Privacy policy
1. Who is responsible for your personal data
PLWD AB, Swedish company reg. no. 559278-5454, Billdals Hagenväg 35 B, SE-427 37 Billdal, Sweden, is the controller of your personal data when you visit plwd.se, shop with us, create an account, request a quote or contact us. Questions about personal data can be sent to hello@plwd.se.
Personal data is any information that can be linked to you as a person, directly or indirectly, such as name, address, e-mail address, phone number, IP address and order history.
2. What data we process, why and for how long
We only process data that you provide yourself or that arises when you use the site. We do not buy data about you from others.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling your order: production, payment, delivery, order confirmation and shipping notices | Name, address, e-mail, phone, order contents, payment reference (not card number), delivery country | Contract (art. 6(1)(b)) | During the order and then 7 years after the end of the financial year under the Swedish Accounting Act |
| Customer service, complaints and withdrawals | Contact details, order history, correspondence, photos you send | Contract and legal obligation (Consumer Sales Act) | While the matter is open and then 3 years after delivery (the complaint period), at most 7 years under the Accounting Act |
| Customer account on plwd.se | E-mail, name, password (encrypted), addresses, saved carts, order history | Contract | Until you delete the account or after 3 years of inactivity; order data is kept as in the row above |
| Quote request via the quote tool | Name, e-mail, phone, uploaded planner PDF, your choices | Steps prior to a contract at your request (art. 6(1)(b)) | 12 months after last contact, or until you ask us to delete it |
| Newsletter, discount code and cart reminders (see section 6) | E-mail, first name, cart contents, time of consent | Consent (art. 6(1)(a)) | Until you withdraw consent; guest carts and e-mail addresses are deleted after 30 days of inactivity |
| Protection against fraud, bots and abuse; operations and troubleshooting | IP address, browser, device, timestamp, logs | Legitimate interest (art. 6(1)(f)): secure operation | Server logs 30 days; payment-related data as in the first row |
| Showing the site in the right language and with the right prices | Language, currency, price display with or without VAT | Legitimate interest: a working site; stored in cookies you set yourself | See the cookie table in section 9 |
| Statistics on how the site is used | Aggregated page views without cookies and without individual tracking | Legitimate interest: improving the site | Aggregated statistics; no personal data is stored |
You are not obliged to give us data, but without name, address and e-mail we cannot accept an order or create an account.
3. Who we share data with
We never sell your data. We share it only with companies that help us run the site and deliver your order, and only the data that is needed. Those who process data on our behalf (processors) have agreements with us that govern what they may do.
| Recipient | What they do | Data | Where data is processed |
|---|---|---|---|
| The workshop that makes your order | Production and dispatch of your order | Name, delivery address, phone, e-mail, order contents | Sweden |
| DB Schenker and other carriers | Transport and delivery notifications | Name, address, phone, e-mail | EU/EEA, Norway |
| Stripe Payments Europe, Ltd. (Ireland) | Card and Klarna payments, fraud protection. Stripe is an independent controller for the payment | Payment details, name, e-mail, IP address, amount | EU, with support in the USA under Stripe's terms |
| Klarna Bank AB | Klarna's payment options, independent controller | Data you provide to Klarna | EU |
| Supabase, Inc. | Database, login and file storage for the site | All data in section 2 | Servers in the EU (Stockholm) |
| Netlify, Inc. | Hosting and operation of plwd.se | IP address, logs, requests to the site | EU and USA |
| Cloudflare, Inc. | Bot protection (Turnstile) at login, sign-up and the quote tool | IP address, browser information | EU and USA |
| Postmark (ActiveCampaign, LLC) | Order confirmations, login links and other transactional e-mails | E-mail, name, e-mail content | USA |
| Mailchimp (Intuit Inc.) | Newsletters and reminders you have consented to | E-mail, first name, consent | USA |
| OpenAI, L.L.C. | Reading planner PDFs in the quote tool, see section 5 | Page images from your plan | USA |
| Accounting and audit firm | Bookkeeping as required by law | Order data | Sweden |
| Authorities | When required by law, e.g. the Swedish Tax Agency or Swedish Customs for exports to Norway | The data required by law | Sweden, Norway |
4. Transfers outside the EU/EEA
We primarily choose providers that process data within the EU/EEA. Postmark, Mailchimp, OpenAI and parts of Netlify's and Cloudflare's services process data in the USA. Transfers are based on the European Commission's adequacy decision for companies certified under the EU–U.S. Data Privacy Framework, and otherwise on the Commission's standard contractual clauses. You can obtain a copy of the safeguards in place by contacting hello@plwd.se.
5. The quote tool and AI reading of your plan
In the quote tool you can upload a planner PDF from the IKEA kitchen planner. We read which cabinets and dimensions it contains in order to give you a quote.
