Privacy policy

Sun's Out Golf is operated by Max Steinberg and provides this website and online store with the help of Shopify.

This privacy policy describes how we collect, use, store and share personal data when you visit our website, shop in our online store, contact our customer service, create a customer account or otherwise use our services.

We process personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).

The controller for the processing described in this policy is:

Company name: Max Steinberg

Brand: Sun's Out Golf

Company registration number: 040924-6139

VAT number: SE040924613901

Address: Wivalliusgatan 15, 112 60 Stockholm, Sweden

Email: support@sunsoutgolf.com

Phone: +46 72 579 97 99

The company is registered in Sweden and holds Swedish F-tax certification.

Depending on how you use our services, we may process the following personal data:

• Contact details, such as name, delivery address, billing address, email address and phone number.

• Order details, such as products purchased, size, order number, price, delivery method, returns, exchanges and previous orders.

• Payment details, such as payment method, payment status and transaction information. Full card details are normally processed directly by Shopify Payments or another payment provider and are not accessible to us.

• Account details, such as login credentials, settings and order history if you create a customer account.

• Communication data, such as the content of messages you send to our customer service.

• Technical information, such as IP address, device type, browser, operating system, language settings and information about how you use the website.

• Marketing data, such as which newsletters you have chosen to receive and how you interact with our marketing.

• Cookie and usage data, such as which pages and products you visit, which products you add to the cart and how you navigate the website.

Please do not send us sensitive personal data unless it is explicitly needed for us to handle your case.

We may collect personal data:

• directly from you when you place an order, create an account, subscribe to marketing or contact us;

• automatically through cookies and similar technologies when you use the website;

• from Shopify, payment providers, carriers and other service providers who help us complete your purchase;

• from marketing and advertising partners, where permitted and where you have given the required consent.

Fulfilling orders

We process contact, payment and order data in order to receive payment, administer your order, deliver the products and handle returns, exchanges and refunds.

Legal basis: The processing is necessary to perform our contract with you or to take steps prior to entering into a contract.

Customer service

We process contact, order and communication data to answer questions and assist you with orders, deliveries, returns, complaints and other customer service matters.

Legal basis: Performance of a contract, or our legitimate interest in providing customer service and managing our customer relationship.

Accounting and legal obligations

We process order, payment and transaction data to comply with requirements under, for example, accounting, tax and consumer protection legislation, and to handle requests from authorities.

Legal basis: The processing is necessary to comply with a legal obligation.

Security and fraud prevention

We process account, transaction, device and usage data to protect our website, our customers and our business, and to detect and prevent fraud, abuse and other security incidents.

Legal basis: Our legitimate interest in protecting the business and preventing fraud. In some cases the processing may also be necessary to comply with a legal obligation.

Customer account

If you create an account, we process your account, contact and order data to administer the account and give you access to your order history and other account features.

Legal basis: Performance of a contract.

Marketing

If you have signed up for our newsletter, we may use your email address or phone number to send offers, product news and other marketing.

Legal basis: Your consent or, where permitted by law, our legitimate interest in marketing similar products to existing customers.

You can unsubscribe at any time via the link in our messages or by contacting support@sunsoutgolf.com.

Analytics and personalised advertising

With your consent, we may use cookies and similar technologies for statistics, analytics and personalised advertising. This may involve sharing data about how you use the website with Shopify and our analytics or advertising partners.

Legal basis: Consent where required. You can change or withdraw your consent through the website's cookie settings.

Our website uses cookies and similar technologies. Some cookies are necessary for the website, the cart and checkout to function. Other cookies are used only with your consent for analytics, functionality or marketing.

You can give, refuse or withdraw your consent through the cookie tool on the website. Refusing certain cookies may affect some features, but you should still be able to use the website's basic functions.

More information about the cookies used, their providers, purposes and storage periods is available in the website's cookie settings.

