Privacy policy

PRIVACY POLICY

Last updated: 3 August 2026

1. Data controller

Montessori Solution is the trading name used by Julija Manko in her sole-trader business.

Julija Manko is the data controller responsible for the processing of personal data described in this Privacy Policy.

Business name: Julija Manko
Trading name: Montessori Solution
Legal form: Sole trader
Organisation number: 771108-2649
VAT registration number: SE771108264901
Address: Långeken 402, 195 92 Märsta, Sweden
Email: info@montessorisolution.eu
Telephone: +46 72 903 07 89

In this policy, “we”, “us” and “our” refer to Julija Manko and Montessori Solution.

2. When this policy applies

This Privacy Policy explains how we collect, use, store and disclose personal data when you:

  • visit montessorisolution.eu;

  • create or use a customer account;

  • make a purchase or another transaction;

  • contact us;

  • request a return, exercise the right of withdrawal or submit a complaint concerning a product;

  • subscribe to marketing; or

  • otherwise use our website and services.

Our website and online store are provided using Shopify’s e-commerce platform.

3. Personal data we process

Depending on how you use the website, we may process the following personal data:

Contact and identity information

Your name, delivery address, billing address, email address and telephone number.

Order and transaction information

Order number, products ordered, price, discounts, delivery method, payment status, returns, cancellations, complaints concerning products and previous transactions.

Payment information

Payment information is normally provided directly to the payment provider available at checkout. We usually receive the information needed to confirm and administer the payment, such as the payment status, payment method, transaction reference and limited or masked payment information.

We do not normally store complete payment-card numbers or card security codes.

Customer account information

If customer accounts are used, we may process login details, account settings, saved addresses and order history.

Communications

Information you provide when contacting us, including questions, customer-service matters, return requests and product complaints, as well as photographs or other documentation you send to us.

Technical and usage information

IP address, device type, browser, operating system, network information, cookie identifiers and information about how and when you use the website, the pages and products you view and the products you place in your shopping cart.

Marketing information

Information about whether you have subscribed to marketing, your consents, communication preferences and how you interact with our marketing communications.

Please do not send us sensitive personal data unless it is necessary for us to handle a particular matter.

4. How we collect personal data

We may receive personal data:

  • directly from you when you place an order, create an account, contact us or provide information through the website;

  • automatically from your device through essential cookies and, after obtaining your consent where required, other cookies and similar technologies;

  • from Shopify and the applications or services connected to the store;

  • from payment providers;

  • from carriers and other delivery providers; and

  • from marketing, analytics, security or technical service providers used by us.

5. Why we process personal data and our legal bases

Orders and contracts

We process personal data to:

  • receive and administer orders;

  • handle payments;

  • deliver products;

  • send order and delivery information;

  • administer customer accounts;

  • manage cancellations, returns and refunds; and

  • perform our other obligations under the sales contract.

The legal basis is that processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, in accordance with Article 6(1)(b) of the GDPR.

Customer service and complaints

We process contact details, order information and communications to answer questions and handle returns, complaints concerning products, warranty matters and other customer-service matters.

The legal basis is the performance of a contract, compliance with a legal obligation and, where applicable, our legitimate interest in providing customer service and managing legal claims.

Accounting, taxation and other legal requirements

We process and retain information where necessary to comply with accounting, taxation and consumer legislation or to respond to lawful requests from public authorities.

The legal basis is compliance with a legal obligation under Article 6(1)(c) of the GDPR.

Security and fraud prevention

We may process technical, account and transaction information to protect the website, payments, customers and our business and to prevent, detect and investigate fraud, misuse and security incidents.

The legal basis is our legitimate interest in operating a secure business and protecting our rights and the rights of others under Article 6(1)(f) of the GDPR.

Marketing

If you have chosen to receive marketing, we may use your email address or other contact details to send news, offers and product information.

The legal basis is your consent under Article 6(1)(a) of the GDPR where consent is required. You may unsubscribe at any time by using the link in the communication or by contacting us.

Order confirmations, delivery information and other communications required to administer your purchase are not marketing.

Analytics, personalisation and advertising

With your consent, where required, we may use cookies and similar technologies to:

  • understand how the website is used;

  • measure the performance of the website and our marketing;

  • improve the customer experience;

  • personalise content and product recommendations; and

  • display more relevant advertising.

The legal basis is your consent under Article 6(1)(a) of the GDPR. You may change or withdraw your choice at any time through the website’s cookie settings.

6. Cookies and similar technologies

We and our service providers, including Shopify, use cookies and similar technologies.

Essential cookies are used for functions required for the website, customer accounts, shopping cart and checkout to operate securely.

In Sweden and elsewhere in the EEA, analytics, marketing and personalisation cookies are used only after you have given consent where such consent is required.

You can accept, reject or change your choices using the cookie banner and the cookie-preferences link on the website. Withdrawing consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

7. Recipients of personal data

Where necessary, we may disclose personal data to:

  • Shopify and providers of e-commerce and website services;

  • payment providers and banks;

  • carriers, warehouse providers and delivery providers;

  • providers of IT, cloud-storage, security and customer-support services;

  • analytics and marketing providers, where applicable and after any required consent;

  • accounting, tax, legal and other professional advisers; and

  • public authorities or courts where required by law or where necessary to establish, exercise or defend legal claims.

