Privacy Policy – Tingora AB

Last updated: September 2026

Tingora AB respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how Tingora AB (“Tingora”, “we”, “us” or “our”) collects, uses, stores, shares and otherwise processes personal data when you visit Tingora.com, place an order, use a customer account, contact us, subscribe to marketing communications, or otherwise interact with our online store and services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Swedish and European data protection law and, where applicable, the UK GDPR and applicable UK data protection law.

This Privacy Policy applies to customers and website visitors in the countries and regions where Tingora offers its services, including the European Union (EU), European Economic Area (EEA), and United Kingdom (UK).

1. Data Controller and Contact Details

The data controller responsible for the processing of personal data described in this Privacy Policy is:

Tingora AB
Corporate ID: 559540-9466
VAT number: SE559540946601

Registered business address:
Jupitervägen 66, lgh 1301
181 63 Lidingö
Sweden

Email: info@tingora.com
Website: https://www.tingora.com

If you have questions about this Privacy Policy, how we process your personal data, or wish to exercise a data protection right, please contact us at info@tingora.com.

2. Personal Data We Process

Personal data means any information relating to an identified or identifiable individual.

Depending on how you interact with Tingora, we may process the following categories of personal data.

Identity and Contact Information

This may include:

• Name
• Billing address
• Delivery address
• Email address
• Telephone number
• Customer or account identifiers

Order and Transaction Information

This may include:

• Products ordered
• Order number
• Order date
• Order value
• Delivery status
• Returns and exchanges
• Refunds
• Complaints
• Transaction references

Payment Information

Payments are processed through payment service providers available through our checkout.

Depending on the payment method used, Tingora may receive information such as:

• Payment status
• Payment method
• Transaction reference
• Limited billing or payment information

Where payment card information is processed directly by an authorised payment service provider, Tingora does not receive or store your complete payment card number or card security code.

Payment service providers may process personal data under their own privacy notices and may, depending on the processing activity, act as independent data controllers.

Delivery Information

This may include:

• Name
• Delivery address
• Telephone number
• Email address
• Order and parcel information
• Tracking information
• Delivery status

Customer Service Information

When you contact Tingora, we may process:

• Your contact details
• Order information
• The content of your communication
• Previous correspondence
• Information or documentation that you voluntarily provide in connection with a return, complaint, cancellation or customer service request

Technical and Usage Information

When you use Tingora.com, we may process information such as:

• IP address
• Browser type and version
• Device type
• Operating system
• Network information
• Pages and products viewed
• Shopping cart activity
• Referral information
• Cookie and consent preferences
• Security and fraud-prevention information

Marketing and Preference Information

Where applicable, this may include:

• Marketing subscription status
• Consent records
• Email engagement
• Product interests or preferences
• Advertising and cookie preferences
• Unsubscribe, objection or opt-out requests

3. How We Obtain Personal Data

We collect personal data primarily directly from you when you:

• Place an order
• Enter information during checkout
• Create or use a customer account
• Contact customer service
• Request a cancellation, return or refund
• Subscribe to marketing communications
• Submit a review or form
• Change your privacy or cookie preferences
• Browse or otherwise interact with Tingora.com

We may also receive personal data from third parties involved in providing our services, including:

• Shopify
• Payment service providers
• Shipping and logistics providers
• Fraud-prevention and security providers
• Analytics, advertising and marketing providers, where permitted
• IT and customer service providers

Information received from these sources may include payment status, transaction references, delivery and tracking information, address updates, security or fraud indicators, device information and other information necessary to operate our online store or fulfil your order.

4. Why We Process Personal Data and Our Legal Bases

We only process personal data where we have a lawful basis under applicable data protection law.

Processing and Fulfilling Orders

We process identity, contact, order, payment and delivery information to:

• Process your purchase
• Confirm your order
• Process payment
• Arrange shipping and delivery
• Communicate with you about your order
• Manage cancellations, returns and refunds

Legal basis: Article 6(1)(b) GDPR – processing necessary for the performance of a contract or to take steps at your request before entering into a contract.

Customer Service, Returns and Complaints

We process personal data to answer questions, investigate delivery problems, administer returns and complaints and otherwise fulfil our obligations to customers.

Legal basis: Article 6(1)(b) GDPR – performance of a contract; Article 6(1)(c) GDPR – compliance with legal obligations; and, where appropriate, Article 6(1)(f) GDPR – our legitimate interest in providing effective customer service and managing customer relationships.

Accounting, Tax and Legal Compliance

We process and retain certain personal data where necessary to comply with accounting, tax, consumer protection and other legal obligations.

Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.

Fraud Prevention, Security and Legal Claims

We may process personal data to:

• Prevent and detect fraud
• Protect customer accounts
• Secure our website and systems
• Investigate suspicious activity
• Prevent misuse of our services
• Establish, exercise or defend legal claims

Legal basis: Article 6(1)(f) GDPR – our legitimate interests in protecting Tingora, our customers and our services; and Article 6(1)(c) GDPR where processing is required by law.

