Privacy policy

PRIVACY POLICY

Monday Matcha (Matcha Mondays AB) protects the personal integrity of all customers and always strives for a high level of data protection. It is important to us that you feel secure in our processing of your personal data. Below you can read about Matcha Mondays AB’s privacy policy. If you want to read about the website provider’s privacy policy, do so here.

WHO IS RESPONSIBLE FOR THE PERSONAL DATA?

Matcha Mondays AB, org. number: 5594438615
Svärdsjövägen 268, 81251 Åshammar, Sweden

Matcha Mondays AB is the data controller for the processing of your personal data. For all privacy-related questions or requests, please contact us at: hello@mondaymatcha.com.

WHAT IS PERSONAL DATA?

All data that can be linked to a person is considered personal data. This means that, for example, customer data, e-mail addresses, telephone numbers and IP addresses are personal data. The General Data Protection Regulation (GDPR) sets requirements on how personal data can be handled. One of the requirements is that it is clearly stated how we as a company handle and use the personal data we collect.

WHAT PERSONAL DATA DO WE COLLECT AND WHY?

We collect personal data that you send to us when you place orders in our webshop, sign up for our newsletter, participate in events and competitions, or share your experiences with us. The personal data you send to us may, for example, include contact, delivery and payment information. Below follows more detailed information about the type of personal data we collect on different occasions, why we collect it and how long we store it.

When handling orders and returns

Processing performed:

  • Delivery (including notification and contact regarding the delivery of the order)
  • Payment
  • Handling of complaints and warranty matters

Categories of personal data:

  • Name
  • Contact and delivery details (address, e-mail and phone number)
  • Payment history
  • Payment information
  • Credit information from credit reporting agencies
  • Purchase information (e.g. which product has been ordered or if the product is to be delivered to a different address)

Legal basis:
Performance of the purchase agreement. This collection of your personal data is required in order for us to fulfil our obligations under the purchase agreement. If the information is not provided, our obligations cannot be fulfilled and we are forced to refuse the purchase.

Storage period:
Until the purchase has been completed (delivery and payment) and for a period of 36 months thereafter, in order to handle any complaints and warranty matters. Some information may be stored longer where required by law, such as accounting rules.

When handling customer service matters

Processing performed:

  • Communication between customer and company (including phone, e-mail and social media)
  • Investigation of complaints and support matters

Categories of personal data:

  • Name
  • Contact information (address, e-mail and phone number)
  • The correspondence
  • Information about the time of purchase and any errors or complaints

Legal basis:
Legitimate interest. The processing is necessary to satisfy our and your legitimate interest in handling customer service matters.

Storage period:
Until the customer service matter has been completed.

Newsletter & events

Processing performed:

  • Information mailings via e-mail (news, offers and inspiration), always with instructions on how you can unsubscribe from further mailings
  • Communication in connection with events (including confirmation of registrations, questions or evaluations)
  • Identification and verification of age

Categories of personal data:

  • Name
  • Sex
  • Age
  • E-mail
  • Information provided in competition entries
  • Data submitted for evaluation purposes

Legal basis:
Legitimate interest. The processing is necessary to satisfy our and your legitimate interest in managing your participation in newsletters, events or competitions.

Storage period:
Until the membership is terminated (manually, or automatically after 24 months of inactivity).

Customer stories and surveys

Processing performed:
Collecting and reading stories and experiences that customers choose to share with us, for example by replying to an e-mail, in order to better understand our customers and develop our products and communication.

Categories of personal data:

  • Name
  • E-mail
  • The content of your reply, which may include information about your health (for example a diagnosis such as ADHD). Health data is a special category of personal data under the GDPR.

Legal basis:
Explicit consent (Article 6(1)(a) and Article 9(2)(a) GDPR), which you give by choosing to reply. Participation is entirely voluntary. You can withdraw your consent at any time by e-mailing hello@mondaymatcha.com, and we will delete your reply. Withdrawing your consent does not affect processing carried out before the withdrawal.

