YARD ETC – Privacy Policy
Last updated: 2026-08-22
At YARD ETC, we respect your privacy and handle personal data responsibly.
This Privacy Policy explains what personal data we collect, why we use it, how long we keep it, who we may share it with and what rights you have.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection legislation.
1. Who is responsible for your personal data?
The data controller is:
Yard etc AB
Company registration number: 556967-8282
Olofsdalsvägen 27
302 41 Halmstad
Sweden
Email: info@yardetc.com
YARD ETC is the data controller for the personal data described in this Privacy Policy.
YARD ETC has not appointed a Data Protection Officer (DPO), unless otherwise stated here:
2. What personal data do we process?
Depending on how you interact with us, we may process:
- name;
- email address;
- telephone number;
- billing address;
- delivery address;
- country and, where applicable, region/province;
- company name where provided;
- order number and order history;
- products purchased;
- payment and transaction information;
- information relating to returns, refunds and complaints;
- correspondence with YARD ETC;
- marketing preferences;
- information concerning cookie and marketing consent;
- IP address;
- browser and device information;
- information concerning how you use our Website; and
- information necessary to maintain Website and payment security and prevent fraud.
We aim to collect only information that is necessary for the relevant purpose.
3. When you place an order
When you purchase products from us, we process personal data to:
- process your order;
- take payment;
- deliver your products;
- communicate with you about your order;
- administer returns and withdrawals;
- handle complaints;
- provide customer service;
- maintain appropriate transaction records; and
- comply with legal obligations.
The main legal basis is that processing is necessary to perform the contract with you.
Some processing is necessary because we are legally required to do so, for example accounting and tax-related record keeping.
4. Information required to place an order
You cannot complete an order without providing the information necessary for us to process and deliver it.
For example, we normally need your name, email address, delivery address and payment information.
If you do not provide information that is necessary for the purchase, we may not be able to accept or fulfil your order.
We do not require you to create an account in order to purchase products.
5. Payment providers
We use third-party payment providers to process payments.
Depending on your country and selected payment method, these may include:
- Klarna;
- Link;
- Stripe Card Payments;
- Apple Pay;
- Google Pay;
- Amazon Pay; and
- other payment providers made available through the Website.
Payment providers may process personal data for purposes such as:
- payment processing;
- authentication;
- fraud prevention;
- security;
- credit assessment;
- regulatory compliance; and
- managing the payment relationship.
Some payment providers may act as independent data controllers for part of their processing. Their own privacy information will then apply to that processing.
6. Delivery and logistics
We share the information necessary to deliver your order with our delivery and logistics partners.
This may include your:
- name;
- delivery address;
- telephone number;
- email address;
- order number; and
- information needed to deliver the goods.
Normally we ship with following carriers:
Sweden: DHL
Scandinavia: DHL and Fedex
Europe: DHL, Fedex and UPS
International: Fedex and UPS
The legal basis is normally performance of the contract.
7. Customer service
When you contact us, we process the information necessary to respond to your enquiry.
This may include information you provide by email, telephone or other communication channels.
The legal basis may be performance of the contract, taking steps at your request before entering into a contract, compliance with legal obligations or our legitimate interest in providing customer service and managing our business.
8. Returns, withdrawals and complaints
When you return a product, exercise your right of withdrawal or make a complaint, we process the information necessary to identify your order and handle the matter.
This may include your name, contact details, order information, photographs and correspondence.
The legal basis is normally performance of the contract and/or compliance with legal obligations.
9. Accounting and legal obligations
We process and retain certain personal data because we are required to comply with applicable accounting, tax, consumer protection and other legal requirements.
Information retained for these purposes is kept for the period required by the applicable legislation.
10. Security and fraud prevention
We may process information relating to orders, payments, IP addresses, devices and Website activity to prevent fraud, misuse and security incidents and to protect our customers, Website and business.
The legal basis may be our legitimate interest in protecting our business and customers or compliance with a legal obligation.
Payment providers may independently perform fraud or risk assessments in connection with a payment.
11. Marketing
We may send marketing communications about YARD ETC products, news and offers where permitted by applicable law.
Where consent is required, we rely on your consent.
You can withdraw your consent at any time by:
- clicking the unsubscribe link in a marketing email; or
- contacting us at info@yardetc.com.
Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
Transactional communications, such as order confirmations and delivery information, are not marketing communications and may continue to be sent where necessary.
12. Website analytics and marketing technologies
We may use analytics, advertising and similar technologies to understand how visitors use the Website, improve the Website and, where permitted, measure or personalise marketing.
Non-essential technologies that require consent will only be activated after the required consent has been obtained.
The technologies and cookies used on the Website are described in our Cookie Policy.
13. Cookies
Our Website uses cookies and similar technologies.
Some cookies are necessary for the Website and webshop to function, including shopping-cart, checkout, security and consent-management functions.
Other cookies may be used for:
- analytics;
- statistics;
- preferences;
- advertising;
- marketing;
- campaign measurement; and
- personalised content.
Where required by law, we ask for your consent before using non-essential cookies and similar technologies.
You can change or withdraw your cookie choices at any time through our cookie settings.
More information is available in our Cookie Policy.
14. Who receives your personal data?
We may share personal data with companies and service providers that are necessary to operate our business and fulfil your order.
These may include:
- ecommerce and website hosting providers;
- payment providers;
- delivery and logistics companies;
- accounting providers;
- customer-service providers;
- email and newsletter providers;
- IT and security providers;
- fraud-prevention providers;
- analytics providers; and
- advertising and marketing providers where applicable.
Where a company processes personal data on our behalf, we use appropriate contractual and organisational safeguards.
We may also disclose personal data where required by law, court order or a competent public authority.
We do not sell your personal data.
15. International transfers
Some of our service providers may process personal data outside Sweden or the European Economic Area.
If personal data is transferred outside the EEA, we ensure that the transfer is based on an appropriate legal mechanism under GDPR, such as:
- an adequacy decision;
- EU Standard Contractual Clauses; or
- another lawful transfer mechanism.
16. How long do we keep your personal data?
We do not retain personal data longer than necessary for the purposes for which it was collected, unless we are legally required or otherwise permitted to retain it.
Different categories of data are retained for different periods.
Order and transaction information
Retained for as long as necessary to administer the customer relationship and for the period required by applicable accounting, tax and other legal requirements.
Customer-service correspondence
Normally retained for as long as necessary to handle the matter and, where appropriate, for a reasonable period afterwards.
Returns and complaints
Retained for as long as necessary to administer the matter and meet applicable legal requirements.
Marketing information
Retained until you unsubscribe or withdraw your consent, subject to information we may need to retain to demonstrate consent or comply with legal requirements.
Cookie and analytics information
Retained for the periods stated in our Cookie Policy.
17. Your rights
Depending on the circumstances and applicable law, you have the right to:
- request access to your personal data;
- request correction of inaccurate personal data;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- object to direct marketing;
- request data portability;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a supervisory authority.
Some rights are subject to legal conditions and exceptions.
To exercise your rights, contact:
We will normally respond within the period required by GDPR.
We may need to verify your identity before processing a request.
18. Direct marketing
You have an absolute right to object to the processing of your personal data for direct marketing.
If you object, we will stop processing your personal data for direct marketing purposes.
You can also unsubscribe using the unsubscribe link in our marketing emails.
19. Automated decision-making
Some payment providers may use automated decision-making or profiling for purposes such as fraud prevention or credit assessment.
Where such processing is carried out by an independent provider, the provider’s own privacy information applies.
If YARD ETC itself introduces automated decision-making that produces legal or similarly significant effects, we will provide the information required by GDPR.
20. Data security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, destruction and other unlawful processing.
No method of transmitting or storing data is completely secure.
21. Children
The YARD ETC online shop is not specifically directed at children.
We do not knowingly use children’s personal data for marketing purposes.
If you believe that a child has provided personal data to us in circumstances where this should not have happened, please contact us.
22. Changes to this Privacy Policy
We may update this Privacy Policy when our website, business activities, technology or legal requirements change.
The latest version will always be available on the Website and will show the date on which it was last updated.
23. Complaints
If you have concerns about how we process your personal data, please contact us first:
You also have the right to lodge a complaint with the competent data protection supervisory authority.
For Sweden, this is:
Integritetsskyddsmyndigheten (IMY)
If you live or work in another EU/EEA country, you may also have the right to contact the data protection authority in that country.
24. Contact
Yard etc AB
Olofsdalsvägen 27
302 41 Halmstad
Sweden
Email: info@yardetc.com
