Privacy Policy
Last updated: October 2025
At Mistwillow, your privacy is sacred.
This Privacy Policy describes how we collect, use, and protect your personal information when you visit www.mistwillow.com (the “Site”) or purchase from us.
1. Who We Are
Mistwillow is a registered small business based in Uddevalla, Sweden.
Email: hello@mistwillow.com
We are the data controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR).
2. Information We Collect
We collect only the data needed to fulfill our obligations and provide a magical yet safe shopping experience.
a) Information you provide
Name, address, email and phone number (for shipping and communication)
Payment information (handled securely by third-party processors such as PayPal or Stripe)
Any messages or special requests you send us
b) Information collected automatically
When you browse Mistwillow.com, we automatically collect certain information through cookies and analytics tools:
IP address, browser type, device information
Pages visited and time spent on the site
Referring website (if you clicked from another site)
This helps us improve website performance, understand visitor trends and prevent fraud.
3. How We Use Your Information
We process your personal data only where lawful and necessary:
To process and deliver your orders
To communicate with you about purchases, updates or support
To improve our website and services
To comply with Swedish accounting and tax laws
To send newsletters or offers if you have given explicit consent
4. Legal Basis (GDPR Article 6)
We process your data based on one or more of the following legal grounds:
Performance of contract – to fulfill your order
Legal obligation – for bookkeeping and tax records
Consent – for newsletters or marketing emails
Legitimate interest – to protect against fraud or misuse of our website
5. Sharing of Data
We never sell your data.
However, we may share limited information with trusted partners who help operate Mistwillow:
Payment processors (PayPal, Stripe)
Shipping partners (PostNord, DHL)
IT and analytics providers (e.g., Google Analytics)
All partners comply with GDPR and process data only according to our instructions.
6. Data Retention
We store personal data only as long as necessary:
Order details: 7 years (required under Swedish accounting law)
Newsletter data: until you unsubscribe
General correspondence: up to 12 months after last contact
After these periods, your data will be securely deleted or anonymized.
7. Cookies
Mistwillow uses cookies to ensure website functionality and improve your experience.
You can choose to accept, block or delete cookies in your browser settings.
More details can be found in our [Cookie Policy] (link this later).
8. Your Rights
Under the GDPR, you have the following rights:
To access the data we hold about you
To correct inaccurate information
To request deletion (“right to be forgotten”)
To restrict or object to processing
To withdraw consent for marketing at any time
To exercise these rights, email hello@mistwillow.com.
We will respond within 30 days.
9. Data Transfers Outside the EU
If any third-party processors (e.g., Stripe or Google) transfer data outside the EU, it is done under the EU Standard Contractual Clauses (SCC) to ensure equivalent protection.
10. Security
We use encrypted connections (SSL), secure hosting and strict access controls to protect your information from unauthorized access or disclosure.
11. Minors
Our site is not intended for individuals under 18 years of age.
We do not knowingly collect data from minors. If you believe your child has shared data with us, please contact us for deletion.
12. Updates to this Policy
We may occasionally update this Privacy Policy to reflect legal changes or improvements in our practices. The latest version will always be available on this page.
13. Complaints
If you have any concerns about how your data is processed, please contact us first.
If you are unsatisfied, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY) at www.imy.se.
✨ Your trust is the foundation of Mistwillow’s magic.
By visiting our site, you agree to this Privacy Policy and the gentle, transparent way we care for your data.