Pre-launch

We are finalizing suppliers. Prices are public now; specs follow from the manufacturer’s data sheet before the first roll ships. Join the trade list

Join the trade list
Legal

Privacy notice

Version: Draft

Draft, published for transparency before launch. It takes effect when ordering opens, after review.

This notice explains how we handle personal data under the EU General Data Protection Regulation (GDPR). We sell only to businesses, but the people we deal with at those businesses are individuals, so this applies to you.

1. Who is responsible

The data controller is the company named in the company details above, trading as Lystvik. For anything about your data, email alex@lystvik.com.

2. Visiting this website

  • No cookies and no tracking. This site sets no cookies, uses no advertising pixels, and loads no third-party scripts or fonts.
  • Hosting. The site is served by Cloudflare. Like any web host, Cloudflare processes technical data, such as your IP address and browser type, to deliver the pages and protect the site against attacks. Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f)).
  • Analytics. We do not run analytics today. If we add privacy-friendly, cookieless statistics later, we will say so here first.

3. Trade accounts and orders

  • What we collect: your name, role, business email and phone, the business name, address, organization or VAT number (or EIN and resale certificate in the US), delivery addresses, orders, invoices and payments, and our correspondence with you.
  • Why: to check that you are a business, to run your trade account, and to deliver, invoice and support your orders. We check EU VAT numbers in the European Commission’s VIES system.
  • Legal basis: performing our contract with you or your business (Art. 6(1)(b)), our legal obligations, for example bookkeeping and tax (Art. 6(1)(c)), and our legitimate interest in preventing fraud and non-business orders (Art. 6(1)(f)).
  • How long: account data while the account is active and for up to 3 years after the last order. Accounting records for 7 years, as required by the Swedish Bookkeeping Act (bokföringslagen).

4. How we check trade-account applications

We check applications against public business information, such as company registers, the business’s website and the EU VIES database. These checks may be done automatically. If we decline your application and you disagree, you can ask for the decision to be reviewed by our founder.

5. Business outreach

We may contact businesses that we think would use our film. If we have contacted you without you first contacting us, this section is for you (GDPR Art. 14).

  • What we hold: your name, business email address, role, the business name, and its website or public social media profile.
  • Where it came from: public business sources, such as the business’s own website, public social media profiles and business directories.
  • Why and on what basis: to offer our products to businesses, based on our legitimate interest in direct marketing to businesses (Art. 6(1)(f)), and only where marketing law allows it in your country.
  • Your right to object: you can tell us to stop at any time by replying to any email or writing to alex@lystvik.com. We stop immediately. We keep only your email address on a suppression list, so we never contact you again.
  • How long: if you don’t become a customer, we delete your contact data within 12 months of our last contact, except for the suppression list.

6. Who we share data with

We share personal data only with service providers who process it for us, and only as far as each one needs:

  • IT and software service providers (hosting, email, payments, business automation software). For example, Cloudflare hosts this website and Google (Workspace) provides our email.
  • Accounting and bookkeeping service providers, for our books and tax returns.
  • Suppliers and carriers: your business name, delivery address and contact details, so they can ship your order.
  • Authorities, when the law requires it, for example the Swedish Tax Agency.

7. Transfers outside the EU and EEA

Some of these providers are based in, or process data in, the United States. Where that happens, the transfer relies on the EU–US Data Privacy Framework, where the provider is certified under it, or on the European Commission’s standard contractual clauses.

8. Your rights

You can ask us for access to your data, and to correct, delete, restrict or move it, and you can object to processing based on our legitimate interest. Email alex@lystvik.com. We answer within one month.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or to the data protection authority in your country.

9. Changes

We will update this notice when our processing changes, for example when online checkout opens. The version date is shown at the top.