Privacy policy

Last updated: 26 October 2026

Data controller

Oscar Rydergård (Pen & Wall), private individual
Address: Grenadjärvägen 10, 335 94 Marieholmsbruk, Sweden
Email: yourpromthelper@gmail.com

What data we process

  • Contact and delivery details: name, address, email and, if provided, phone number.
  • Order details: what you bought, amount, date and order history.
  • Personalisation: what you enter so the poster can be made, for example names, years, dates, places, initials and letter text. The text may include information about people other than you, such as a grandmother or a partner. Only enter things you are comfortable with us and the printer seeing. Please do not enter sensitive information, such as health details, unnecessarily.
  • Payment details: handled by the payment providers. We never see your full card number.
  • Emails and messages you send us.
  • Technical data when you visit the shop, for example IP address, browser and cookies (see below).

Why, and on what legal basis

Legal basis under the General Data Protection Regulation (GDPR), Article 6:

  • Receiving, making, printing and delivering your order: contract (Art. 6(1)(b)).
  • Answering questions and handling complaints: contract and legitimate interest (Art. 6(1)(b) and (f)).
  • Keeping records required by law, for example for tax purposes: legal obligation (Art. 6(1)(c)).
  • Shop security and fraud prevention: legitimate interest (Art. 6(1)(f)).
  • Newsletter, if you sign up yourself: consent (Art. 6(1)(a)). You can unsubscribe at any time.
  • Analytics and marketing cookies: consent via the cookie banner.

We never sell your data.

Who receives the data

  • Shopify (Shopify International Limited, Ireland) runs the online shop and stores order and customer data on our behalf (data processor). Shopify may transfer data to Canada and the US.
  • Gelato (Gelato ASA, Oslo, Norway) and its print partners print and ship the poster. Gelato and the printers receive your name, delivery address, personalisation text and the print file. Gelato prefers a printer close to the delivery address, so for customers in the US the data is normally processed there.
  • Shipping carriers (chosen by Gelato) receive your name, address and sometimes email or phone number so they can deliver. They are independently responsible for their processing.
  • Payment providers: payments are handled by payment providers such as Shopify Payments. They receive the data needed to complete the payment and prevent fraud.
  • Email: we use Gmail (Google) to email with you. Google may process data outside the EU.
  • Authorities, if required by law.

Transfers outside the EU/EEA

Some providers (Shopify, Google and printers in the US) may process data outside the EU/EEA. Such transfers follow the providers' terms, normally based on a European Commission adequacy decision (for example the EU–US Data Privacy Framework for certified US companies) or the EU Standard Contractual Clauses.

How long we keep data

  • Order and customer data: as long as needed to deliver and handle complaints (up to three years after purchase), and then as long as required by tax and accounting rules.
  • Personalisation text and print files: deleted 6 months after delivery, unless you ask us to keep them for a new order.
  • Email: kept while the matter is ongoing and then for no more than 24 months, unless the data must be kept longer under tax and accounting rules.

Cookies

The shop uses cookies that are needed for the cart and checkout to work. Other cookies (analytics and marketing) are only used if you accept them in the cookie banner.

Your rights

You have the right to know what data we hold about you, to have it corrected or deleted, to restrict processing, to object to processing based on legitimate interest, to receive your data (data portability) and to withdraw consent. Email yourpromthelper@gmail.com.

You can also complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se, or to the data protection authority in the country where you live.