Privacy Policy
This policy describes how s-aga.com collects, uses, and shares your personal information.
Who We Are
s-aga.com and the SAGA Jewelry brand are operated by Sandström / Zethelius AB, Heleneborgsgatan 40, 117 32 Stockholm, Sweden. Org. nr 556874-6159. VAT SE556874615901. Sandström / Zethelius AB is the data controller for the personal information described in this policy.
Contact
Questions about this policy? Email us at hello@s-aga.com or get in touch.
What We Collect
Device Information
When you visit, we automatically collect your browser type, IP address, time zone, and how you interact with our site. We use this to make the site work and understand how people use it.
Order Information
When you buy something, we collect your name, addresses, email, phone number, and payment details. We need this to process your order, arrange shipping, and send confirmations.
Who We Share With
Each service gets only what it needs. Your full order details (name, addresses, phone and payment) go only to Shopify, and your delivery details only to the shipping carrier. We do not keep a copy of your order details in any other system.
- Shopify: powers our store, checkout, and payments. Gets your full order details. (privacy policy)
- Shipping carriers: such as DHL, CTT and PostNord, and their local delivery partners in your country. They get your name, delivery address, email and phone number, to deliver your order.
- Meta (Facebook/Instagram): for advertising, with your consent. When you place an order, we also send Meta hashed order details (email, phone, name, address and order value) to measure our ads, unless you decline marketing cookies.
- Google (Google Ads): for advertising, with your consent. When you place an order after you click one of our Google ads, we send Google the ad click ID, the order value and a hashed copy of your email and phone number to measure our ads. We only do this if you accepted marketing cookies.
- Omnisend: sends our newsletter and marketing emails. Gets your email address when you sign up and, with your consent, which products you view and add to your bag.
- Plausible: cookieless visitor statistics. Only anonymous page views. No name, email or address.
- OpenPanel: cookieless analytics on our own infrastructure. Anonymous page views, shop events and order totals. No name, email or address.
- Tally: powers our contact and newsletter forms. Gets only what you type in a form.
- Convex: hosts our product reviews. Gets only what you send with a review: your name, email and review. No order details.
- Adobe Fonts: delivers our web fonts. Your browser shares its IP address when fonts load. Nothing else.
We may also share information to comply with legal requirements.
Advertising
With your consent, we use Meta (Facebook) and Google to show you relevant ads. If you arrive from one of our Meta ads, we remember that click in the _fbc cookie so the visit can be linked to the ad once you accept marketing cookies. If you decline, we delete it. If you arrive from one of our Google ads, we keep that click only in your browser's memory until you choose, and we save it only if you accept. You can opt out anytime through our cookie settings, at Facebook Ad Settings or at Google My Ad Center.
Your Rights (GDPR)
If you're in the EEA, you can:
- Access the personal information we hold about you
- Have it corrected or deleted
- Port it to another service
- Object to automated decision-making
Email hello@s-aga.com or contact us to exercise any of these rights. You can also lodge a complaint with your local data protection authority. In Sweden this is IMY (imy.se).
Your data is initially processed in Ireland, then transferred to Canada and the US for storage. See Shopify's GDPR documentation for transfer details.
Legal Basis
We process your data based on: your consent, fulfilling our contract with you (processing orders), legal obligations, and legitimate business interests that don't override your rights.
Retention
We keep order and payment records for as long as Swedish accounting law requires, currently seven years. Everything else we keep until you ask us to delete it.
Automated Decisions
We don't make automated decisions that legally affect you. Shopify may temporarily block IPs or cards associated with suspected fraud.
Cookies
We use cookies to make our site work and understand how people use it.
Necessary Cookies
Required for the site to function. Always active.
| Cookie | Purpose | Duration |
|---|---|---|
| cart | Your shopping cart | Session |
| session | Keeps you logged in to your account | Session |
| country_preference | Your selected country | 30 days |
| saga_cookie_consent (local storage) | Your cookie choice | 1 year |
| _tracking_consent | Your cookie choice, shared with checkout | 1 year |
| _shopify_essential | Store security, cart and checkout | 1 year |
Checkout Cookies
Set by Shopify during checkout. Required for purchases.
| Cookie | Purpose | Duration |
|---|---|---|
| checkout | Checkout session | 4 weeks |
| checkout_token | Secure checkout | 1 year |
| secure_customer_sig | Customer authentication | 20 years |
| shopify_pay | Shop Pay | 1 year |
| cart_currency, cart_sig, cart_ts, cart_ver | Cart and checkout | 2 weeks |
| keep_alive | Localization | 2 weeks |
| storefront_digest | Customer login | 2 years |
| remember_me, previous_step, tracked_start_checkout | Checkout flow | 1 year |
Statistics Cookies
Help us understand how visitors use our site. Only set with your consent. Plausible and OpenPanel do not use cookies at all.
| Cookie | Purpose | Duration |
|---|---|---|
| _shopify_analytics | Visitor and session statistics | 1 year |
Marketing Cookies
Support our advertising and email marketing. Only set with your consent, except _fbc, which is kept until you choose and deleted if you decline.
| Cookie | Purpose | Duration |
|---|---|---|
| _shopify_marketing | Marketing attribution | 1 year |
| _fbp | Facebook advertising | 3 months |
| _fbc | Remembers the Meta ad you clicked to reach us | 3 months |
| saga_eid | Meta advertising. A random visitor ID | 1 year |
| saga_em_h (local storage) | Meta advertising. A scrambled (hashed) copy of your newsletter email | Until you withdraw consent |
| _gcl_au, _gcl_aw, _gcl_gb, _gcl_ag | Google Ads advertising and ad measurement | 3 months |
| saga_gclk | Remembers the Google ad you clicked to reach us | 3 months |
| omnisendSessionID, omnisendAnonymousID | Omnisend email marketing | up to 1 year |
Managing Cookies
You choose which cookies to accept when you first visit. Change your preferences anytime through our cookie settings or your browser. Blocking cookies may affect site functionality.
More info: www.allaboutcookies.org
Do Not Track
There's no industry standard for "Do Not Track" signals, so we don't respond to them.
Changes
We may update this policy for operational, legal, or regulatory reasons.
