We only collect what's needed to make the garments.

No cross-site visitor tracking. No selling of personal data. No shadow registers of your staff. That is what we commit to in writing here — not inside a consent banner but in a policy written in the same voice as the rest of the studio.

Last reviewed · 21 April 2026Scroll ↓

II / IIISpecimen · Paragraphs

Section · A

Data controller

Plaggra Studio AB is responsible — not a platform, not a subprocessor.

Plaggra Studio AB: Plaggra Studio AB, org. no. 559412-0000, Hornsgatan 64, 118 21 Stockholm, is the data controller for information handled through [email protected] and our services. Processing complies with the EU General Data Protection Regulation (2016/679) and the Swedish Data Protection Act (2018:218). Questions about the policy, subject-access requests, or any other rights reach us directly at [email protected] — no forms, no tickets.

Section · B

Which data

Three categories — nothing beyond that.

Business contact details: Name, email, phone, and role of whoever briefs or orders. Company name, organisation number, and billing address. These come from your brief, our conversation, or your order — we do not source them independently.
Uniform profile and measurement data: Sizes, sample fits, measurements, logo placements, and version numbers per run. Personal measurements are stored against first name and role — never against a personal ID number or unique identifier. You decide which team members we hold measurements for and can ask us to remove any individual's measurements at any time without affecting the rest of the uniform profile.
Technical operational data: When you log in to /konto we retain session cookies, sign-in attempts, and error logs long enough to keep the account secure and to debug issues. We do not use Google Analytics, Meta Pixel, TikTok Pixel, or similar cross-site tracking tools. Error capture runs in a self-hosted Bugsink instance on our own infrastructure — no third-party watchers.

Section · C

Purposes

Three purposes — each tied to the garment.

To deliver what you ordered: Answering your brief, drafting a quote, building a sample kit, sewing the run, and shipping the delivery. Legal basis: contract (Art. 6(1)(b) GDPR). Without this data we cannot deliver the engagement.
To maintain the uniform profile: So we can sew refills, remakes, and future versions without asking you to brief from zero. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — yours and ours, because the profile is the reason to come back. You can always ask us to close the profile.
To meet legal and accounting obligations: Invoices, accounting records, and agreements are retained for seven years under the Swedish Accounting Act (1999:1078). That applies to you as the business customer, not to individual team members.

Section · D

Who sees the data

A short list — named processors, no unknown third parties.

Data processors: Our cloud host (Hetzner, servers in Germany — EU), our email provider Resend (transactional mail), our payment partner Polar (subscriptions, where applicable), our error reporting Bugsink (self-hosted by us), and our shipping carrier PostNord/DHL. Each partner is bound by a data-processing agreement. No data moves outside the EU/EEA without the safeguards required under Chapter V GDPR.
No sale, no marketing sharing: We do not sell, rent, or trade personal data. We do not expose you to ad networks. If an authority or court requests data in writing we comply with the law — and if the request concerns your specific engagement we tell you, except where the law prohibits it.

Section · E

How long

As long as the garment lives with you — or the law requires.

21 April 2026: The uniform profile is kept as long as you wear the run; when you end the engagement in writing we delete measurement data and personal measurements within 90 days. Accounting records are kept for seven years by law. Technical logs rotate on a 90-day cycle. Studio-inbox email is archived for three years and then cleared. We never combine these datasets into behavioural profiles.

Section · F

Your rights

Everything GDPR gives you — written so the words feel recognisable.

Access, rectification, erasure: You have the right to receive a copy of the data we hold about your business (Art. 15), to correct inaccuracies (Art. 16), and to ask us to delete what is no longer needed (Art. 17). Write to [email protected] — we respond within one month, usually within a working day.
Restriction, objection, portability: You may ask us to pause processing during a dispute (Art. 18), object to our legitimate-interest basis (Art. 21), and request the uniform profile in a structured format so you can take it to another provider (Art. 20). We do not push back — we want the garments to keep living with you even if you leave the studio.
Complaint to the supervisory authority: If you feel we handled something incorrectly you can file a complaint with the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, [email protected]. We hope you write to us first — but the right is unconditional and we will not make it harder.

III / IIIThe promise

Your data meets the same standard as the fabric.

We build uniforms meant to last for years. It would contradict ourselves to treat the registers any looser than the garments. Write to [email protected] if anything feels unclear — we would rather rewrite a sentence in this policy than hide it in legalese.

Write to the studio Read the terms

Plaggra Studio AB

Hornsgatan 64

118 21 Stockholm

Reply · same day

Your data meets the same standard as the fabric.

Plaggra Studio AB

Hornsgatan 64

118 21 Stockholm

Reply · same day