When we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether your interests, rights or freedoms override our interests.

Operating and Improving Tingora.com

We may process appropriate technical and usage information to operate our online store, diagnose technical problems, measure performance and improve our website and services.

Legal basis: Article 6(1)(f) GDPR – our legitimate interests in operating, securing and improving our services where consent is not legally required. Where consent is required for a particular technology or purpose, we rely on Article 6(1)(a) GDPR.

Marketing Communications

We may send electronic marketing communications where you have provided valid consent.

In certain circumstances, applicable law may permit us to market Tingora's own similar products to an existing customer without obtaining new consent, provided that the relevant legal requirements are satisfied and the customer was given a clear and simple opportunity to object when the contact information was collected and in each subsequent marketing communication.

Legal basis: Article 6(1)(a) GDPR – consent; or, where an applicable existing-customer exception applies, Article 6(1)(f) GDPR – our legitimate interest in marketing our own similar products to existing customers, subject to applicable marketing law.

You may object to direct marketing at any time.

Cookies, Analytics, Personalisation and Advertising

Strictly necessary technologies may be used to provide functions requested by you, operate checkout and customer accounts, secure our website and remember privacy preferences.

Where consent is legally required for analytics, advertising, personalisation or other non-essential cookies or similar technologies, those technologies will not be used for those purposes until the required consent has been obtained.

Legal basis: Article 6(1)(a) GDPR where consent is required. For necessary processing, the applicable legal basis may be Article 6(1)(b) or Article 6(1)(f) GDPR depending on the processing activity and purpose.

5. Information Required to Complete a Purchase

Certain personal data is necessary for us to enter into and perform a purchase contract with you.

For example, we generally require your name, contact details, delivery information and information necessary to process payment.

If you do not provide information that is necessary to complete or fulfil your purchase, we may be unable to accept, process or deliver your order.

Providing personal data for optional marketing or non-essential cookies is not a condition of purchasing products from Tingora.

6. Who We Share Personal Data With

We disclose personal data only where necessary for the purposes described in this Privacy Policy or where otherwise permitted or required by law.

Recipients may include:

• Shopify
• Payment service providers
• Shipping and logistics providers
• IT, hosting and technical service providers
• Customer support providers
• Fraud-prevention and security providers
• Analytics, advertising and marketing providers, where permitted
• Accountants, auditors, legal advisers and other professional advisers
• Courts, regulators, law-enforcement bodies and other competent public authorities where required by law

Depending on the processing activity, a recipient may act as a data processor acting on Tingora's instructions, an independent data controller, or another role recognised under applicable data protection law.

Where a service provider acts as our data processor, we enter into appropriate data-processing arrangements as required by applicable law.

Processors acting solely on our behalf are not permitted to use personal data for their own unrelated purposes.

7. Shopify and Shopify Network Intelligence

Tingora.com is hosted and operated using Shopify.

For Shopify's core commerce services, Tingora AB generally acts as the data controller and Shopify generally processes customer personal data on our behalf as a data processor.

Personal data processed through Shopify may include:

• Contact and delivery information
• Purchase and transaction information
• Shopping activity
• Products viewed or placed in a shopping cart
• IP address and device information
• Browser and network activity
• Cookie, consent and privacy preference signals

Shopify Network Intelligence and Enhanced Services

Shopify Network Intelligence is currently enabled for our store.

When this functionality is enabled, Shopify may use information about your interactions with Tingora together with information from your interactions with Shopify and other merchants using Shopify in order to provide, develop and improve Shopify's Enhanced Services.

Enhanced Services may include functionality relating to personalisation, analytics and measurement, fraud prevention, advertising and other commerce-related services.

For these Enhanced Services, Shopify may process relevant customer personal data as an independent data controller rather than solely as Tingora's data processor.

Information may be shared with Shopify and with relevant third parties involved in providing these services. Such recipients may be located in countries other than your country of residence.

For customers in the EEA and UK, where required by applicable law, we request consent before non-essential cookies or similar technologies are used for purposes such as personalised advertising, analytics or personalisation.

You can manage or withdraw your consent through the privacy controls available on Tingora.com.

For additional information about Shopify's processing of personal data and the privacy choices available to you, please see:

Shopify's Consumer Privacy Policy:

Shopify Privacy Portal:

8. International Transfers of Personal Data

Tingora AB is established in Sweden.

Some of our service providers, including Shopify and certain providers used by Shopify, may process personal data outside the European Economic Area (EEA) and, where UK data protection law applies, outside the United Kingdom.

Where personal data is transferred internationally, we use or rely on transfer mechanisms and safeguards recognised under applicable data protection law.

