You can ask for access to, correction or deletion of your data, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time. Email hello@crewbury.com. If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.