Privacy Policy

1. Who we are

Cover Art Factory is a service operated by Yaygoo AB (Org. No. 559044-2074), Vikingagatan 1, 113 42 Stockholm, Sweden.

Yaygoo AB acts as the data controller for personal data collected through this website and through our services.

2. What information we collect

Depending on how you use our website and services, we may collect the following categories of personal data:

• Contact information: such as name, e-mail address, billing address, shipping address, and phone number if provided.
• Order and transaction data: such as products or services purchased, order history, transaction details, and payment status. We do not store full credit card details.
• Account and customer service data: such as messages, support requests, uploaded information, and other communications with us.
• Technical and usage data: such as IP address, browser type, device information, approximate location, referral source, and interactions with our site.
• Marketing and consent data: such as newsletter preferences, cookie choices, and records of consent where applicable.

3. Why we collect your data

We process personal data in order to:

• process, fulfill, and deliver your orders;
• communicate with you about orders, services, or support matters;
• provide customer service and respond to requests;
• operate, improve, and secure our website and services;
• manage payments, accounting, and legal compliance;
• send service-related notices and relevant updates;
• send marketing communications where you have given consent or where otherwise permitted by law; and
• prevent fraud, misuse, and security incidents.

4. Legal basis for processing

We rely on one or more of the following legal bases under the GDPR, depending on the situation:

• Contract: when processing is necessary to provide our products or services to you or to take steps before entering into a contract.
• Legal obligation: when processing is necessary to comply with accounting, tax, bookkeeping, or other legal requirements.
• Legitimate interests: when processing is necessary for customer support, service improvement, site security, fraud prevention, or similar legitimate business purposes, provided that your rights and interests do not override those interests.
• Consent: when required, for example for certain marketing communications or optional cookies and tracking technologies.

5. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as long as required by applicable law.

• Order and accounting records: retained as long as required by applicable bookkeeping, accounting, and tax laws.
• Customer service correspondence: retained for as long as reasonably necessary to handle the matter and maintain service records.
• Marketing preferences and consent records: retained until you withdraw consent, unsubscribe, or we no longer need the record for compliance purposes.
• Technical and analytics data: retained for the periods set by our systems, analytics settings, cookie controls, and applicable legal requirements.

6. Your rights under GDPR

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure of your personal data;
• request restriction of processing;
• object to certain processing, including direct marketing;
• receive personal data in a portable format where applicable; and
• withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at privacy@coverartfactory.com.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

7. Sharing your data

We may share personal data with trusted service providers and partners who help us operate our business and provide our services.

Depending on how you interact with our store, this may include providers involved in:

• e-commerce platform and store operations;
• payments and transaction processing;
• hosting, infrastructure, and website delivery;
• analytics, performance, and security monitoring;
• customer service and communications; and
• e-mail and marketing tools.

We may also disclose personal data where necessary to comply with law, protect our rights, prevent fraud, or respond to lawful requests from authorities.

We do not sell your personal data.

8. International transfers

Some of our service providers may process personal data outside the EU/EEA.

Where personal data is transferred outside the EU/EEA, we take steps intended to ensure an appropriate level of protection, such as relying on standard contractual clauses or other lawful transfer mechanisms where required.

9. Cookies and tracking

We use cookies and similar technologies to operate our site, remember preferences, measure performance, understand how visitors use the site, and support marketing where permitted.

These technologies may include:

• Strictly necessary cookies for core site and checkout functionality;
• Analytics cookies to understand traffic, usage, and site performance; and
• Marketing or advertising cookies where applicable and permitted.

You can manage certain cookie choices through our cookie banner or through your browser settings. Please note that disabling some cookies may affect how the site functions.

10. Data security

We take reasonable technical and organizational measures to help protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Contact us

If you have any privacy-related questions, requests, or concerns, please contact:

Yaygoo AB / Cover Art Factory
Vikingagatan 1
113 42 Stockholm
Sweden

E-mail: privacy@coverartfactory.com

If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with IMY.