Integritetspolicy
Privacy policy
What we collect, why, how long we keep it, and the one category of data we have deliberately made impossible to store.
Last updated 16 August 2026.
Kontakt: support@sittingfeather.cfd · +46 941 104 64
In one paragraph
We collect what an order or a question needs: your name, contact details, delivery address and what you wrote to us. We do not collect anything about your health, and there is no field in our system that could hold a diagnosis, a condition or a disability type. We do not sell data, we do not profile, and we do not run advertising trackers.
Who is responsible for your data
SITTING FEATHER AB is the data controller. The supervisory authority is IMY in Sweden.
Read the detail
Data controller
SITTING FEATHER AB
Storgatan 35, 919 31 Åsele, Sverige
Organisationsnummer: 556608-4868
Questions about your data go to support@sittingfeather.cfd. We answer within two working days and always within one month, as the GDPR requires.
We process personal data under the General Data Protection Regulation (EU) 2016/679 and the Swedish dataskyddslagen (2018:218). The supervisory authority is Integritetsskyddsmyndigheten (IMY).
The Dressing Route matcher, in detail
The matcher asks four questions about movement: how you usually dress, whether you can raise your arms, whether you can pinch something small, and whether someone helps. It never asks about a diagnosis, a condition or a disability type.
Why we are careful anyway
Answers about movement can suggest something about health even when nothing about health was asked. We treat them as data adjacent to a special category under Article 9 of the GDPR and we handle them accordingly, which in practice means we do not keep them.
What actually happens
- Your four answers stay in the memory of the browser tab you are using. They are held in the page itself, not in a cookie and not in local storage.
- They are never sent to our servers. The matching runs entirely in your browser, so the answers never leave your device at all.
- They are never attached to an account, an order or an email address.
- They are never used to build a profile, to target advertising, or to decide what you are shown anywhere else on this site.
- They are never shared with anyone.
- Reload the page or close the tab and they are gone.
If we ever offer to save your preferences
We do not today. If we ever do, it would require a separate, explicit opt-in that stands alone from any other consent, the retention would be six months at most, and there would be a single control to delete it immediately. We would not enable it quietly.
What we collect and why
Order details, contact messages and closure descriptions. Each has a legal basis and a retention period.
Read the detail
When you place an order
Name, email address, phone number, delivery address, order contents, and any delivery note you write. Legal basis: performance of a contract, Article 6(1)(b). Retention: seven years from the end of the financial year, because Swedish accounting law (bokföringslagen 1999:1078) requires it.
When you write to us
Name, email address, optional phone number, country, subject and the message itself. Legal basis: our legitimate interest in answering you, Article 6(1)(f). Retention: 24 months from the last message in the thread, then deleted.
When you send a closure description
Name, email address, the movement you described, which closures you have tried, what went wrong, and whether someone helps you dress. Legal basis: our legitimate interest in answering you, Article 6(1)(f). Retention: 12 months, then deleted. This form has no field for a diagnosis and we ask you not to write one.
When you subscribe to email updates
Email address only. Legal basis: consent, Article 6(1)(a). Retention: until you unsubscribe, which is one click in every email we send.
When you simply visit
Our server keeps standard technical logs: IP address, browser type, the page requested and the time. Legal basis: legitimate interest in keeping the site available and secure, Article 6(1)(f). Retention: 30 days.
What we never collect
Health data. Not by accident, not by inference, and not by leaving a text box open for it.
Read the detail
We do not collect diagnoses, conditions, disability types, medication, treatment history or any other health information. There is no field for it in any form, no column for it in any table, and no plan to add one.
Our forms ask you not to write health information in free-text boxes. If you send it anyway, we delete it from the record and answer your question without it.
We also do not ask for a date of birth, a personal identity number (personnummer), or any identity document.
Who else sees your data
Only the suppliers who deliver the parcel, take the payment, send the email and host the site.
Read the detail
- Payment service provider. Handles the card transaction. They receive what a payment needs. We never receive your full card number.
- Carrier. Receives the name, address and phone number needed to deliver the parcel.
- Email provider. Sends order confirmations and our replies.
- Hosting and database provider. Stores the site and the order records.
Each is a processor bound by a data processing agreement. None of them may use your data for their own purposes. We do not sell, rent or trade personal data to anyone, ever.
Where a supplier processes data outside the EU or EEA, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.
Your rights
Access, correction, erasure, restriction, portability, objection and withdrawal of consent. Write to us and we act within one month.
Read the detail
- Access. A copy of what we hold about you.
- Correction. Anything wrong put right.
- Erasure. Deletion, except records that accounting law requires us to keep.
- Restriction. We pause processing while a dispute is resolved.
- Portability. A machine-readable copy of the data you gave us.
- Objection. You can object to processing based on legitimate interest.
- Withdrawing consent. Where processing rests on consent, you can withdraw it at any time without affecting what was lawful before.
Write to support@sittingfeather.cfd. We do not charge for any of this and we do not require a special form.
If you are not satisfied with how we handled it, you can complain to Integritetsskyddsmyndigheten (IMY): imy.se (opens in a new tab). IMY, Box 8114, 104 20 Stockholm, Sverige.
Security
HTTPS everywhere, access limited to the people who need it, and no card data on our systems.
Read the detail
Every page of this site, including checkout, is served over HTTPS. Data at rest is held by our hosting and database provider with encryption enabled. Access to order records is limited to the people who fulfil and support orders.
We hold no card numbers, so there is no card data on our systems to lose. If a breach ever affected your data and posed a risk to you, we would tell you and notify IMY within 72 hours, as the GDPR requires.
Children
This store is not for children. We do not knowingly process the data of anyone under 13.
Read the detail
This store is intended for adults. We do not knowingly collect data from anyone under 13. A person aged 13 to 17 needs the agreement of a parent or guardian to place an order.
If you believe a child has given us personal data, write to support@sittingfeather.cfd and we will delete it.
See also our cookie policy.
This page is written in English for readability. The Swedish legal terms are kept in Swedish where they name a statutory right, an authority or an official form. If anything here is unclear, write to support@sittingfeather.cfd and we will explain it in plain language. See also the company information page.