Privacy policy
Last updated: April 20, 2026
boco atelier AB (“boco”, “we”, “us”, “our”) operates this website and related services (the “Services”). This Privacy Policy explains how we collect, use, store, and protect your personal information.
By using our Services, you agree to the practices described in this Privacy Policy.
SECTION 1 - Controller Information
boco atelier AB
Org. No: 559506-5367
Address: Danderydsvägen 146, 182 36 Danderyd, Sweden
Email: info@bocoatelier.com
We are the data controller under GDPR for the personal information you provide or that is collected through our Services.
SECTION 2 - Personal Information We Collect
We may collect the following categories of personal information:
- Contact information: name, email, phone number, billing & shipping address
- Account information: username, password, preferences
- Payment information: credit/debit card details, transaction history, payment confirmations
- Shopping & transaction data: products viewed, purchased, added to cart, returned, or exchanged
- Device & usage information: IP address, browser type, device identifiers, cookies, and site interactions
- Communications: messages, inquiries, and customer support interactions
Sources include:
- Directly from you (account creation, purchase, inquiries)
- Automatically through our website (cookies, analytics, device info)
- Service providers acting on our behalf
- Partners and affiliates.
SECTION - 3 Legal Basis for Processing
We process your personal information based on:
- Performance of contract: to fulfill orders, process payments, and provide Services
- Consent: for marketing, cookies, and promotional communications
- Legitimate interest: to improve our Services, prevent fraud, and secure our platform
- Legal obligation: to comply with applicable law.
SECTION - 4 How We Use Your Information
- Provide and manage your account and orders
- Communicate with you regarding support, orders, or account updates
- Improve our Services, website, and shopping experience
- Send marketing communications with your consent
- Detect and prevent fraud, illegal activity, and security risks
- Comply with legal obligations.
SECTION - 5 Cookie & Marketing Consent
Cookies:
- We use cookies to provide necessary site functions, analyze website performance, and personalize content.
- Necessary cookies are required for the site to operate.
- Non-essential cookies (analytics, advertising) are placed only after you give consent.
Marketing:
- We may send emails, SMS, or other communications with promotions or personalized offers.
- Marketing communications are sent only with your consent.
- You can withdraw consent at any time using links in emails or by contacting us at info@bocoatelier.com.
Cookie & Marketing Settings:
- Customers can manage cookie preferences via a cookie banner or account settings.
- Opting out of marketing does not prevent transactional messages about orders or account.
SECTION - 6 Sharing Your Information
We may share your personal information with:
- Service providers: Shopify, payment processors, IT, cloud storage, analytics, fulfillment partners
- Marketing partners: only if consent is given for personalized advertising
- Legal authorities: to comply with law or protect rights
- Business transactions: e.g., mergers, acquisitions, or bankruptcy
All third parties are required to handle your data in compliance with GDPR.
SECTION - 7 International Transfers
Personal data may be transferred outside the EU/EEA.
- Transfers are protected using European Commission Standard Contractual Clauses or equivalent safeguards.
SECTION - 8 Data Retention
We retain personal information only as long as necessary:
- Account and transaction data: retained until account closure and legal obligations
- Marketing data: as long as consent is active or permitted by law
- Data may be anonymized after retention for analytics.
SECTION - 9 Your Rights Under GDPR
Depending on your location, you may:
- Access your personal information
- Correct inaccurate or incomplete data
- Request deletion of your data
- Receive a copy or transfer your data to another controller
- Object to or restrict processing
- Withdraw consent at any time
- Opt-out of marketing or profiling
To exercise your rights, contact us at info@bocoatelier.com. Verification of identity may be required.
SECTION - 10 Third-Party Websites & Links
We are not responsible for third-party websites. Please review their privacy policies before sharing personal information.
SECTION - 11 Security
We implement appropriate technical and organizational measures to protect your data. However, no system is completely secure.
SECTION - 12 Complaints
- Contact us: info@bocoatelier.com
- Swedish Data Protection Authority (IMY): www.imy.se
- EU Online Dispute Resolution (ODR): www.ec.europa.eu/consumers/odr.
SECTION - 13 Changes to this Privacy Policy
We may update this policy to reflect changes in our practices or legal requirements.
- Updates will be posted on this page with a revised “Last updated” date
- Continued use of Services constitutes acceptance of changes.

