Privacy
Privacy policy
Last updated: October 2026
Data controller
Lämmeltåget AB (org. no. 5594871559), which operates the SAML brand, is the data controller for personal data processed on shopsaml.se. Questions: info@shopsaml.se.
What data do we collect?
When you buy: name, email, phone number, delivery address, what you bought and the order amount. We never handle card details. They go directly to our payment partner.
When you register a return: order number, email, name and what you want to return.
When you contact us: whatever you send us, such as your name and email address.
Visitor statistics: only if you accept analytics cookies, and then anonymously. See our cookie page.
Why do we process it?
To deliver your order, send receipts and order information, and handle returns, complaints and questions (legal basis: performance of a contract).
To meet bookkeeping and tax law requirements (legal basis: legal obligation).
We never send newsletters or marketing unless you have explicitly asked for it.
Who do we share data with?
Stripe, for payments and receipts. Stripe processes your payment details under its own privacy policy.
Our carriers (DSV and DHL, via Shipmondo), which receive name, address and contact details to deliver your parcel.
Our hosting and database provider, which stores the data on our behalf.
We never sell your data or share it for marketing. Where data is processed outside the EU/EEA, appropriate safeguards such as the EU Standard Contractual Clauses apply.
How long do we keep it?
Order data is kept for 7 years as required by Swedish bookkeeping law. Return cases and customer contact are kept as long as needed to handle them, and at most 3 years for possible complaints.
Tradera
If you buy through our Tradera store, Tradera's privacy policy and terms apply to that purchase.
Your rights
Under the GDPR you have the right to access, correct or erase your data, to restrict or object to processing, and to data portability. Contact us at info@shopsaml.se.
You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Changes to this policy
If we change this privacy policy, the updated version will be published on this page.