Privacy notice

Data controller

Toms Attic AB (org.nr 559545-4173), Lille Rusters Väg 4, 653 46 Karlstad, Sweden, is the controller for personal data processed through this website. Contact: info@tamp.dk.

Our approach

We hold as little personal data as possible. Where another service can hold it for us in a way that is safer for you, we use that service rather than storing it ourselves.

Orders & payment

When you place an order, your payment details and shipping address are collected and stored by Stripe, our payment processor. We never see or store your card details. We retain an order reference, the items purchased, your email address and order status.

Legal basis: performance of the contract with you (GDPR Art. 6.1 b), and a legal obligation to retain accounting records (Art. 6.1 c). Retention: order and invoice data is kept for seven years as required by the Swedish Accounting Act (bokföringslagen).

Enquiries by email

If you email the studio, we keep the correspondence for as long as needed to handle your enquiry and for up to 24 months afterwards. Legal basis: our legitimate interest in answering you.

Who we share data with

We use a small number of processors and service providers: Stripe (payments), Resend (order emails), and our website host. Some of these providers may process data outside the EU/EEA; where that happens, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision. We never sell your data.

Cookies & local storage

We use a small amount of browser local storage to remember your shopping selection, your language choice, and your cookie choices between visits. This is strictly necessary for the shop to work and requires no consent.

Optional categories — analytics and marketing — are switched off by default and are only activated if you turn them on. We currently run no analytics or advertising tools at all. You can review or change your choices at any time via “Cookie settings” in the footer.

Your rights

Under the GDPR you can request a copy of the data we hold about you, ask us to correct or delete it, restrict or object to processing, and request data portability. Where processing is based on consent, you may withdraw it at any time. Email info@tamp.dk.

If you are unhappy with how we handle your data you can lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy.se.