Privacy policy

Last updated: 29 October 2026

This policy explains how TON Creative Studios AB ("Loved Pieces", "we") collects and uses your personal data when you visit lovedpieces.com, use our engraving studio or place an order. We follow the EU General Data Protection Regulation (GDPR).

Who is responsible

The data controller is TON Creative Studios AB, Västergatan 6D, 352 30 Växjö, Sweden, organisation number 559029-8450, VAT number SE559029845001. Contact: support@lovedpieces.com.

What we collect

  • Order and contact details: name, email, phone number, billing and delivery address, order history.
  • Payment details: processed by our payment providers. We do not store full card numbers.
  • Your designs: photos, handwriting, drawings, text, dates and places you upload or enter in the engraving studio, and the finished engraving files.
  • Voice notes and videos: if you record or upload a voice note, or upload a short video, for a "scan to play" engraving, we store the file (and its sound wave or a still image). Anyone who scans the code on the piece, or has its link, can play it. We also email you the original file with your order, so you always have a copy.
  • Places: places you search for in the studio, for a map or star map, and your location if you choose "use my location".
  • Reviews: your first name, country, rating and review text, if you write a review.
  • Messages: emails and other messages you send us.
  • Technical data: IP address, device and browser type, pages visited, and cookie data.

Photos you upload may show other people or reveal information about them. Please only upload photos you have the right to use and, where needed, the consent of the people shown.

Why we use it, and our legal basis

  • To create, make and deliver your order, and to provide customer service (performance of a contract, Art. 6(1)(b) GDPR).
  • To meet accounting, tax and other legal duties (legal obligation, Art. 6(1)(c)).
  • To keep our store secure, prevent fraud and improve our website (legitimate interests, Art. 6(1)(f)).
  • To ask you for a review after your order has shipped, once, with a link to opt out (legitimate interests, Art. 6(1)(f)), and to publish the review you choose to write (consent, Art. 6(1)(a)).
  • To send newsletters and marketing, and to use non-essential cookies (consent, Art. 6(1)(a)). You can withdraw consent at any time.

We never use your photos or designs in our marketing without your explicit permission.

Who we share it with

We share data only with service providers who help us run the store, under data processing agreements:

  • Shopify (store platform and checkout)
  • Payment providers (Shopify Payments and the other payment methods shown at checkout)
  • Our production partner, who engraves and ships your order from the Netherlands or the United States
  • Vercel Inc. (website services and file storage for your uploaded images, design files, voice notes and videos)
  • PostHog (website analytics, hosted in the EU; cookieless until you accept analytics cookies)
  • Google (fonts on our pages; Google Analytics and Google Ads, measuring visits and purchases, with your consent)
  • Map and place services: OpenFreeMap (map images), Open-Meteo (place search) and, only if you choose "use my location", BigDataCloud (to name the place)
  • A translation service provider, to show published reviews in other languages
  • Shipping carriers, to deliver your parcel
  • SendGrid (order, service and reminder emails)

Some of these providers are based outside the EU/EEA, including in the United States. Where this is the case, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

How long we keep it

  • Order and accounting records: as long as the law requires, 7 years under the Swedish Accounting Act (Bokföringslagen).
  • Uploaded photos and design files: deleted automatically 12 months after upload. Until then we can remake your piece if needed. You can ask us to delete them sooner.
  • Voice notes and videos linked to a scan code: for as long as the piece needs them to play, because the code is engraved permanently. You can ask us to delete one at any time; the code will then stop playing it.
  • Designs you save or email to yourself, and checkouts you leave unfinished: we may send you up to two reminder emails (legitimate interest, Art. 6(1)(f)); every email lets you stop them. Saved designs and unfinished checkouts are deleted automatically after 12 months.
  • Reviews: for as long as they are published. You can ask us to remove yours at any time.
  • Marketing data: until you unsubscribe or withdraw consent.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its use, to data portability, and to withdraw consent at any time. To use these rights, email support@lovedpieces.com. You also have the right to complain to your local data protection authority, or to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Cookies

We use cookies needed for the store to work, such as your bag and checkout. With your consent, we also use cookies for analytics and marketing. You can change your choices at any time in the cookie settings.

Changes

We may update this policy. The latest version is always on this page.