Depending on the transfer, these may include:

• Adequacy decisions
• European Commission Standard Contractual Clauses
• UK-approved international transfer mechanisms where applicable
• Binding Corporate Rules
• Supplementary contractual, organisational or technical safeguards where appropriate

You may contact us at info@tingora.com for further information about safeguards applicable to international transfers and, where legally available, how to obtain information about or a copy of the relevant safeguards.

9. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Accounting and Transaction Records

Personal data forming part of accounting records is retained for the period required under applicable Swedish accounting legislation.

Order and Customer Relationship Information

Order and customer information is retained for as long as reasonably necessary to:

• Fulfil the purchase
• Manage delivery
• Handle returns and complaints
• Meet statutory consumer and conformity obligations
• Establish, exercise or defend legal claims
• Comply with applicable legal requirements

Information that forms part of accounting records may be retained for the longer statutory accounting period.

Customer Service Information

Customer service correspondence is retained for as long as reasonably necessary to resolve the relevant matter and manage related legal obligations or potential claims.

Marketing Information

Marketing information is retained while we have a valid legal basis and the information remains necessary for the relevant marketing purpose.

If you withdraw consent, unsubscribe or object to direct marketing, we will stop using your personal data for that marketing.

We may retain limited information about an opt-out or objection where necessary to ensure that your preference continues to be respected.

Cookie and Tracking Information

Cookie and tracking information is retained according to the relevant technology, purpose, consent choice and applicable retention period.

Security and Fraud Information

Security-related information may be retained for as long as reasonably necessary to investigate incidents, prevent fraud, protect our systems or establish, exercise or defend legal claims.

10. Cookies and Similar Technologies

Tingora.com uses cookies and similar technologies.

Necessary technologies may be used for purposes such as:

• Shopping cart functionality
• Checkout
• Customer accounts
• Website security
• Fraud prevention
• Remembering privacy preferences

Other technologies may be used for analytics, personalisation and advertising.

Where applicable law requires consent, non-essential cookies or similar technologies will not be used until the required consent has been provided.

You can manage or withdraw your cookie choices through the cookie banner and privacy controls available on Tingora.com.

Additional information about the cookies and similar technologies used on Tingora.com, including their purposes and available privacy choices, is provided through the cookie and privacy controls available on our website.

11. Direct Marketing

You have the right to object at any time to the processing of your personal data for direct marketing purposes.

If you object, Tingora will stop processing your personal data for direct marketing.

You may unsubscribe using the unsubscribe function included in our marketing communications or by contacting us at info@tingora.com.

Withdrawing consent or objecting to direct marketing does not affect the lawfulness of processing carried out before the withdrawal or objection.

12. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

• Access – request access to your personal data and information about how it is processed.
• Rectification – request correction of inaccurate or incomplete personal data.
• Erasure – request deletion of personal data where the legal requirements for deletion are met.
• Restriction – request restriction of processing in certain circumstances.
• Data portability – receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller.
• Object – object to processing based on legitimate interests in circumstances provided by law.
• Object to direct marketing – object at any time to processing of your personal data for direct marketing purposes.
• Withdraw consent – withdraw your consent at any time where processing is based on consent.

These rights are subject to the conditions and exceptions provided by applicable law.

To exercise a data protection right, contact us at info@tingora.com.

We may request reasonable information necessary to verify your identity before responding to a request.

Under the GDPR, we normally respond within one month after receiving a valid request. Where permitted by law, this period may be extended where a request is complex or numerous. If an extension applies, we will inform you as required by law.

Exercising your data protection rights is normally free of charge. Applicable law may permit a reasonable fee or refusal in limited circumstances involving manifestly unfounded or excessive requests.

13. Complaints

If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

Because Tingora AB is established in Sweden, the Swedish supervisory authority is:

Integritetsskyddsmyndigheten (IMY)
https://www.imy.se

Depending on where you live, work or where an alleged infringement occurred, you may also have the right to complain to another competent EU or EEA data protection authority.

Where UK data protection law applies, you may also have the right to complain to:

Information Commissioner's Office (ICO)
https://ico.org.uk

You are welcome to contact Tingora at info@tingora.com so that we can try to resolve your concern, but you are not required to contact us before exercising your right to lodge a complaint with a supervisory authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, processing activities, service providers, Shopify functionality or applicable legal requirements.

The current version will be available on Tingora.com and will show the date of the latest update.

Where required by applicable law, we will provide appropriate notice of material changes.

If we intend to process personal data for a new purpose that requires additional information or consent, we will provide the information or obtain the consent required by applicable law before beginning that processing.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Tingora AB
Corporate ID: 559540-9466
VAT number: SE559540946601

Jupitervägen 66, lgh 1301
181 63 Lidingö
Sweden

Email: info@tingora.com
Website: https://www.tingora.com