We may share personal data with the following categories of recipients where necessary:

• Shopify, which provides our e-commerce platform and related services;

• payment providers and banks that handle payments and refunds;

• warehouse, shipping and logistics providers that deliver orders;

• providers of IT operations, cloud storage, security and customer service;

• providers of analytics, communication and marketing services, where the processing is permitted and any necessary consent has been given;

• accountants, auditors, insurance companies and legal advisers;

• authorities, courts or other recipients where we are required to disclose data by law or by a legal decision;

• a buyer or adviser in connection with a possible reorganisation, sale or transfer of all or part of the business.

We do not sell personal data in the sense normally understood under Swedish and European data protection legislation.

Our online store is provided through Shopify. Shopify processes personal data in order to provide the e-commerce platform, payment features, security and other related services.

In some situations Shopify processes data as our data processor. Shopify may also act as an independent controller for certain processing for which Shopify determines the purposes and means.

More information is available in Shopify's consumer privacy policy: https://privacy.shopify.com/en

If you pay using an external payment method, that payment provider's own privacy policy may also apply.

Shopify and certain other service providers may process personal data outside Sweden, the EU or the European Economic Area.

When personal data is transferred to a country outside the EU/EEA, we make sure the transfer has a basis in applicable data protection legislation. This may be an adequacy decision from the European Commission, the European Commission's standard contractual clauses or another approved transfer mechanism.

You can contact us if you would like more information about the safeguards used.

We keep personal data only as long as it is needed for the purpose for which it was collected, or as long as we are required to keep it by law.

• Order, payment and accounting records are kept for as long as required by Swedish accounting and tax legislation, normally at least seven years.

• Customer account data is kept as long as the account is active or until you ask for the account to be closed, except for data we are required to keep by law.

• Customer service matters are kept as long as needed to handle the matter and any legal claims.

• Marketing data is used until you withdraw your consent, object to the processing or the data is no longer needed. We may then keep limited information to make sure you do not receive further marketing.

• Cookie data is kept according to the storage periods stated in the website's cookie settings.

We may need to keep some data longer where required for a legal obligation, an ongoing dispute, or to establish, exercise or defend legal claims.

Depending on the circumstances, you have the right to:

• receive information about how we process your personal data;

• request access to the personal data we process about you;

• request that incorrect or incomplete data is rectified;

• request erasure of personal data;

• request restriction of the processing;

• object to processing based on a legitimate interest;

• object at any time to processing for direct marketing;

• receive certain data in a structured, commonly used and machine-readable format and, where possible, have it transferred to another controller;

• withdraw a given consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn;

• lodge a complaint with a data protection authority.

These rights are not absolute. In some situations we may need to keep or continue processing data to comply with a legal obligation or to establish, exercise or defend legal claims.

Contact support@sunsoutgolf.com if you wish to exercise any of your rights. We may need to verify your identity before handling your request. We normally respond to a valid request within one month.

If you believe we are processing your personal data incorrectly, please contact us first at support@sunsoutgolf.com.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), Sweden's supervisory authority for data protection.

Integritetsskyddsmyndigheten (IMY) — website: https://www.imy.se/

If you live in another EU/EEA country, you may also contact the data protection authority in the country where you live or work.

Our online store is not specifically directed at children, and we do not knowingly collect personal data from children who are not entitled to enter into a purchase agreement themselves.

If you are a guardian and believe a child has provided personal data to us without valid consent or another legal basis, please contact support@sunsoutgolf.com.

We use reasonable technical and organisational security measures to protect personal data against unauthorised access, loss, alteration and unauthorised disclosure.

No method of transmitting or storing information is completely secure. Please contact us if you suspect that your personal data or account details have been subject to unauthorised access.

The website may contain links to external websites or services that we do not control. Those parties are responsible for their own processing of personal data. We recommend that you read their privacy policies before providing personal data.

We may update this privacy policy to reflect changes in our business, our services or applicable legislation.

The latest version is published on the website and the “Last updated” date is changed. If a change is material, we will inform you in the way required by applicable law.

If you have questions about this privacy policy, our processing of personal data, or if you wish to exercise any of your rights, you can contact us:

Sun's Out Golf

Max Steinberg

Wivalliusgatan 15, 112 60 Stockholm, Sweden

Email: support@sunsoutgolf.com

Phone: +46 72 579 97 99

Company registration number: 040924-6139

VAT number: SE040924613901