Service providers receive only the information required to perform their tasks. They process information under contractual obligations and applicable data-protection legislation.

8. Shopify

Our store uses Shopify’s e-commerce platform. Shopify processes personal data to provide and secure the platform, operate store functions and develop and improve its services.

When Shopify processes information on our behalf, Shopify acts as a data processor. For certain independent or enhanced services, Shopify may process personal data as a separate data controller.

Shopify Network Intelligence and related features may use information from your interactions with our store, Shopify and other Shopify merchants to help us and Shopify:

  • provide a more personalised experience;

  • display more relevant advertising; and

  • understand how customers interact with the store and advertisements.

In regions where consent is required, information from non-essential cookies and similar technologies is used for these purposes only after consent has been given. If you reject such cookies, your choice should be respected through Shopify’s customer-privacy features.

More information about Shopify’s processing and how you can exercise rights directly against Shopify is available in the Shopify Consumer Privacy Policy:

https://privacy.shopify.com/en

9. International transfers

Shopify and certain other service providers may process personal data outside Sweden and the European Economic Area.

Where personal data is transferred to a country outside the EEA, we and our service providers use recognised safeguards where required, including:

  • an adequacy decision issued by the European Commission;

  • the European Commission’s Standard Contractual Clauses;

  • approved Binding Corporate Rules; or

  • other legally recognised safeguards.

10. How long personal data is retained

We do not retain personal data for longer than necessary for the purpose for which it was collected unless we are legally required to retain it for a longer period.

  • Order, payment and accounting records are retained for seven years after the end of the calendar year in which the relevant financial year ended.

  • Customer-account information is retained while the account remains active and afterwards only for as long as required for lawful or legitimate purposes.

  • Customer-service, return and product-complaint information is retained while the matter is being handled and afterwards for as long as required to comply with the law or manage potential claims.

  • Marketing information is retained until you unsubscribe, withdraw your consent or we discontinue the relevant marketing activity.

  • Technical logs and security information are retained only for as long as needed for security, troubleshooting and prevention of misuse.

  • Records of consent may be retained for as long as necessary to demonstrate that your choice was respected and that the processing was lawful.

When information is no longer required, it is securely deleted or anonymised.

11. Your rights

Under the GDPR, and depending on the circumstances, you may have the right to:

  • receive information about how your personal data is processed;

  • request access to your personal data;

  • have inaccurate or incomplete information corrected;

  • request deletion of your information;

  • request restriction of processing;

  • receive certain information in a structured, commonly used and machine-readable format;

  • object to processing based on legitimate interests; and

  • withdraw consent where processing is based on consent.

The right to object to direct marketing is absolute. If you object, we will no longer process your personal data for that direct-marketing purpose.

Certain rights may be restricted, for example where we must retain information under accounting legislation or require it to establish, exercise or defend legal claims.

To exercise your rights, contact us at info@montessorisolution.eu. We may need to verify your identity before completing the request. We normally respond to a request within one month.

12. Information required to make a purchase

Certain personal data, including your name, contact details, delivery address and payment information, is required for us to enter into and perform a sales contract.

If this information is not provided, we may be unable to accept payment, deliver the order or perform our obligations.

Providing information for marketing and non-essential cookies is voluntary.

13. Automated decision-making

We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

Product recommendations, personalised content and advertising may be based partly on previous activity on the website, but only where permitted and, where required, after obtaining your consent.

14. Children’s personal data

Our products may be intended for children, but the online store is directed at adults purchasing products for children.

We do not knowingly collect personal data directly from anyone under the age of 18. If you are a parent or guardian and believe that a child has provided personal data to us, you may contact us and request its deletion.

15. Security

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration or disclosure.

However, no transmission or storage of information can be guaranteed to be completely secure. You should therefore avoid sending sensitive or confidential information through insecure communication channels.

16. Links to other websites

The website may contain links to external websites and services. We are not responsible for how these third parties process personal data. Please review their privacy policies before providing personal data to them.

17. Complaints

If you believe that we have processed your personal data incorrectly, please contact us first so that we can try to resolve the matter.

You also have the right to submit a complaint to the Swedish Authority for Privacy Protection or to the data-protection authority in the country where you live, work or believe that an infringement occurred.

Swedish Authority for Privacy Protection – Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm
Sweden
www.imy.se

18. Changes to this policy

We may update this Privacy Policy when our services, providers, technical solutions or legal obligations change.

The current version will be published on the website, and the date of the latest update will be stated at the top of the policy.

19. Contact

If you have questions about this Privacy Policy, want to know how your personal data is processed or wish to exercise any of your rights, please contact:

Julija Manko / Montessori Solution
Långeken 402
195 92 Märsta
Sweden

Email: info@montessorisolution.eu
Telephone: +46 72 903 07 89
Organisation number: 771108-2649
VAT registration number: SE771108264901