Privacy Policy

Last Updated: September 2, 2026

Maison De Sheroski (operated by Sheroski Sverige AB, “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. 

This Privacy Policy explains how Maison De Sheroski collects, uses, stores, discloses, and protects personal information when you visit our website, create an account, place an order, contact us, subscribe to our communications, or otherwise interact with our online store and services.

As we sell leather jackets and related products online to customers in Sweden and potentially other countries, we process personal data in accordance with applicable data-protection laws, including the EU General Data Protection Regulation (GDPR) and applicable Swedish data-protection legislation.

Under the GDPR, information relating to an identified or identifiable individual—including information such as names, addresses, IP addresses, and certain cookie identifiers—may constitute personal data.

1. Who We Are

The data controller responsible for your personal data is:

Brand Name: Maison De Sheroski
Legal Business Name: Sheroski Sverige AB
Business/Company Registration Number (Org.nr): 
Registered Address: Termometergatan 41, 41841, Gothenburg, Sweden
Email: info@maisondesheroski.com
Telephone: +46 76-031 66 48
Website: https://maisondesheroski.com/

For questions regarding this Privacy Policy or how we process your personal data, please contact us using the details above.

 

2. What Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal data.

A. Information You Provide Directly

When you purchase a product, create an account, contact us, or otherwise interact with us, we may collect:

  • Full name

  • Billing address

  • Delivery/shipping address

  • Email address

  • Telephone/mobile number

  • Account login information

  • Order information

  • Products purchased

  • Product size, colour, and other order selections

  • Returns and exchange information

  • Customer-service communications

  • Information you provide when contacting us

  • Information submitted through contact forms

  • Reviews, feedback, photographs, or other content you voluntarily submit

We only request information that is reasonably necessary for the relevant purpose.

B. Payment Information

When you make a purchase, payment information may be processed by our third-party payment service providers.

Depending on the payment method available on our website, payment providers may process information such as:

  • Payment card details

  • Payment account details

  • Transaction amount

  • Currency

  • Billing information

  • Transaction identifiers

  • Fraud-prevention information

Where possible, payment card information is processed directly by the relevant payment provider rather than being stored by Maison De Sheroski.

Payment providers currently used by Maison De Sheroski:
PayPal, Klarna, Shopify Payments

You should review the privacy policy of the applicable payment provider for information about its independent processing of your personal data.

C. Technical and Device Information

When you visit our website, certain information may be automatically collected, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Screen resolution

  • Language settings

  • Time zone

  • Referring website

  • Pages visited

  • Date and time of visits

  • Approximate location derived from IP address

  • Website interactions

  • Diagnostic and security information

  • Cookie identifiers and similar technologies

Some of this information may constitute personal data under applicable law.

D. Marketing Information

If you subscribe to our newsletter or marketing communications, we may collect:

  • Name

  • Email address

  • Marketing preferences

  • Subscription/unsubscription information

  • Information about interactions with our marketing communications, where permitted

We may use this information to send information about Maison De Sheroski products, promotions, new collections, offers, and other marketing communications where legally permitted.

3. How We Collect Personal Data

We may collect personal data through:

  • Our website

  • Online checkout

  • Customer accounts

  • Contact forms

  • Email communications

  • Telephone or other customer-service communications

  • Newsletter subscriptions

  • Product reviews

  • Returns and exchange requests

  • Cookies and similar technologies

  • Analytics and advertising technologies

  • Payment providers

  • Delivery and logistics providers

  • Other service providers acting on our behalf

We may also receive limited personal data from third parties when necessary to provide our services, process payments, prevent fraud, deliver orders, or comply with legal obligations.

