Payments
Stripe, Klarna and other payment providers displayed and selected at checkout. They may act as independent controllers for parts of their processing.
WristSwitch
Privacy policy
We value your privacy. This policy clearly explains what personal data we process, why we process it and the rights available to you.
01
Data controller
Marktime AB, which operates WristSwitch.com, is the data controller for the processing of personal data described in this policy. This means that we are responsible for ensuring that the data is processed lawfully, fairly, transparently and with appropriate security.
Company name: Marktime AB
Company registration number: 559516-7643
Address: Särö Källväg 4, 429 41 Särö, Sweden
Email: Contact@wristswitch.com
Contact us if you have questions about this policy, how we process your data or if you wish to exercise any of your rights.
Contact us
02
Personal data we collect
The data we process depends on how you use the website and which services you choose. We only collect data that is relevant to clearly stated purposes.
Contact and identity data
- Name, shipping address, billing address, email address and telephone number.
- Company name and company or VAT registration number where relevant.
- Order number and other information you provide when contacting us.
Order and product data
- Products ordered, selected strap colours, prices, discounts, currency and delivery options.
- Order history, returns, complaints, warranty matters and customer-service correspondence.
- Messages or instructions submitted in the cart, checkout or contact forms.
Payment data
Payments are processed by the payment provider selected at checkout, such as Stripe or Klarna when those options are enabled. WristSwitch normally receives information about payment status, amount, currency, transaction reference and payment method, but does not store full card numbers or security codes.
Technical data
- IP address, device and browser type, operating system, language, time zone and approximate geographic region.
- Log data, pages visited, referring address, timestamps, session information and error reports.
- Cookie identifiers and information about your cookie preferences.
03
Why we process personal data
| Purpose | What we do | Legal basis |
|---|---|---|
| Process purchases and delivery | Complete the order, receive payment, pick and ship the correct strap, deliver it and communicate about the order. | Performance of a contract. |
| Customer service, returns and warranty | Answer questions and handle returns, complaints, warranty matters and disputes. | Contract, legal obligation and legitimate interests. |
| Accounting and legal requirements | Retain records, comply with tax and accounting rules and establish, exercise or defend legal claims. | Legal obligation and legitimate interests. |
| Security and fraud prevention | Protect the website, payments, customers and business against misuse, intrusion and fraud. | Legitimate interests and, in some cases, legal obligation. |
| Website development and statistics | Understand how the website is used, resolve errors and improve functionality, content and customer experience. | Consent for non-essential cookies; legitimate interests for necessary operation and security. |
| Marketing and newsletters | Send offers, product news and other marketing when you have subscribed or where marketing is otherwise permitted. | Consent or legitimate interests, depending on the circumstances and applicable law. |
Where processing is based on legitimate interests, we conduct a balancing assessment. You have the right to object to such processing. You can always unsubscribe from electronic direct marketing using the link in the message or by contacting us.
04
Sources of personal data
Most data is provided directly by you when you make a purchase, contact us, subscribe to marketing or use the website.
We may also receive data from payment providers concerning payment status and fraud checks, from PostNord or another carrier concerning delivery status and from technical service providers through website operation and security logs.
05
Who we share data with
We do not sell your personal data. Data is shared only where necessary for a stated purpose, where a provider processes it on our behalf or where disclosure is required by law.
Delivery
PostNord and any transport or logistics partners receive the contact and delivery data needed to deliver and notify you about the parcel.
Online shop and IT
Hosting, WordPress, WooCommerce, security, backup, email and technical-support providers may process data on our behalf.
Accounting and authorities
Accounting, audit and advisory providers and competent authorities may receive data where required for accounting, legal obligations or official decisions.
Where a provider acts as our processor, we enter into a data-processing agreement and require it to process data only on our documented instructions and with appropriate security measures.
06
Cookies and similar technologies
The website uses cookies and similar technologies. Necessary cookies are used for functions such as the cart, checkout, security, language and country selection, currency, session management and your cookie preferences.
