Privacy policy
Last updated: 14/08-2026
At BELDI ROOTS, we value your privacy and are committed to handling your personal information responsibly, transparently, and securely.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, place an order, communicate with us, subscribe to marketing, or otherwise interact with BELDI ROOTS.
For the purposes of applicable data-protection law, including the General Data Protection Regulation ("GDPR"), the data controller is:
BELDI ROOTS
Email: beldiroots@gmail.com
1. Personal Information We Collect
Depending on how you interact with our store, we may collect information such as:
- Your name, billing address, shipping address, email address and telephone number
- Order information, including products purchased, order history and transaction details
- Payment-related information processed through our payment providers
- Account information if you create a customer account
- Communications you send to us, including customer-service enquiries
- Marketing preferences and newsletter subscriptions
- Device, browser, IP address and website usage information
- Cookie and similar technology information
- Information relating to returns, complaints, refunds or delivery issues
We generally receive this information directly from you, automatically through your use of our website, or from service providers involved in operating our store.
2. How We Use Your Information
We may process your personal information to operate and improve BELDI ROOTS, including to:
Process and fulfil orders.
We use your information to accept payments, confirm purchases, prepare orders, arrange delivery and communicate with you about your order.
Provide customer service.
We use your information to respond to questions, complaints, delivery issues and other requests.
Operate and secure our website.
We may process technical information to maintain our website, prevent fraud, detect misuse and protect our customers and business.
Comply with legal obligations.
Certain information may need to be retained or processed to comply with accounting, tax, consumer-protection and other applicable laws.
Marketing and communication.
Where permitted and where required with your consent, we may send you information about BELDI ROOTS products, launches, collections, offers and other updates.
Improve our store.
We may use website and shopping information to understand how customers use our store and improve our products, content, website and customer experience.
Under GDPR, personal data must have a lawful basis for processing. Depending on the activity, BELDI ROOTS may rely on performance of a contract, compliance with a legal obligation, legitimate interests, or your consent.
3. Shopify
Our online store is hosted by Shopify, which provides the ecommerce platform that allows us to sell our products and services.
Shopify may process certain personal information on our behalf in order to provide ecommerce, hosting, checkout, security, analytics and related services.
As the merchant, BELDI ROOTS generally determines why and how customer information is used for our business purposes and therefore acts as the data controller for those activities. Shopify and other service providers may act as processors or have separate processing responsibilities depending on the service involved.
4. Payments
Payment information is processed through the payment methods and payment providers made available at checkout.
BELDI ROOTS does not need to directly store complete payment-card information when payment details are securely processed by the relevant payment provider.
Those providers may process your information according to their own privacy policies and legal obligations.
5. Shipping and Order Fulfilment
To deliver your order, we may share the information necessary for fulfilment with shipping companies, logistics providers, fulfilment partners and other parties involved in getting your order to you.
This may include your name, delivery address, email address, telephone number and relevant order details.
We only provide information that is reasonably necessary for the service being performed.
6. Service Providers
We may use trusted third parties to help operate BELDI ROOTS, including providers of:
Website hosting and ecommerce services, payment processing, delivery and logistics, email communications, customer support, analytics, fraud prevention, advertising, marketing and IT services.
These providers may receive personal information where necessary to perform services for us.
Where an organisation processes personal information on our behalf, GDPR requires appropriate contractual and data-protection safeguards.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website and checkout to function properly. Others may help us understand website usage, remember preferences, improve our services, measure marketing performance or provide relevant advertising.
Where required by applicable law, non-essential cookies will only be used after you have provided the appropriate consent.
You can manage available privacy and cookie choices through the cookie/privacy controls presented on our website.
Shopify provides customer-privacy tools that allow merchants to configure cookie banners and privacy controls for relevant regions.
8. Marketing
If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may use your email address, telephone number or other permitted contact information to send you BELDI ROOTS news, product launches, offers and updates.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the communication or by contacting us.
You have the right to object to the use of your personal information for direct marketing at any time.
9. International Data Transfers
Some of the technology and service providers we use may process information outside Sweden or the European Economic Area.
Where GDPR applies and personal information is transferred internationally, appropriate safeguards must be used where required, such as adequacy decisions or approved contractual protections.
Shopify explains that transfers outside the EEA must be protected by appropriate legal mechanisms, and the European Commission provides Standard Contractual Clauses for qualifying international transfers.
10. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to fulfil orders, provide customer service, maintain business records, resolve disputes and satisfy legal, accounting or regulatory obligations.
Different categories of information may therefore be retained for different periods.
When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
11. Your Privacy Rights
If GDPR applies to you, you may have rights concerning your personal information, including the right to request access, correction or deletion of your information; request restriction of certain processing; receive certain information in a portable format; object to certain processing; withdraw consent where processing relies on consent; and object at any time to direct marketing.
These rights are subject to the conditions and exceptions provided by applicable law. The Swedish Authority for Privacy Protection confirms rights including access, rectification, erasure, restriction, portability and objection.
To exercise your rights, contact:
beldiroots@gmail.com
We may need to verify your identity before processing certain requests.
12. Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
No internet transmission or electronic storage method can guarantee absolute security, but we work with reputable service providers and take privacy and security seriously.
GDPR requires personal information to be processed with appropriate security measures.
13. Children's Privacy
BELDI ROOTS products and services are not specifically directed toward children.
We do not knowingly seek to collect personal information from children for purposes that would require parental or guardian consent under applicable law.
If you believe a child has provided personal information to us improperly, please contact us.
14. External Links
Our website may contain links to websites, social-media platforms or services operated by third parties.
Once you leave our website, the privacy practices of those third parties are governed by their own privacy policies. We encourage you to review those policies before providing personal information.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, legal requirements or privacy practices.
The latest version will always be published on this page with the updated date shown at the top.
16. Complaints
If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the matter.
You also have the right, where applicable, to submit a complaint to the relevant data-protection supervisory authority.
For customers in Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten — IMY).
17. Contact Us
For questions about this Privacy Policy, your personal information, or your privacy rights, contact us at:
BELDI ROOTS
Sweden
Email: beldiroots@gmail.com