4. Why We Use Your Personal Data

We may process your personal data for the following purposes:

4.1 Processing and Delivering Orders

We use your personal data to:

  • Process purchases

  • Confirm orders

  • Process payments

  • Prepare and dispatch products

  • Deliver orders

  • Provide order tracking

  • Communicate about your order

  • Handle cancellations

  • Process returns and exchanges

  • Provide refunds

  • Resolve order-related problems

4.2 Customer Service

We may use your information to:

  • Respond to enquiries

  • Provide customer support

  • Investigate complaints

  • Assist with sizing or product questions

  • Respond to returns or warranty-related matters

  • Maintain records of customer-service communications

4.3 Website Operation

We use technical information to:

  • Operate our website

  • Maintain website functionality

  • Improve website performance

  • Diagnose technical problems

  • Protect the website from abuse

  • Detect and prevent fraudulent or malicious activity

  • Maintain website security

4.4 Marketing

Where permitted by law, we may use your personal data to:

  • Send newsletters

  • Send promotional offers

  • Inform you about new products

  • Inform you about collections and sales

  • Measure marketing performance

  • Personalise marketing communications

  • Show relevant advertising

Where consent is required, we will request your consent before carrying out the relevant processing.

4.5 Analytics and Website Improvement

We may use analytics technologies to understand:

  • How visitors use our website

  • Which products or pages are viewed

  • Website traffic

  • Customer journeys

  • Technical performance

  • Conversion rates

  • General trends

This helps us improve our products, website, services, and customer experience.

4.6 Legal and Regulatory Compliance

We may process personal data when necessary to:

  • Comply with applicable laws

  • Maintain accounting and financial records

  • Meet tax obligations

  • Respond to lawful requests from authorities

  • Establish, exercise, or defend legal claims

  • Prevent fraud and other unlawful activities

  • Protect our legal rights and property

5. Legal Bases for Processing

Under the GDPR, we must have a valid legal basis for processing personal data.

Depending on the circumstances, Maison De Sheroski may rely on the following legal bases:

A. Performance of a Contract

We process personal data where necessary to enter into or perform a contract with you.

For example, when you place an order, we need your name, delivery address, contact information, and relevant order information to fulfil that purchase.

B. Legal Obligation

We may process personal data when necessary to comply with a legal obligation.

Examples include accounting, taxation, financial records, and responding to lawful requests from authorities.

C. Legitimate Interests

We may process personal data where necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.

Our legitimate interests may include:

  • Operating and improving our online store

  • Protecting our website and systems

  • Preventing fraud

  • Maintaining network and information security

  • Managing customer relationships

  • Improving products and services

  • Defending legal claims

  • Certain forms of direct marketing where legally permitted

Where we rely on legitimate interests, we consider the impact of the processing on your privacy.

D. Consent

Where required by law, we rely on your consent.

For example, consent may be required for certain:

  • Marketing communications

  • Non-essential cookies

  • Analytics technologies

  • Advertising technologies

  • Personalised advertising

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies.

Cookies are small files or pieces of information stored on your device when you visit a website.

We may use cookies for purposes such as:

Necessary Cookies

These cookies may be required to:

  • Operate the website

  • Maintain your shopping cart

  • Process checkout

  • Keep the website secure

  • Remember essential preferences

  • Authenticate customer accounts

Preference Cookies

These may remember choices such as:

  • Language

  • Currency

  • Region

  • Website preferences

Analytics Cookies

These may help us understand how visitors use our website and measure website performance.

Marketing and Advertising Cookies

Where permitted and where you have provided the required consent, these technologies may be used to:

  • Measure advertising campaigns

  • Display relevant advertising

  • Understand interactions with advertisements

  • Create advertising audiences

  • Measure conversions

  • Personalise advertising

Non-essential cookies should only be activated in accordance with applicable cookie and data-protection requirements.

You can manage your cookie preferences through our Cookie Settings tool, where available.

You can also delete or block cookies through your browser settings. However, blocking necessary cookies may affect website functionality.

Swedish privacy authorities distinguish between cookie/storage requirements and the subsequent processing of personal data obtained through cookies; the latter may be subject to GDPR requirements.

7. Third-Party Service Providers

We may use trusted third-party service providers to operate our business and website.

These providers may process personal data on our behalf where necessary to provide their services.