If the PDF contains text, our own software reads it. If it contains only images, the page images are sent to OpenAI, which returns a list of cabinets and dimensions. OpenAI does not keep the images after reading them and does not use them to train its models. A plan normally contains no personal data beyond the name you may have given the drawing, and we do not use that name. We nevertheless ask you not to put other personal data in the drawing.
Your uploaded file and the quote are kept by us for 12 months after last contact so that you can come back to it. You can ask us to delete it at any time.
6. Newsletter, discount code and cart reminders
Newsletter. If you sign up for our newsletter, we store your e-mail address and first name in Mailchimp and send news and offers from PLWD. You can unsubscribe at any time via the link in every e-mail or under My account.
Discount code and reminder without an account. If you shop as a guest, you can choose to receive a 5 % discount code in exchange for your e-mail address and consent to reminders. The code is valid for 14 days, can be used once and is issued once per e-mail address. We store the e-mail address and your consent together with the cart, add the address to Mailchimp, and may send a reminder about the cart no earlier than one day after you last changed it and at most once per cart. Cart and e-mail address are deleted automatically after 30 days without activity.
Reminder for logged-in customers. If you have an account and have chosen to receive news, we may send the same kind of reminder about a cart you left. You can turn this off under My account.
All such e-mails are based on your consent, which you can withdraw at any time via the unsubscribe link in the e-mail, under My account or by e-mailing hello@plwd.se. Withdrawing consent does not affect the lawfulness of what we did before.
7. Your rights
You have the right to:
- access the personal data we hold about you (a copy), at any time and free of charge
- have inaccurate data corrected
- have data erased when it is no longer needed for the purpose or when you withdraw consent; data we must keep under the Accounting Act or to handle a complaint cannot be erased early
- restrict processing in certain cases, for example while we examine an objection
- object to processing based on legitimate interest, and always to direct marketing
- receive the data you have given us in a machine-readable format (data portability)
- withdraw consent at any time.
Contact hello@plwd.se and we will help you. We reply within one month. To protect your data we may need to verify that it is you asking.
If you believe we are processing your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se, or to the data protection authority in the EU/EEA country where you live. We make no automated decisions that have legal or similarly significant effects on you.
8. Security
Your data is stored in a database within the EU with encrypted transfer and access control, so that only staff who need the data can access it. Passwords are stored only in encrypted form. We never handle your card details; they go directly to Stripe. In the event of a personal data breach that may pose a risk to you, we inform you and IMY in accordance with the GDPR.
9. Cookies
We only use cookies that are needed for the site to work or that store a choice you have made yourself. We therefore do not ask for consent. We use no cookies for advertising or tracking, and our visitor statistics are cookie-free.
| Cookie | Set by | Purpose | Stored |
|---|---|---|---|
| plwd_cart | plwd.se | Remembers your cart when you are not logged in | 1 year |
| sb-…-auth-token | plwd.se (Supabase) | Keeps you logged in to your account | Up to 400 days |
| NEXT_LOCALE | plwd.se | Remembers the language you chose | Until the browser is closed |
| plwd_prices | plwd.se | Remembers whether you want to see prices with or without VAT | 1 year |
| __stripe_mid, __stripe_sid | Stripe | Fraud protection at checkout | 30 minutes to 1 year |
| __cf_bm | Cloudflare | Bot protection at login, sign-up and the quote tool | 30 minutes |
You can delete cookies in your browser settings. Your cart and login will then be lost.
10. Changes and contact
We update this policy when our processing changes, for example when we change a provider. The current version is always available at plwd.se/en/integritet with its version date. For material changes affecting you as a customer, we inform you by e-mail.
PLWD AB, reg. no. 559278-5454
Billdals Hagenväg 35 B, SE-427 37 Billdal, Sweden
hello@plwd.se
Version 2026-10-14
Cookies
We only use cookies that the shop needs to work, so we do not ask for consent. We use no cookies for advertising or tracking, and our web analytics are cookie-free.
| Name | From | Purpose | Kept for |
|---|---|---|---|
| plwd_cart | plwd.se | Remembers your cart when you are not logged in. | 1 year |
| sb-…-auth-token | plwd.se (Supabase) | Keeps you logged in. | Up to 400 days |
| NEXT_LOCALE | plwd.se | Remembers the language you chose. | Until you close the browser |
| plwd_prices | plwd.se | Remembers whether you want to see prices with or without VAT. | 1 year |
| __stripe_mid, __stripe_sid | Stripe | Stripe protects the payment against fraud (checkout only). | 30 minutes to 1 year |
| __cf_bm | Cloudflare | Cloudflare protects the website against automated traffic. | 30 minutes |