Privacy Policy
1. Who is responsible for your personal data?
Ola Heden Music is responsible for the processing of personal data described in this Privacy Policy.
Postal address: Solbogatan 8, 212 32 Malmö, Sweden
Email: [email protected]
2. What personal data do we collect?
When you place an order or contact us, we may collect information such as your name, delivery and billing address, email address, telephone number, order details, payment-related information and correspondence with us.
We may also receive technical information necessary for the operation and security of the online store, such as IP address and cookie-related information.
3. Why do we process your personal data?
We process personal data in order to:
• process and deliver your orders;
• process payments and refunds;
• handle returns, complaints and customer service;
• communicate with you about your order;
• fulfil accounting, tax and other legal obligations; and
• maintain the security and functionality of the online store.
The legal basis for processing is normally that the processing is necessary to perform our contract with you or to comply with a legal obligation. Where applicable, processing may also be based on a legitimate interest or your consent.
4. Who may receive your personal data?
We only share personal data where necessary to operate the store, fulfil your order or comply with legal obligations.
Depending on the service used, information may be processed by service providers including:
• Quickbutik – e-commerce platform and order management;
• Stripe – card and related payment processing;
• PayPal – payment processing when PayPal is selected; and
• PostNord and other relevant delivery providers – delivery of physical orders.
We may also disclose information where required by law or to relevant authorities when legally required.
We do not sell your personal data.
5. Payments
Payments are processed by the payment provider selected at checkout. Ola Heden Music does not need to store your complete card details in order to process a card payment. Payment providers process payment information in accordance with their own privacy policies and applicable data protection requirements.
6. International transfers
Some service providers may process personal data outside Sweden or the European Economic Area (EEA). Where personal data is transferred outside the EEA, the transfer must be carried out using a lawful transfer mechanism and appropriate safeguards as required by applicable data protection law.
7. How long do we keep your personal data?
We keep personal data only for as long as necessary for the purpose for which it was collected or for as long as required by law.
Information that forms part of accounting records may need to be retained for the period required under Swedish accounting legislation. Other customer information is deleted or anonymised when it is no longer necessary for order handling, customer service, legal obligations or the establishment, exercise or defence of legal claims.
8. Cookies
The website may use cookies and similar technologies necessary for functions such as the shopping cart, checkout, payments, security and operation of the online store.
Where consent is legally required for non-essential cookies, such cookies should only be used in accordance with the choices you make through the website's cookie settings.
9. Your rights
Under the GDPR, you may have the right to:
• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of your personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing;
• receive certain personal data in a portable format; and
• withdraw consent where processing is based on consent.
These rights are subject to the conditions and exceptions provided by applicable law. For example, some information cannot be deleted while we are legally required to retain it.
To exercise your rights or ask a question about how your personal data is handled, contact us at [email protected].
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you believe that your personal data has been processed unlawfully.
10. Changes to this Privacy Policy
We may update this Privacy Policy when necessary, for example if our services or legal obligations change. The current version will be available on this website.
Last updated: 15 October 2026