Privacy policy

Last updated: 31 October 2026

Here we describe how Vintago processes your personal data when you visit the website, shop or contact us.

Data controller

• Vintago, sole proprietorship, owner Henrik Petersson
• Address: Präststigen 6, 577 75 Mörlunda
• Email for privacy questions: info@vintago.se

What data and why

• Purchase and delivery. Name, email, phone, address, order contents, amount and payment status. Legal basis: contract. Kept for as long as needed for the purchase, complaints and warranties, normally 3 years.
• Bookkeeping. Order and payment details. Legal basis: legal obligation under the Swedish Bookkeeping Act. Kept for 7 years after the end of the calendar year in which the financial year ended.
• Contact form and withdrawals. Name, email, phone if you provide it, and your message. Legal basis: legitimate interest in replying to you, or contract. Kept for up to 12 months after the matter is closed.
• Reservation for pickup. Name, email and phone. Legal basis: contract. Kept as for purchases above.

We never sell your data and do not use it for advertising.

Who we share data with

• Stripe handles payments. Card details and payment information go directly to Stripe and are not stored by us.
• Klarna becomes an independent data controller if you choose to pay with Klarna.
• Cloudflare runs the website, the database and image storage for us.
• Email. When you email us or we email you about your order, your email address and your message are processed by the email services we use. Cloudflare receives and forwards email to info@vintago.se.
• Carriers receive name, address, phone and email to be able to deliver your parcel.

Stripe and Cloudflare may process data outside the EU/EEA, including in the USA. The transfer then takes place under the European Commission's decision on the EU–US Data Privacy Framework or the EU's standard contractual clauses.

Your rights

You have the right to know what data we hold about you, to have errors corrected, to have data erased when it is no longer needed, to restrict or object to processing, and to receive your data (data portability). Email . We reply within one month. Data that we must keep by law, for example bookkeeping, cannot be erased until the period has expired.