Analytics, functional and marketing cookies are used only where enabled and, where required, after you have given consent. You can withdraw or change consent through the website’s cookie settings. Withdrawal does not affect the lawfulness of processing already carried out.
Cookie settings must reflect actual use
The separate cookie information and consent banner must always be updated when new analytics, advertising or tracking services are added.
07
How long data is retained
We do not retain personal data for longer than necessary for each purpose. Retention is affected by the contract, warranty and complaint periods, legal requirements and the need to manage legal claims.
Order and accounting records
Normally for seven years after the end of the calendar year in which the financial year ended, to the extent required by accounting rules.
Customer service, returns and warranty
For the duration of the matter and thereafter for as long as reasonably needed for follow-up, warranty, complaints or legal claims.
Abandoned carts and technical logs
For a limited period determined by security, troubleshooting and recovery needs.
Newsletters and marketing
Until you unsubscribe or object, followed by a limited suppression record to ensure that you are not contacted again.
Cookie and consent records
According to the lifetime of each cookie and for as long as consent records reasonably need to be retained.
When the retention period expires, the data is securely deleted or anonymised. Backups may remain for a limited rotation period and are protected from normal use.
08
Transfers outside the EU/EEA
Some technology or payment providers may process data in, or make it accessible from, countries outside the EU/EEA. Such transfers may take place only where there is a valid legal mechanism and appropriate protection.
- An adequacy decision by the European Commission, such as the EU–US Data Privacy Framework where the recipient is covered by it.
- The European Commission’s Standard Contractual Clauses together with supplementary safeguards where required.
- Another mechanism permitted under applicable data-protection law.
You may contact us for more information about the safeguards applicable to a particular provider or transfer.
09
How we protect personal data
We use technical and organisational security measures appropriate to the risks of the processing. No internet-based service can be guaranteed to be entirely risk-free, but we work continuously to prevent unauthorised access, loss, alteration and disclosure.
- Encrypted HTTPS communication and protected payment flows at the payment provider.
- Access controls and limited access based on job responsibilities.
- Security updates, backups, logging and protection against malicious activity.
- Incident-response procedures and assessment of whether incidents must be reported to IMY and affected individuals.
10
Your data-protection rights
Depending on the circumstances, you have the following rights under the GDPR. These rights are not absolute and a request may in some cases be limited by law, the rights of others or the need to establish legal claims.
Access
Request confirmation of whether we process data about you and receive a copy and information about the processing.
Rectification
Request correction or completion of inaccurate or incomplete personal data.
Erasure
Request deletion where the conditions are met. Data that must be retained by law cannot be deleted immediately.
Restriction
Request restriction of processing while, for example, the accuracy of the data or an objection is investigated.
Objection
Object to processing based on legitimate interests and always object to direct marketing.
Data portability
In certain cases, receive data you provided in a structured, commonly used and machine-readable format.
Withdraw consent
Where processing is based on consent, you may withdraw it at any time for future processing.
Automated decisions
Receive information and, where applicable, request human review of decisions based solely on automated processing that have significant effects.
Send your request to Contact@wristswitch.com or use the contact form. We may need to verify your identity before processing the request. We normally respond within one month in accordance with the GDPR.
Contact us
11
When data must be provided
Certain data is necessary for us to enter into or perform a contract with you. If, for example, your name, address, contact details or necessary payment data is missing, we cannot process and deliver the order.
Data used for optional marketing or non-essential cookies is not required to make a purchase. Refusing it does not affect your ability to complete a standard purchase, although certain optional features may be unavailable.
12
Questions, complaints and changes
Please contact us first if you believe that your personal data is being processed incorrectly. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or the data-protection authority in the EU/EEA country where you live or work or where the alleged infringement occurred.
Swedish Authority for Privacy Protection (IMY)
www.imy.se
Telephone: +46 8 657 61 00
We may update this policy when our business, services or legal requirements change. The latest version is always published on this page. We will provide appropriate notice of material changes.
Last updated: 6 July 2026
