Privacy Policy
This policy describes how s-aga.com collects, uses, and shares your personal information.
Who We Are
s-aga.com and the SAGA Jewelry brand are operated by Sandström / Zethelius AB, Heleneborgsgatan 40, 117 32 Stockholm, Sweden. Org. nr 556874-6159. VAT SE556874615901. Sandström / Zethelius AB is the data controller for the personal information described in this policy.
Contact
Questions about this policy? Email us at hello@s-aga.com or get in touch.
What We Collect
Device Information
When you visit, we automatically collect your browser type, IP address, time zone, and how you interact with our site. We use this to make the site work and understand how people use it.
Order Information
When you buy something, we collect your name, addresses, email, phone number, and payment details. We need this to process your order, arrange shipping, and send confirmations.
Who We Share With
- Shopify: powers our store, checkout, and payments (privacy policy)
- Shipping carriers: DHL and CTT Express, to deliver your order
- Meta (Facebook/Instagram): for advertising, with your consent
- Omnisend: sends our newsletter and marketing emails, with your consent
- PostHog: product analytics on EU servers, with your consent
- Plausible: privacy-friendly, cookieless visitor statistics
- OpenPanel: cookieless analytics running on our own infrastructure
- Tally: powers our contact and newsletter forms
- Convex: hosts our product review system (reviewer name, email, and review content)
- Adobe Fonts: delivers our web fonts (your browser shares its IP address when fonts load)
We may also share information to comply with legal requirements.
Advertising
With your consent, we use Meta (Facebook) to show you relevant ads. You can opt out anytime through our cookie settings or directly at Facebook Ad Settings.
Your Rights (GDPR)
If you're in the EEA, you can:
- Access the personal information we hold about you
- Have it corrected or deleted
- Port it to another service
- Object to automated decision-making
Email hello@s-aga.com or contact us to exercise any of these rights. You can also lodge a complaint with your local data protection authority. In Sweden this is IMY (imy.se).
Your data is initially processed in Ireland, then transferred to Canada and the US for storage. See Shopify's GDPR documentation for transfer details.
Legal Basis
We process your data based on: your consent, fulfilling our contract with you (processing orders), legal obligations, and legitimate business interests that don't override your rights.
Retention
We keep order and payment records for as long as Swedish accounting law requires, currently seven years. Everything else we keep until you ask us to delete it.
Automated Decisions
We don't make automated decisions that legally affect you. Shopify may temporarily block IPs or cards associated with suspected fraud.
Cookies
We use cookies to make our site work and understand how people use it.
Essential Cookies
Required for the site to function. Always active.
| Cookie | Purpose | Duration |
|---|---|---|
| cart | Your shopping cart | 2 weeks |
| country_preference | Your selected country | 1 year |
| user_locale_preference | Your language preference | 1 year |
| _tracking_consent | Your cookie preferences | 1 year |
Checkout Cookies
Set by Shopify during checkout. Required for purchases.
| Cookie | Purpose | Duration |
|---|---|---|
| checkout | Checkout session | 4 weeks |
| checkout_token | Secure checkout | 1 year |
| secure_customer_sig | Customer authentication | 20 years |
| shopify_pay | Shop Pay | 1 year |
| cart_currency, cart_sig, cart_ts, cart_ver | Cart and checkout | 2 weeks |
| keep_alive | Localization | 2 weeks |
| storefront_digest | Customer login | 2 years |
| remember_me, previous_step, tracked_start_checkout | Checkout flow | 1 year |
Analytics Cookies
Help us understand how visitors use our site. Only set with your consent. Plausible and OpenPanel do not use cookies at all.
| Cookie | Purpose | Duration |
|---|---|---|
| _shopify_s | Session analytics | 30 minutes |
| _shopify_y | Visitor analytics | 1 year |
| ph_* (PostHog) | Product analytics | 1 year |
Marketing Cookies
Support our advertising and email marketing. Only set with your consent.
| Cookie | Purpose | Duration |
|---|---|---|
| _fbp | Facebook advertising | 3 months |
| omnisendSessionID, omnisendAnonymousID | Omnisend email marketing | up to 1 year |
Managing Cookies
You choose which cookies to accept when you first visit. Change your preferences anytime through our cookie settings or your browser. Blocking cookies may affect site functionality.
More info: www.allaboutcookies.org
Do Not Track
There's no industry standard for "Do Not Track" signals, so we don't respond to them.
Changes
We may update this policy for operational, legal, or regulatory reasons.
