PRIVACY POLICY

This website is managed by SPACES WITHIN AB (hereinafter referred to as SPACES WITHIN). SPACES WITHIN is registered in Stockholm, Sweden (org no. 559285-0522). Data privacy is of high importance for SPACES WITHIN and we want to be open and transparent with our processing of your personal data. SPACES WITHIN AB (“SPACES WITHIN”, “we”, “us”) is committed to protecting your privacy and handling your personal data responsibly in accordance with the EU General Data Protection Regulation (GDPR). This policy explains what personal data we collect, how we use it, and what rights you have as a user of our website spaceswithin.se.

Who is the controller of your personal data?

The Swedish company, SPACES WITHIN, is the controller of the personal data you submit to us and responsible for your personal data under applicable data protection law.

What data do we collect and why?

We collect personal data when you: make a purchase, subscribe to our newsletter, contact customer service, or browse our site (via cookies). We use this data to fulfil orders, communicate with you, comply with legal obligations, send marketing emails (with consent), and improve our website.

Where do we store your data?

The data that we collect from you is stored within the European Economic Area (“EEA”) and may, in some cases, be transferred outside the EEA. If such a transfer occurs, it will always be protected through appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs) or other approved mechanisms ensuring adequate protection of your data.

Who access your data?

Your data may be shared within SPACES WITHIN. We never pass on, sell or swap your data for marketing purposes to third parties outside the SPACES WITHIN. Your information may be

shared only with trusted partners that help us operate our business (e.g., payment providers, delivery companies, IT service providers).

What is the legal ground for processing?

For every specific processing of personal data we collect from you, we will inform you whether the provision of personal data is statutory or required to enter a contract and whether it is an obligation to provide the personal data and possible consequences if you choose not to.

How long do we store your data?

We retain your data only for as long as necessary for the purposes it was collected: Order and payment information: stored for up to 7 years (in line with Swedish accounting law). Newsletter subscriptions: until you unsubscribe. Customer service correspondence: for up to 12 months after resolution.

Our website uses cookies to enhance functionality, analyse site traffic, and improve your browsing experience. Cookies are small text files stored on your device. You can manage or disable cookies through your browser settings. For more information, please read our separate Cookie Policy.

What are your rights?

Right to access: You have the right to request information about the personal data we hold on you at any time. You can contact SPACES WITHIN that will provide you with your personal data via e-mail.

Right to portability: Whenever SPACES WITHIN process your personal data by automated means based on your consent or based on an agreement you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us.

Right to rectification: You have the right to request rectification of your personal data if they are incorrect, including the right to have incomplete personal data completed.

Right to erasure: You have the right to erase any personal data processed by SPACES WITHIN at any time except for the following situations:

- You have an ongoing matter with Customer Service

- You have an open order which has not yet been shipped or partially shipped

- You have an unsettled debt with SPACES WITHIN, regardless of the payment method

- If you are suspected or have misused our services - if you have made any purchase, we will keep your personal data in connection to your transaction for bookkeeping rules

Your right to object to processing based on legitimate interest: You have the right to object to the processing of your personal data that is based on SPACES WITHIN legitimate interest. SPACES WITHIN will not continue to process the personal data unless we can demonstrate a legitimate ground for the process which overrides your interest and rights or due to legal claims.

Your right to object to direct marketing: You have the right to object to direct marketing.

You can opt-out from direct marketing by following the instruction in each marketing e-mail.

Right to restriction: You have the right to request that SPACES WITHIN restricts the process of your personal data under the following circumstances:

- If you object to a processing based SPACES WITHIN legitimate interest, SPACES WITHIN shall restrict all processing of such data pending the verification of the legitimate interest.

- If you have claim that your personal data is incorrect, SPACES WITHIN must restrict all processing of such data pending the verification of the accuracy of the personal data.

- If the processing is unlawful you can oppose the erasure of personal data and instead request the restriction of the use of your personal data instead

- If SPACES WITHIN no longer needs the personal data but it is required for your to make of defending legal claims.

How can you exercise your rights?

We take data protection very seriously and therefore we have dedicated customer service personnel who handles your requests in relation to your rights stated above. You can always reach them at shop@spaceswithin.se Right to complain with a supervisory Authority: If you consider SPACES WITHIN to process your personal data in an incorrect way you can contact us. You also have the right to file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) via www.imy.se.

SPACES WITHIN AB

Vanadisvägen 24

113 46 Stockholm

Sweden

Email: shop@spaceswithin.se

Last updated: October 2025