How we handle your personal data.
At Quickbutik, we want you to feel confident about how we handle your personal data. This policy describes what data we collect, why, and how we protect it. By personal data we mean information that can directly or indirectly identify you.
Quickbutik AB, company registration number 556980-9105, is the controller for the processing described in this policy.
What data do we collect?
| Category | Examples |
|---|---|
| Contact details | Name, email address, telephone number, address |
| Account details | Company name, company registration number, login credentials |
| Service usage | Which features you use, logs from the control panel |
| Support cases | Information you share with us via chat, email or telephone |
| Technical data | IP address, browser type, session data |
| Payment data | Billing details and payment history (card details are handled by our payment provider) |
We collect data that you provide yourself when you register or contact us, data that is generated when you use the platform, and data collected via cookies (see our Cookie Policy).
Why do we process your data?
| Purpose | Legal basis |
|---|---|
| Providing and operating the platform | Performance of a contract |
| Handling payments and invoicing | Performance of a contract |
| Providing support and communicating with you | Performance of a contract, legitimate interest |
| Improving and developing our services | Legitimate interest |
| Sending product updates | Legitimate interest (you can unsubscribe) |
| Marketing | Consent |
| Security and prevention of abuse | Legitimate interest, legal obligation |
| Onboarding and verification for Quickbutik Checkout | Performance of a contract, legal obligation |
| Meeting legal requirements (e.g. bookkeeping) | Legal obligation |
| AI-powered features (e.g. recommendations) | Performance of a contract, legitimate interest |
How long do we keep your data?
We keep your data for as long as you are a customer with us. When your agreement with us ends, you have 30 days to export your data. We then delete your personal data within 90 days, and no later than 120 days after the agreement ends, with the exception of data we are required to retain by law and of AI inputs and outputs that our AI providers keep for abuse monitoring, as described in Annex 1 to our Data Processing Agreement, and of data needed under the Quickbutik Checkout Terms for as long as they require. Accounting records, for example, are retained for 7 years under the Swedish Bookkeeping Act. Backups are overwritten according to our regular rotation schedule and are until then used only for recovery.
Who do we share data with?
We use external providers to operate and improve the platform. Unless stated otherwise below, they process data on our behalf and may not use it for their own purposes. This applies to the following categories of providers:
- Infrastructure, data storage and security (EU/global)
- Customer support, communication and telephony (EU/USA)
- Payments and invoicing (EU)
- Email delivery and newsletters (EU/USA)
- Product and web analytics and marketing (EU/USA)
- Internal work tools (EU/USA)
Our sub-processors, including the providers that process personal data on our platform on your behalf, are listed by name at quickbutik.com/en/legal/platform/dpa.
When data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCC) and the EU-U.S. Data Privacy Framework.
If you use Quickbutik Checkout, we share your company and contact details, the identity of the person who accepts the Checkout Terms (including IP address) and transaction data with Adyen for onboarding, verification and payments. For these purposes, Adyen and the Payment Method providers process the data as independent controllers under their own privacy statements. Adyen also acts as a sub-processor for the processing we carry out in Quickbutik Checkout on behalf of merchants. We keep the data needed for disputes, chargebacks and documentation for as long as the Checkout Terms require.
For marketing, we use advertising platforms such as Meta and Google. They receive data from us only with your consent, for example when you accept marketing cookies. The advertising platforms process the data as independent controllers under their own privacy policies. Where we collect data for them through a pixel or similar technology on our website, we are joint controllers with the platform for that collection.
We may also be required to disclose data to authorities where required by law.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (provided we are not legally required to retain it)
- Restrict processing in certain situations
- Object to processing based on legitimate interest
- Transfer your data to another service (data portability)
- Withdraw consent where processing is based on your consent
Contact us at privacy@quickbutik.com to exercise your rights. We respond to your request within 30 days.
If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with your national data protection authority: in Sweden, the Swedish Authority for Privacy Protection (IMY, imy.se); in Norway, Datatilsynet (datatilsynet.no); in Denmark, Datatilsynet (datatilsynet.dk).
How do we protect your data?
We protect your personal data using industry standards:
- Encryption in transit and at rest
- Role-based access control: only staff who need access are granted it
- Our main data storage and backups are within the EU. Some providers process data outside the EU/EEA (see "Who do we share data with?")
- Confidentiality agreements for all staff
- Ongoing training in IT security and data protection
AI features
Quickbutik uses AI technology in the platform, for example in the Quick assistant. We do not use your personal data to train AI models. The AI providers we use are listed in Annex 1 to our Data Processing Agreement.
When we act as processor
When you sell through Quickbutik, in an online store we host or in your own storefront connected to Quickbutik, you are the controller for your customers' data. We act as processor on your behalf for the data that reaches our platform. What you process in your own storefront outside our platform is your own responsibility. This processing is governed by our Data Processing Agreement (Supplementary Agreement A to the Terms of Service).
Contact
Quickbutik AB
Company registration number: 556980-9105
Redaregatan 48, SE-252 36 Helsingborg, Sweden
Data protection enquiries: privacy@quickbutik.com