Privacy policy

Superwatchman operates this store and website, including all related information, content, features, tools, products, and services to deliver a tailored shopping experience (the “Services”). Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy explains how we collect, use, and disclose your personal data when you visit, use, or make a purchase or other transaction via the Services, or otherwise communicate with us. If there is a conflict between our Terms of Use and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing, and disclosure of your personal data.

By accessing or using the Services, you acknowledge that you have read this Privacy Policy and understand how your data is collected, used, and disclosed as described below.

Personal Data We Collect or Process

“Personal data” means information that identifies or can reasonably be linked to you or another individual. It does not include anonymized or de-identified data that cannot reasonably be linked back to you. Depending on how you interact with the Services, where you live, and applicable law, we may collect or process the categories below (including inferences drawn from them):

Contact details: name, address, billing and shipping addresses, phone number, email.
Financial information: credit/debit card details and tokens, payment method, transaction data, payment confirmations.
Account information: username, password, security questions, preferences, settings.
Transaction information: items viewed, added to cart or wishlist, purchased, returned, exchanged, or canceled; order history.
Communications: information you provide in customer support or other messages to us.
Device information: device, browser, network details, IP address, unique identifiers.
Usage information: how and when you browse or interact with the Services.

Sources of Personal Data

We collect personal data from:

You, directly (e.g., account creation, checkout, support).
Your devices, automatically (e.g., cookies, similar technologies).
Our service providers (e.g., payments, shipping, analytics, cloud).
Our partners and other third parties.

How We Use Personal Data

Depending on your interactions and the features you use, we process personal data to:

Provide, personalize, and improve the Services: fulfill our contract with you; process payments; ship orders; remember preferences; support reviews; handle returns/exchanges; manage your account; deliver recommendations; and enhance site performance.
Marketing and advertising: send marketing, promotional, and event communications via email/SMS/post; show you online ads on our Services and elsewhere, including based on past purchases, cart activity, and browsing.
Security and fraud prevention: verify accounts; provide a secure shopping and payment experience; detect, investigate, and act on suspected fraud, illegal activity, or security incidents; protect public safety; secure our Services. You are responsible for keeping your login credentials confidential.
Customer care and communications: provide support, respond to inquiries, and maintain our relationship with you.
Legal and compliance: comply with law and lawful requests; respond to legal process; enforce or investigate potential violations of our terms or policies; manage disputes.

How We Disclose Personal Data

We may disclose personal data to third parties for legitimate purposes consistent with this Privacy Policy, including:

Shopify, vendors, and service providers acting on our behalf (e.g., IT, payments, data analytics, customer support, cloud hosting, warehousing, fulfillment, and shipping).
Business and marketing partners that provide marketing services and advertising to you. For example, we use Shopify to support personalized advertising with third-party services based on your activity across merchants and sites. Partners will use your data per their own privacy notices. Depending on where you live, you may have the right to opt out of “sharing” or targeted advertising—see Your Rights and Choices below.
Third parties when you ask us to or consent (e.g., shipping to a recipient; social media widgets; third-party login integrations).
Our affiliates and within our corporate group.
In connection with corporate transactions (e.g., merger, acquisition, bankruptcy), to comply with legal obligations (e.g., subpoenas, warrants), to enforce applicable terms or policies, and to protect the Services, our rights, and the rights of users or others.

Relationship with Shopify

The Services are provided on the Shopify platform. Shopify collects and processes personal data about your access to and use of the Services to provide and improve the platform. Information you submit may be transferred to and shared with Shopify and third parties, which may be located outside your country of residence, in order to provide and improve the Services. We may also use certain advanced Shopify features that rely on data from your interactions with our store, other merchants, and Shopify. In those circumstances, Shopify is responsible for processing your personal data—including responding to your requests to exercise rights over such processing. For details on how Shopify processes personal data and your rights, see Shopify’s Consumer Privacy Policy and Shopify’s privacy portal.

Third-Party Websites and Links

The Services may link to third-party sites or platforms. Please review their privacy and security policies and terms. We are not responsible for the privacy, security, or accuracy of information on those sites. Information you post in public or semi-public areas (including third-party social platforms) may be visible to others without restriction.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal data from anyone under the age of majority in your jurisdiction. If you are a parent or guardian and believe your child provided personal data to us, contact us using the details below to request deletion. As of the effective date, we do not “sell” or “share” (as defined by applicable law) personal data of individuals under 16.

Security and Retention

No security measures are perfect, and transmissions over the Internet may not be fully secure. Please avoid sending sensitive information via unsecured channels.
We retain personal data only as long as necessary for the purposes described, including maintaining your account, providing the Services, meeting legal obligations, resolving disputes, and enforcing agreements and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights below. These rights are not absolute and may apply only in certain circumstances. We may decline requests where the law allows.

Right of access/information: request access to the personal data we hold about you.
Right to deletion: request that we delete your personal data.
Right to correction: request that we correct inaccurate personal data.
Right to portability: request a copy of your personal data and, where feasible, have it transmitted to a third party.
Right to opt out of “sale,” “sharing,” or targeted advertising: where provided by law, you may opt out of these uses. If you visit our site with Global Privacy Control (GPC) enabled, we will treat that signal as an opt-out for the browser and device you are using (and, where linked, to your account). We do not recognize other “Do Not Track” signals.
Communications preferences: you can opt out of marketing emails at any time by using the unsubscribe option in our emails. We may still send you non-marketing notices (such as order or account updates).

If you are located in the UK or EEA (subject to local exceptions and limits), you may also:

Object to or restrict processing of your personal data for certain purposes.
Withdraw consent where we rely on consent for processing. Withdrawal will not affect the lawfulness of processing before withdrawal.

You may exercise your rights by contacting us directly (see Contact below). We will not discriminate against you for exercising your rights. We may ask you to verify your identity before we act on your request. You may also authorize an agent to submit a request on your behalf, provided we receive proof of authorization and we may require you to verify your identity directly. We will respond within the timeframes required by applicable law.

Complaints

If you have concerns about our handling of your personal data, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us again, or to lodge a complaint with your local data protection authority. For EEA countries, you can find supervisory authorities via the European Data Protection Board.

International Transfers

We may transfer, store, and process your personal data outside your country of residence.
If we transfer personal data outside the EEA or UK, we will use recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses (or the UK’s equivalent), unless the destination country has been deemed to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised policy here, update the “Last updated” date, and provide notice as required by law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or wish to exercise your rights, please contact us:

Superwatchman
hello@swmwatch.com
Snöstigen 14, Tullinge, 14635, SE

For purposes of applicable data protection laws, we are the controller of your personal data.