This policy explains which personal data Indus Mart collects when you use this website, why, who we share it with and what rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible
Indus Mart
Näverlursgatan 40, 421 42, Västra Frölunda, Göteborg, Sweden
Email: info@indusmart.se · Phone: 076 275 7884
What we collect and why
- Your account: name, email address and password, so you can log in and see your orders. Passwords are stored by our login provider (Google Firebase) in encrypted form — we never see them.
- Your orders: the products, prices, your name, email, phone number and — for home delivery — your address. We need this to deliver or prepare your order, contact you about it, and keep the accounting records the law requires.
- Your profile (optional): phone number, address and a profile photo, to fill in checkout faster.
- Reviews: your rating, text and first name are shown publicly on the product page.
- Wishlist: the products you save, so your wishlist is the same on all your devices.
- Your location (only if you tap "use my location"): your position is turned into a street address with OpenStreetMap so we can fill in your delivery address. We do not store your GPS position.
- Messages: what you send through the contact, complaint or newsletter forms.
Legal basis
- Contract — to handle your account and orders.
- Legal obligation — to keep accounting records (Swedish Bookkeeping Act).
- Legitimate interest — to answer your messages, prevent fraud and misuse, and keep the site secure.
- Consent — for the newsletter and for using your location. You can withdraw consent at any time.
Payments
Online payments are handled by Stripe. Your card or Swish details go straight to Stripe and are never stored by us. We only receive a confirmation that the payment went through, and a reference so we can refund it if needed. See Stripe's privacy policy.
Who we share data with
We only share what each service needs to do its job:
- Google Firebase — login, database and file storage.
- Stripe — online payments and refunds.
- Our email provider — order confirmations and status emails.
- Formspree — delivers contact, complaint and newsletter messages to us.
- OpenStreetMap (Nominatim) — turns your location into an address, only when you ask for it.
- Our web hosting provider.
Some of these companies are based in the USA. Transfers are protected by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. We never sell your data.
How long we keep it
- Order and payment records: 7 years, as required by the Swedish Bookkeeping Act.
- Your account, profile and wishlist: until you ask us to delete your account.
- Messages: as long as needed to deal with your question or complaint.
Your rights
You have the right to see the data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to get a copy of it (data portability). You can change most of your details yourself under My Profile. For anything else — including deleting your account — email us at info@indusmart.se.
If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Cookies
We only use the cookies and browser storage the shop needs to work. Read more in our cookie information.