Examples may include:

  • Website hosting providers

  • E-commerce platforms

  • Payment processors

  • Banks and payment institutions

  • Shipping and delivery companies

  • Order fulfilment providers

  • Customer-service platforms

  • Email and newsletter providers

  • Analytics providers

  • Advertising platforms

  • Fraud-prevention services

  • IT and security providers

  • Accounting and bookkeeping providers

  • Legal and professional advisers

We seek to ensure that third-party processors process personal data appropriately and only for authorised purposes.

Where a third party acts as our processor, we may enter into an appropriate data-processing agreement where required by applicable law.

8. Sharing Personal Data

We do not sell your personal data to third parties.

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy.

For example, we may share relevant information with:

  • Payment providers to process transactions

  • Delivery companies to deliver your orders

  • IT and hosting providers to operate our website

  • Customer-support providers

  • Email service providers

  • Analytics providers

  • Advertising providers, where applicable and legally permitted

  • Fraud-prevention providers

  • Accountants and professional advisers

  • Government authorities where legally required

We only share information that is reasonably necessary for the relevant purpose.

9. International Transfers

Some of our service providers may be located outside Sweden or the European Economic Area (“EEA”).

If personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data-protection law.

Depending on the circumstances, safeguards may include:

  • An adequacy decision of the European Commission

  • Standard Contractual Clauses approved by the European Commission

  • Other legally recognised transfer mechanisms or safeguards

If applicable, further information about international transfers and the safeguards used can be obtained by contacting us.

10. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Different categories of information may therefore be retained for different periods.

For example:

Order and transaction information

We may retain order, payment, and accounting information for as long as necessary to fulfil the transaction and comply with applicable accounting, tax, and legal requirements.

Customer-service communications

We generally retain customer-service correspondence for as long as reasonably necessary to resolve the matter, maintain appropriate records, and protect our legal interests.

Marketing information

If you subscribe to marketing communications, we may retain your subscription information until you unsubscribe or we otherwise determine that the information is no longer necessary.

Account information

If you maintain an online customer account, we may retain the information associated with your account while it remains active and for a reasonable period afterward where necessary for legitimate business or legal purposes.

Website and technical information

Technical and analytics information may be retained according to the retention periods established by the relevant technology or service provider and our internal policies.

When personal data is no longer required, we will delete it, anonymise it, or securely dispose of it where appropriate.

11. Your GDPR Rights

Subject to applicable legal conditions and exceptions, you may have the following rights concerning your personal data.

Right of Access

You may request confirmation as to whether we process personal data about you and request access to that information.

Right to Rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to Erasure

You may request that we delete your personal data in certain circumstances.

This is sometimes referred to as the “right to be forgotten.”

However, this right is not absolute. We may need to retain certain information where we have a legal obligation or another lawful reason to do so.

Right to Restriction

You may request restriction of processing in certain circumstances.

Right to Data Portability

Where applicable, you may request certain personal data in a structured, commonly used, and machine-readable format and ask that it be transferred to another controller.

Right to Object

You may object to certain processing based on legitimate interests.

You also have the right to object to processing of personal data for direct marketing purposes.

Right to Withdraw Consent

Where we process your personal data based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that occurred before you withdrew your consent.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights concerning decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects.

We will provide additional information where such processing is applicable.

The GDPR requires organisations to provide information about processing and facilitate the exercise of data-subject rights in a clear and accessible manner.

12. How to Exercise Your Rights

To exercise any of your privacy rights, please contact us:

Email: info@maisondesheroski.com
Postal Address: Termometergatan 41, 41841, Gothenburg, Sweden

Please clearly describe your request and provide enough information for us to reasonably verify your identity where necessary.

We may request additional information to confirm that the person making the request is the individual concerned or their authorised representative.

We generally do not charge a fee for exercising your GDPR rights. However, applicable law may allow a reasonable fee or refusal where requests are manifestly unfounded or excessive.

13. Marketing Communications

If you have subscribed to our marketing communications, we may send you information about:

  • Leather jackets

  • New collections

  • New product launches

  • Discounts

  • Sales

  • Special offers

  • Promotions

  • Maison De Sheroski news

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in our marketing emails; or

  • Contacting us using the details in this Privacy Policy.