Publication:
We never publish anything you share without first asking for your separate approval.

Access:
Only a limited number of people within Monday Matcha have access to your reply.

Storage period:
A maximum of 12 months, after which your reply is deleted.

FROM WHICH SOURCES DO WE OBTAIN YOUR PERSONAL DATA?

We use the information that you provide to us yourself, or that we collect based on your purchases and/or participation in events. We never store your personal data longer than necessary for the respective purpose.

WHO MAY WE SHARE YOUR INFORMATION WITH?

In order to offer the services above and fulfil our commitments to you as a customer, we share your personal data with companies that act as data processors for us. Data processors process the information on our behalf and according to our instructions, and help us with IT services, payment services, transport and marketing. This is done only for the purposes for which we collected the information, and only with companies that can provide sufficient guarantees regarding the security and confidentiality of personal data. We never pass on, sell or exchange your personal data to third parties for marketing purposes.

We have data processors who help us with:

  • Transport (logistics companies, freight forwarders and delivery agents)
  • Payment solutions (payment service providers)
  • IT services (companies that manage operations, e-mail, technical support and IT solutions)
  • Website provider Shopify (read more about their terms and conditions here)

Some of our service providers (such as Shopify, Omnisend and Google) may process your data outside the EU/EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?

You have the right to request information about the personal data we hold about you at any time. If your data is incorrect, incomplete or irrelevant, you can request to have it corrected or deleted. We cannot delete your data when there is a statutory storage requirement, such as accounting rules, or when there are other legitimate reasons why the data must be kept, such as unpaid invoices. You can contact us at any time at hello@mondaymatcha.com. Below is more detailed information about your rights as a data subject.

  • Right of access. You can request a copy of the personal data we process about you (a so-called register extract).
  • Right to rectification. You can request that your personal data be corrected if it is incorrect.
  • Right to erasure. You can request the deletion of personal data we process if it is no longer necessary for the purposes for which it was collected, if you withdraw your consent, or if we process the data unlawfully.
  • Right to restriction. You have the right to request that our processing of your personal data be restricted.
  • Right to data portability. Where processing is based on consent or a contract, you have the right to receive your data in a structured, commonly used format.
  • Right to object. You can object to processing based on our legitimate interest, including direct marketing. You can unsubscribe from our newsletter at any time via the link in every e-mail.
  • Right to withdraw consent. Where processing is based on your consent, you can withdraw it at any time by contacting us.
  • Right to lodge a complaint. If you are dissatisfied with how we process your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.

WHAT ARE COOKIES AND HOW DO WE USE THEM?

Cookies are small text files consisting of letters and numbers that are sent from our web server and saved in your browser or device. Cookies are used to enable functions and provide statistics about your visit.

We use Shopify as our website provider. Shopify uses cookies in different ways; read about their cookie policy here.

Your browser or device lets you change the settings for the use and scope of cookies. Go to the settings of your browser or device to learn more. For example, you can block all cookies, accept only first-party cookies, or delete cookies when you close your browser. If you want to shop in the store without cookies being saved after you close your browser, you can visit the page in private mode: “Incognito window” (Chrome), “Private window” (Firefox) or “InPrivate window” (Microsoft Edge). All cookies set during a private visit are deleted when you close the browser. If you want to know more about cookies, read here.

We use tools such as Google Analytics, Hotjar and Omnisend to help us understand how visitors interact with our website and e-mails. These tools may collect information such as your IP address, browser type, pages visited and time spent on our site.

We also use Shopify as our e-commerce platform, which may collect technical information for security, performance and optimisation purposes. You can learn more in their privacy policy.

Our cookie banner is powered by Presidio, which lets you manage your consent preferences regarding cookies and tracking tools. You can always manage or withdraw your consent via “Cookie Settings” at the bottom of the page.

CHANGES TO THIS PRIVACY POLICY

We may update this privacy policy from time to time to reflect changes to our practices or for other legal or regulatory reasons. The most current version will always be available on this page, and we encourage you to review it periodically.

Last updated: October 2026