Privacy policy

About us and this policy

TÔNN furniture is a furniture company in Stockholm, founded in 2011 by Josefine Halfwordson. We protect your privacy and never sell your personal data to other companies. This policy explains what data we collect, why, how long we keep it and what rights you have.

The data controller is TÔNN furniture AB, which runs the website www.tonnfurniture.com. “We”, “us” and “TÔNN” refer to TÔNN furniture AB.

• Company registration number: 559023-5767
• Address: Brännkyrkagatan 35, 118 22 Stockholm, Sweden
• Phone: +46 8 39 65 10
• Email: hello@tonnfurniture.com

You are always welcome to contact us with questions about how we handle your personal data.

What is personal data?

Personal data is any information that can be linked, directly or indirectly, to a living person, such as a name, address, email address, phone number, IP address or cookie ID. Processing means anything done with the data, such as collecting, storing, transferring and deleting it.

Why we process your personal data

We only process the data needed for each purpose, and each purpose has a legal basis under the General Data Protection Regulation (GDPR).

Purpose	Data	Legal basis	How long we keep it
Handling orders, payment and delivery	Name, address, email, phone, items purchased, delivery address	Contract	Until the purchase is completed, then 3 years for complaints and warranty
Meeting legal requirements, such as bookkeeping and product safety	Name, contact details, purchase and payment history	Legal obligation	7 years after the end of the calendar year in which the financial year ended (Swedish Bookkeeping Act)
Customer service, complaints and warranty claims	Name, contact details, correspondence, purchase details	Legitimate interest in helping you	Until the case is closed, then no more than 3 years
Planning help, sketches and meeting bookings, for example via the Portal Planner	Name, contact details, your requirements and measurements	Legitimate interest in responding to your request	12 months after last contact
Newsletter with news and offers	Email address, name if provided, opens and clicks	Consent	Until you unsubscribe
Analytics and marketing via cookies	See the Cookies section	Consent	See the Cookies section

Card details are handled by our payment provider and are not stored by us. If we do not receive the data needed for a purchase, we cannot complete the order.

You can unsubscribe from the newsletter at any time via the link in every email. We then keep your email address on a suppression list, solely to make sure we do not email you again.

Cookies

We only use cookies for analytics and marketing if you have accepted them in our cookie banner. Necessary cookies, which the website needs in order to work, do not require consent.

Cookies are small text files stored in your browser. We also use similar technologies, such as tracking pixels, and the same rules apply to them.

Category	What they are used for	Example tools	Consent required
Necessary	Cart, checkout, security and saving your cookie choice	Shopify, Pandectes	No
Functional	Remembering your choices, such as language	Shopify	Yes
Analytics	Understanding how the website is used so we can improve it	Google Analytics, Hotjar	Yes
Marketing	Showing relevant ads and measuring how they perform	Meta (Facebook and Instagram), Google Ads, Pinterest, Klaviyo	Yes

A full list of cookies, who sets them and how long they are kept is available in our cookie list.

How to change your choice. You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of every page. Your choice is saved in a necessary cookie so we don’t have to ask you on every visit. You can also delete cookies in your browser.

Who we share your personal data with

We only share data when it is needed for the purposes above. Most recipients are data processors, who process the data on our behalf and according to our instructions. We have written agreements with them that protect your data.

Data processors help us with:

• E-commerce platform and website hosting (Shopify)
• Email and newsletters (Klaviyo)
• Web analytics (Google Analytics)
• IT services, technical support and maintenance

Independent controllers decide for themselves how they process the data, under their own privacy policies:

• Transport and logistics companies that deliver your order
• Payment providers and banks, see for example Shopify’s privacy policy
• Advertising platforms such as Meta, Google and Pinterest, if you have accepted marketing cookies
• Authorities, such as tax authorities or the police, when required by law

If all or part of our business is sold or merged with another company, personal data may be transferred to the buyer, who will continue to process it in line with this policy.

Transfers outside the EU/EEA

Some of our providers, such as Google, Meta, Pinterest and Klaviyo, may process personal data in the United States or other countries outside the EU/EEA. We make sure every transfer has a basis under the GDPR: either the recipient is certified under the EU–US Data Privacy Framework, or the European Commission’s standard contractual clauses apply. Contact us if you would like to know more about the safeguards for a specific transfer.

Your rights

You have several rights under the GDPR. Email hello@tonnfurniture.com to use them, and we will reply within one month.

• Access: find out whether we process your data and get a copy of it (Article 15).
• Rectification: have incorrect data corrected (Article 16).
• Erasure: have your data deleted, unless the law requires us to keep it (Article 17).
• Restriction: limit how we use your data (Article 18).
• Data portability: receive your data in a machine-readable format (Article 20).
• Objection: object to processing based on legitimate interest (Article 21).
• Withdrawing consent: at any time, without affecting processing carried out before (Article 7). For cookies, use “Cookie settings” at the bottom of the website.

Complaints. If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se, or to the supervisory authority in the country where you live (Article 77). Feel free to contact us first so we can sort it out together.

We may update this policy when our business or the law changes. The latest version is always available here on the website.

Last updated: 28 October 2026