G Design AB, trading as Gärde Design® / Gärde Design Foundry (GD Foundry, GD/F), is the data controller for the personal data described in this notice. This means we decide why and how your data is processed.

G Design AB (trading as Gärde Design® / Gärde Design Foundry (GD Foundry, GD/F))
Org. no. 559278-2717
Eriksbergsgatan 31, 114 30 Stockholm, Sweden
type@gardedesign.se

• Contact details: name, email address, company name and company size you provide at purchase or in forms.
• Order details: the fonts and licences you bought and your order reference.
• Licence records: your licence ID, the licensee name stored in your font files and the checksums of each file delivered to you (EULA section 1.8).
• Messages: enquiries, Bespoke requests and Fonts in use submissions, including any images or links you send.
• Technical data: IP address, browser and device information and download events, used for security and to deliver files.

• To deliver your licence, receipts and download links — performance of a contract.
• To answer enquiries and review submissions — legitimate interest, or steps at your request before a contract.
• To keep the website and downloads secure and prevent fraud — legitimate interest.
• To confirm your licence and identify copies of our fonts used without a licence — performance of a contract and legitimate interest.
• To keep accounting records — legal obligation.
• To send newsletters, only if you ask for them — consent, which you can withdraw at any time.

• Paddle.com, our Merchant of Record, for the sale of the product, payments, tax compliance and invoicing. Paddle processes payment data under its own privacy notice.
• Service providers who host the website, store files and send email on our behalf.
• Professional advisers such as accountants and lawyers.
• Authorities, where required by law.

Some providers may process data outside the EU/EEA. Where they do, we rely on adequacy decisions or the EU Standard Contractual Clauses to protect your data.

Order and accounting records are kept for as long as Swedish bookkeeping law requires (currently seven years). Licence records are kept for as long as the licence they document remains in force, so we can always confirm your licence. Download links expire after seven days. Enquiries and submissions are kept as long as needed to handle them, then deleted or anonymised.

Under the GDPR you have the right to access, correct, erase, restrict or object to the processing of your data, the right to data portability, and the right to withdraw consent. Contact us at type@gardedesign.se; we respond within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY).

We use appropriate technical and organisational measures, including encrypted connections, access controls and private file storage with expiring download links.

We do not use advertising cookies or advertising tags.

Necessary storage. Your browser keeps your cart, your display preferences and your cookie choice on your device so the website works. This data stays in your browser and is not sent to us.

Visitor analytics. We use Lovable's visitor analytics to understand how the website is used. It uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify you. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and clicks on buttons and links. Detailed data is kept for 90 days and daily summaries for one year. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

Your choice. If you are in the EU/EEA, the UK, Switzerland or Canada, or we cannot tell where you are, clicks are recorded only after you accept analytics in the cookie banner. Elsewhere they are recorded unless you reject. If your browser sends Global Privacy Control, clicks are never recorded, even if you accept. Page visits, time on page, page speed and errors are recorded for every visitor, without cookies and without identifying anyone. Your choice is saved in your browser for up to 12 months, and you can change it at any time under Cookie settings at the bottom of every page.

Web fonts. Some pages load fonts from Google Fonts. Your browser then connects to Google, which receives your IP address and browser information. Google handles this under its privacy policy.

Checkout. When you open the checkout, Paddle's checkout loads on the page and may use its own cookies to process your payment and prevent fraud, as described in Paddle's privacy notice.

Newsletter. If you sign up for our newsletter, your email address is stored with Mailchimp (Intuit), which sends the newsletter on our behalf.