Privacy policy

This Privacy and Data Protection Directive outlines the systematic protocols under which personal data, user metrics, and transactional information are collected, processed, and secured by Iron Dynamics AB. All processing operations are executed in absolute compliance with the General Data Protection Regulation (GDPR - EU 2016/679) and applicable European Union statutes.

We process specific personal metrics essential to platform interaction, including contact details, delivery coordinates, acquisition histories, and technical system telemetry (such as IP addresses, browser architecture, and navigation logs).

All payment transactions are routed directly through secure, PCI-DSS compliant third-party financial gateways. Raw payment credentials or full credit instrument details are never stored or accessible within our corporate infrastructure.

Your metrics are utilized strictly to facilitate order fulfillment, manage global logistics, execute customer service interactions, maintain platform security, and satisfy statutory corporate accounting obligations.

Marketing communications are initiated only upon explicit, voluntary client authorization and can be terminated instantaneously upon request.

Data processing operations are strictly justified under Article 6 of the GDPR: the execution of our contractual acquisition agreement with you, fulfillment of statutory accounting obligations, the pursuit of our legitimate commercial operations, or explicit user consent where applicable.

We do not commercialize, lease, or distribute client data to external marketing entities. Data is securely transmitted exclusively to essential operational processors, including verified payment providers, designated global courier networks, automated return management logistics systems (Shipmondo), and structural platform infrastructure (Shopify).

All metrics are primarily stored and processed within the European Economic Area (EEA). In instances where technical logistics require cross-border transfers outside the EEA, we enforce European Commission Standard Contractual Clauses (SCCs) to guarantee absolute data security.

Personal records are retained solely for the duration necessary to satisfy the functional purpose of their collection, or to satisfy mandatory regulatory, tax, and legal retention obligations (e.g., the Swedish Bookkeeping Act / Bokföringslagen).

Our platform utilizes digital cookies and analytical identifiers to optimize system performance and navigation. You maintain full control over cookie preferences via your browser interface.

Under GDPR Directive, you maintain full statutory authority to request: access to your data, rectification, restriction of processing, data portability, or permanent erasure ("right to be forgotten"). Furthermore, you maintain the right to revoke consent or object to processing parameters.

To exercise these rights, submit a formal request to our administrative desk. You also maintain the statutory right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY).

We implement rigorous technical, SSL-encrypted, and organizational security frameworks designed to prevent unauthorized access, systemic data breaches, or destruction of proprietary client records.

This Privacy Directive is subject to ongoing structural adjustments. The active version will remain continuously accessible on this interface.