Privacy Policy
1. Who we are
Redstone Separations AB (company registration number 559248-0478) is responsible for the personal data described in this policy. We develop, produce and sell polymeric resins and separation materials, mainly to businesses and research organisations.
Redstone Separations AB, Scheelevägen 22, 223 63 Lund, Sweden. Email: info@redstone-sep.com. Phone: +46 738 156 130.
2. What we collect and why
| Situation | Personal data | Purpose | Legal basis | How long we keep it |
|---|---|---|---|---|
| You place an order in the web shop | Name, company, billing and delivery address, email, phone, VAT number, order details | To deliver the order, invoice it and handle returns | Contract | 7 years from the end of the financial year (Swedish Bookkeeping Act) |
| You create a customer account | Name, email, password (encrypted), saved addresses | To let you see orders and order again | Contract | Until you delete the account, or after 36 months without login |
| You send a quote request or contact us | Name, company, email, phone, your message | To answer and prepare a quote | Legitimate interest (business communication) | 24 months after the last contact, longer if it leads to an order |
| You buy VAT-free from another EU country | VAT number, company name | To verify the VAT number in the EU VIES register and apply the VAT exemption | Legal obligation | As for orders |
| You visit the website and accept analytics cookies | IP address, browser, pages visited, approximate location | Statistics to improve the website | Consent | 14 months in Google Analytics |
| You use the website | IP address, technical logs | Security, spam and fraud protection | Legitimate interest | 30 days |
We do not sell personal data, and we do not use it for automated decisions or profiling.
3. Who we share data with
We only share what each party needs to do its job:
- Hosting: Simply.com (Sweden) hosts the website and its database.
- Security and speed: Cloudflare delivers the website and protects it against attacks.
- Email: Site Mailer (Elementor) sends order and form emails from the website.
- Payment: our bank receives bank transfers. If you pay by card, Stripe processes the payment.
- Delivery: UPS and FedEx receive your name, delivery address and phone number to deliver your order.
- Statistics: Google Analytics (Google), only if you accept analytics cookies.
- Maps: the map on the contact page is provided by Google Maps. It only loads if you click “Show map” or accept functional cookies.
- VAT checks: the European Commission (VIES) receives the VAT number you enter.
- Authorities: when the law requires it, for example the Swedish Tax Agency.
4. Transfers outside the EU
Some providers (Google, Cloudflare, Stripe, UPS, FedEx) are based in the United States or may process data there. These transfers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses. Deliveries outside the EU require that the carrier shares your delivery details with the destination country.
5. Cookies
| Type | What it does | Examples | Needs your consent |
|---|---|---|---|
| Necessary | Keeps the cart, checkout and login working and remembers your cookie choice | woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*, wordpress_logged_in_*, cookieyes-consent | No |
| Analytics | Shows how the website is used | _ga, _ga_* (Google Analytics) | Yes |
| Functional | Shows the map on the contact page | Google Maps cookies | Yes |
You can change your choice at any time with the cookie button in the bottom left corner of every page. You can also block or delete cookies in your browser.
6. Your rights
You have the right to:
- get a copy of the personal data we hold about you
- have incorrect data corrected
- have data deleted, unless we must keep it by law (for example for bookkeeping)
- object to processing based on legitimate interest
- withdraw your consent at any time
- receive your data in a machine-readable format
Email info@redstone-sep.com to use your rights. We answer within one month.
If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
7. Security
The website uses an encrypted connection (HTTPS). Access to customer data is limited to the people who need it for their work.
8. Changes
We update this policy when we change how we handle personal data. The date at the top shows the latest version.