We keep this page honest and specific: what we collect, why, who else touches it, and what you can tell us to do about it. Last updated 29 July 2026.
Who is responsible
Momo Jord AB, Överälve 53, 827 93 Ljusdal, Sweden. Company no. 559157-8421, VAT SE559157842101. We are the controller for the personal data described here. Write to us about anything on this page at [email protected].
What we collect, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Fulfilling your order | Name, delivery and billing address, email, phone, order contents, pickup point | Performance of a contract (Art. 6(1)(b) GDPR) |
| Payment | Payment method and status. We never see or store your card number — Stripe handles it directly. | Contract (Art. 6(1)(b)) |
| Accounting | Invoice and order records | Legal obligation (Art. 6(1)(c)), Swedish Bookkeeping Act |
| Customer service | What you write to us and our replies | Contract, and our legitimate interest in answering you (Art. 6(1)(f)) |
| Newsletter | Email address, if you tick the box | Consent (Art. 6(1)(a)) — withdraw any time via the unsubscribe link |
| Review request | Email address, if you tick the box at checkout | Consent (Art. 6(1)(a)) |
| Statistics | Pages viewed, approximate location, device, an analytics ID | Consent (Art. 6(1)(a)) — only after you accept in the cookie banner |
| Advertising measurement | Ad click ID, purchase value, and — only if you accepted marketing cookies — your email and phone in hashed form | Consent (Art. 6(1)(a)) |
Without the order data we cannot ship anything, so that part is necessary to buy from us. Everything based on consent is genuinely optional — the shop works without it.
Who else touches your data
We do not sell your data, and we never will. But running a shop means other companies process it on our behalf, and you should know which:
- Stripe — payments, including Klarna, PayPal, Apple Pay and Google Pay when you choose them.
- Shipmondo, and the carrier you pick — DB Schenker or PostNord — for the delivery itself.
- Google — Analytics and Ads, for statistics and to see which ads lead to sales. Only with your consent.
- Meta — Facebook/Instagram advertising measurement. Only with your consent.
- Kit — our newsletter tool, if you subscribe.
- Google Workspace — the email we send you.
- Cloudflare and our own server in Sweden — hosting and protection against attacks.
Google and Meta are US companies. Transfers rely on the EU–US Data Privacy Framework and, where needed, the European Commission’s standard contractual clauses. If you never accept marketing or statistics cookies, no data goes to them from your visit.
We also hand data to authorities when the law requires it — for example the Swedish Tax Agency.
How long we keep it
- Order and invoice records: seven years after the end of the financial year. Swedish bookkeeping law requires this and we cannot shorten it.
- Customer service correspondence: up to two years, so we can pick up a thread later.
- Newsletter: until you unsubscribe.
- Statistics and advertising data: up to 14 months in Google Analytics; cookies expire on their own, most within a year.
Your rights
Under the GDPR you can ask us to:
- tell you what we hold about you, and give you a copy (access);
- correct anything wrong (rectification);
- delete it (erasure) — except the accounting records we are legally required to keep;
- restrict how we use it, or object to use based on legitimate interest;
- hand your data to you or another provider in a machine-readable form (portability);
- withdraw a consent you have given, at any time. That does not undo what we did before you withdrew it.
Email [email protected] and we will answer within a month. No form, no fee.
If you think we have handled your data badly, you can complain to a supervisory authority — in Sweden that is IMY, and you may also go to the authority where you live or work.
Cookies
Necessary cookies keep your cart and your session working; those cannot be switched off, because the shop would stop working. Statistics and marketing cookies are only set after you accept them in our cookie banner — using the site is not by itself consent. You can change your mind at any time through the banner.
Automated decisions
We do not make automated decisions with legal effects about you, and we do not profile you to decide what you get to buy or what you pay.