Privacy Policy – Soulstone

Last updated: 10 October 2026

This Privacy Policy explains how Soulstone (“we”, “us”, “our”) collects, uses, stores, and shares personal information when you visit, interact with, or make a purchase from soulstone.se (“Site”).

Soulstone is committed to protecting personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection legislation.

1. Data Controller

For the purposes of applicable data protection law, the person responsible for the processing of personal data in connection with Soulstone is:

Operator: Parham Panaheidh
Brand: Soulstone
Country: Sweden
Email: support@soulstone.se
Website: soulstone.se

2. Personal Information We Collect

Depending on how you use the Site, we may collect personal information including:

Information you provide directly

• Name
• Billing address
• Shipping address
• Email address
• Phone number
• Order information
• Customer service communications
• Marketing preferences
• Information you provide when creating or using a customer account

Payment information is processed through authorized payment providers. Soulstone does not normally store complete payment card details.

Information collected automatically

When you use the Site, certain technical information may be collected automatically, such as:

• IP address
• Browser type
• Device information
• Operating system
• Pages viewed
• Referring pages
• Interaction and usage information
• Cookies and similar technologies

3. How We Use Personal Information

We may process personal information to:

• Process and fulfill orders
• Arrange shipping and delivery
• Provide customer service
• Process returns, refunds, and cancellation requests
• Maintain customer accounts
• Communicate order and delivery information
• Process payments
• Detect and prevent fraud or misuse
• Comply with legal and accounting obligations
• Improve the Site and customer experience
• Analyze website performance
• Send marketing communications where permitted
• Personalize advertising or marketing where consent or another lawful basis applies

4. Legal Bases for Processing

Under GDPR, we process personal data based on one or more of the following legal bases:

Performance of a contract
For example, processing information required to complete an order, take payment, arrange delivery, or handle a return.

Legal obligation
For example, maintaining information required for accounting, tax, or consumer protection purposes.

Legitimate interests
For example, fraud prevention, security, customer service, and improving our services, where those interests are not overridden by your rights.

Consent
For example, where consent is required for certain marketing communications, analytics, or non-essential cookies.

You may withdraw consent at any time where processing is based on consent.

5. Service Providers and Sharing of Personal Information

We may share personal information with service providers where necessary to operate the Site and provide our services.

These may include:

• Shopify, which provides our ecommerce platform and customer account infrastructure
• Payment processors
• Shipping, fulfillment, and logistics providers
• Email and customer communication providers
• Analytics providers
• Marketing and advertising platforms
• Affiliate or referral technology providers
• Fraud prevention and security providers
• Professional advisers or authorities where required by law

These parties may process personal information only as necessary to provide their services or as otherwise permitted by applicable law.

Soulstone does not sell personal information.

6. Shopify

Our online store is hosted by Shopify.

Shopify may process personal information in connection with hosting the store, checkout, customer accounts, payments, security, fraud prevention, and other ecommerce functionality.

Shopify may process information in countries outside Sweden or the European Economic Area in accordance with applicable data protection safeguards.

For further information about Shopify’s processing practices, customers may review Shopify’s own privacy information.

7. Cookies and Similar Technologies

We use cookies and similar technologies for purposes including:

• Essential website functionality
• Shopping cart and checkout functionality
• Security
• Remembering preferences
• Analytics and performance measurement
• Marketing and advertising, where permitted

Where required by law, non-essential cookies are used only after obtaining appropriate consent.

You can manage cookie preferences through the consent controls available on the Site where applicable.

Browser settings may also allow you to block or delete cookies, although doing so may affect certain Site functions.

8. Marketing Communications

We may send marketing emails or other promotional communications where you have consented or where otherwise permitted by law.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message.

Even if you opt out of marketing communications, we may continue to send transactional or service-related communications such as:

• Order confirmations
• Shipping notifications
• Return or refund information
• Security or account-related messages

9. International Data Transfers

Some service providers may process personal information outside Sweden or the European Economic Area.

Where required, appropriate safeguards are used for such transfers, which may include:

• European Commission Standard Contractual Clauses
• Adequacy decisions
• Other legally recognized transfer mechanisms

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• Fulfill and document orders
• Provide customer service
• Meet accounting and tax requirements
• Comply with legal obligations
• Resolve disputes
• Prevent fraud
• Enforce agreements

Retention periods may vary depending on the type of information and applicable legal requirements.

When information is no longer required, it may be deleted or anonymized.

11. Your Data Protection Rights

Depending on applicable law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete information
• Request deletion of personal data in certain circumstances
• Request restriction of processing
• Object to certain processing
• Receive certain personal data in a portable format
• Withdraw consent where processing is based on consent
• Object to direct marketing at any time

To exercise these rights, contact:

support@soulstone.se

We may need to verify your identity before completing certain requests.

12. Complaints

If you believe your personal information has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority.

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

You may also contact us first at support@soulstone.se and we will try to address your concern.

13. Security

We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.

However, no online system or method of electronic transmission can be guaranteed to be completely secure.

14. Global Privacy Control and Browser Signals

Where required by applicable law, recognized privacy preference signals such as Global Privacy Control (GPC) may be treated as opt-out requests.

Support for other browser-based signals may vary depending on applicable law and the technologies used on the Site.

15. Third-Party Links

The Site may contain links to third-party websites or services.

Soulstone is not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy policies before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, business practices, or legal obligations.

The updated version will be published on this page with a revised “Last updated” date.

17. Contact

For privacy-related questions, requests, or concerns:

Soulstone
Operator: Parham Panaheidh
Email: support@soulstone.se
Website: soulstone.se
Country: Sweden