Legal
Privacy policy
Last updated: August 2026
BONAD (Stockholm, Sweden) is the data controller for personal data processed through bonad.store. We collect as little as possible, and we never sell your data.
What we collect and why
Enquiries and email: when you email hello@bonad.store or use a form on this site, we process your name, email address, message and any details you give us about a textile. Purpose: to answer you and to conclude and perform a sale. Legal basis: performance of a contract or pre-contractual steps (GDPR Art. 6(1)(b)) and our legitimate interest in responding to enquiries (Art. 6(1)(f)).
Seller submissions: if you offer us a wall hanging, we process the contact details, description and photographs you send. Legal basis: pre-contractual steps and legitimate interest.
Orders and payments: for a purchase we process your name, delivery address, email, order details and payment status. Card details are never seen or stored by us — payment is handled by our payment provider. Legal basis: contract and legal obligation (Swedish bookkeeping law requires us to keep sales records for 7 years).
Technical data: our host processes server log data (IP address, browser, requested page) as needed to deliver and secure the site. Legal basis: legitimate interest in security and operation.
Cookies and analytics
This site uses only strictly necessary storage by default (for example your language choice and your cookie decision). Non-essential cookies, if any are used in future, are only set after your consent. See the Cookie policy.
Sharing and processors
We share data only with processors who help us run the shop: our website and database host, our email provider, our payment provider and shipping carriers. They act on our instructions under data processing agreements. Some providers may process data outside the EU/EEA; in that case transfers rely on the EU Standard Contractual Clauses or an adequacy decision.
Retention
Enquiries: up to 24 months after our last contact. Seller submissions: up to 24 months. Sales and accounting records: 7 years, as required by law. Server logs: normally up to 12 months.
Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. Where processing is based on consent you may withdraw it at any time. Write to hello@bonad.store and we will answer within one month.
If you believe we handle your data incorrectly you may complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or your local supervisory authority.
Contact
BONAD, Stockholm, Sweden — hello@bonad.store