After unsubscribing, we may retain limited information necessary to ensure that we do not send you unwanted marketing communications.

Transactional messages, such as order confirmations, shipping notifications, payment notifications, and important service communications, are not marketing communications and may still be sent where necessary.

14. Data Security

We take reasonable technical and organisational measures designed to protect personal data against:

  • Unauthorised access

  • Accidental loss

  • Destruction

  • Alteration

  • Unauthorised disclosure

  • Unlawful processing

  • Other security risks

Security measures may include access controls, authentication procedures, encryption where appropriate, secure hosting, monitoring, backups, and other technical and organisational safeguards.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Swedish data-protection guidance emphasises that appropriate security measures are required for personal-data processing, including processing conducted through email and other digital systems.

15. Personal Data Breaches

If we become aware of a personal-data breach, we will assess the breach and take appropriate action in accordance with applicable law.

Where required by the GDPR, we will notify the competent supervisory authority within the applicable statutory timeframe and notify affected individuals where legally required.

16. Children's Privacy

Our website is intended for a general audience and is not specifically directed toward children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal data to us unlawfully, please contact us so that we can investigate and take appropriate action.

17. Links to Other Websites

Our website may contain links to third-party websites, social-media platforms, payment providers, delivery services, or other websites.

If you follow a third-party link, that website may collect and process personal data under its own privacy policy.

Maison De Sheroski is not responsible for the privacy practices, content, security, or policies of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal data.

18. Social Media

We may operate social-media accounts or include social-media features on our website.

If you interact with our social-media pages or features, the relevant social-media platform may independently collect and process personal data.

Your interactions with those platforms are governed by the privacy policies and terms of the respective providers.

Where social-media technologies are integrated into our website, we will use them in accordance with applicable privacy and cookie requirements.

19. Fraud Prevention and Security

We may process personal data to detect, investigate, and prevent:

  • Fraudulent transactions

  • Payment abuse

  • Account abuse

  • Identity misuse

  • Unauthorised access

  • Cybersecurity incidents

  • Other unlawful activity

Where legally permitted, we may share relevant information with payment providers, fraud-prevention providers, financial institutions, law-enforcement authorities, or other appropriate parties.

20. Legal Claims and Disputes

We may process and retain personal data where reasonably necessary to:

  • Establish legal claims

  • Exercise legal rights

  • Defend legal claims

  • Investigate disputes

  • Comply with legal proceedings

  • Obtain legal advice

Such processing may continue for as long as reasonably necessary for the relevant legal purpose.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business

  • Changes to our website

  • Changes to our services

  • Changes to third-party providers

  • Changes to applicable laws

  • Changes to our data-processing practices

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Where required by law, we will provide additional notice or obtain consent for material changes.

22. Supervisory Authority in Sweden

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data-protection supervisory authority.

In Sweden, the supervisory authority is:

Integritetsskyddsmyndigheten (IMY)
Swedish Authority for Privacy Protection
Box 8114
104 20 Stockholm
Sweden
Email: imy@imy.se
Telephone: +46 (0)8 657 61 00

IMY is Sweden's data-protection authority and is responsible for supervising compliance with the GDPR in Sweden.

You may contact IMY if you believe that your personal data is being processed incorrectly or unlawfully.

We nevertheless encourage you to contact Maison De Sheroski first so that we have an opportunity to investigate and resolve your concern.

23. Contact Maison De Sheroski

If you have any questions about this Privacy Policy, our data-processing practices, or your privacy rights, please contact us:

Brand Name: Maison De Sheroski
Legal Business Name: Sheroski Sverige AB
Business/Company Registration Number (Org.nr): 
Registered Address: Termometergatan 41, 41841, Gothenburg, Sweden
Email: info@maisondesheroski.com
Telephone: +46 76-031 66 48
Website: https://maisondesheroski.com/

Last Updated: September 2, 2026