Privacy policy
This policy explains how JTI Ventures AB, the controller for Pawroom, processes personal data when you browse the store, place an order, create an account or contact us.
JTI Ventures AB
Company registration number: 559041-2358
VAT number: SE559041235801
Andesitgatan 6, 254 68 Helsingborg, Sweden
Email: info@jtiventures.se
Telephone: +46 10 641 20 22
Monday–Friday, 10:00–14:00 (Swedish time).
Data we process and where it comes from
You provide contact and delivery details, order information, account details and messages when you use our services. Our store and service providers also receive technical information such as IP address, device/browser information, cookies and interactions with the site. Payment and delivery providers may provide payment status, transaction references and delivery updates. We do not need your full card details in customer service correspondence.
Purposes and legal grounds
- Orders and customer service: to enter into and fulfil your purchase, arrange payment and delivery, manage returns and respond to order questions. The legal ground is performance of a contract or steps you request before a contract.
- Legal obligations: to retain accounting records and fulfil obligations under consumer and other applicable law.
- Security and service operation: to prevent fraud, maintain the store, investigate problems and protect legal claims, based on our legitimate interests where they are not overridden by your rights.
- Optional marketing and tracking: based on consent where required. You can withdraw consent and unsubscribe from marketing. Necessary order messages are separate from marketing.
Who receives data
We share necessary information with Shopify, payment providers, carriers, fulfilment and IT/customer-service providers to operate the store and deliver your order. Each receives information required for its role. Some providers act as processors on our instructions; others, such as payment providers, may be independent controllers. We may disclose information where required by law, to protect legal rights, or in a business transfer with appropriate safeguards.
Shopify
Shopify hosts the store and processes data to provide and operate the services. Shopify may also act as a controller for certain services as explained in its own policy. See Shopify's consumer privacy policy and privacy portal.
Cookies and choices
Necessary cookies support functions such as the cart, checkout, security and saved choices. Optional analytics or advertising technologies require consent where applicable. You can manage the choices offered in the store's cookie settings and through your browser. Blocking necessary cookies may affect checkout. Withdrawing consent does not affect processing that was lawful before withdrawal.
Retention and security
We keep data for as long as needed for the stated purpose, including completing purchases, handling returns/claims and meeting statutory retention periods. We then delete or anonymise it unless another lawful reason requires retention. Access is restricted to those who need it. We use appropriate safeguards, but no system can guarantee absolute security. Do not send sensitive payment or identity information through the contact form.
Transfers outside the EEA
Some service providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision or appropriate safeguards such as the European Commission's standard contractual clauses. Contact us if you would like information about the relevant safeguards.
Your rights
Subject to the applicable conditions, you can request access, correction, erasure, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent. You can always object to direct marketing. Contact us using the details above. We may need to verify your identity and will respond within the time required by law. Your rights are not reduced because you exercise them.
You may complain to Integritetsskyddsmyndigheten (IMY) in Sweden or your local supervisory authority: Datatilsynet in Norway, Datatilsynet in Denmark or the Office of the Data Protection Ombudsman in Finland.
Children, external links and changes
The store is intended for adults; we do not knowingly collect children's data for marketing. A guardian can contact us about a child's data. External sites have their own privacy policies. We may update this policy when our practices or legal requirements change and will provide notice where required. The current version is published here.