Privacy Policy

Last updated: 31 October 2026

This Privacy Policy explains how Werox AB, trading as Flaggby and Flaggby International (“Flaggby”, “we”, “us”), collects and uses personal data when you visit flaggby.com, create an account, request a quote, contact us or place an order.

1. Data controller and contact details

The data controller is Werox AB, Anders Reimers väg 4, 117 50 Stockholm, Sweden.

2. Personal data we collect

Depending on how you use the website, we may process the following categories of personal data:

Contact and identity data: name, company name, postal address, billing and delivery address, email address, telephone number and, where supplied, company registration or VAT details.
Account data: username, password credentials in protected form, account settings, saved addresses and account activity.
Order and transaction data: products and services ordered, prices, currency, tax information, delivery details, order history, returns, refunds, complaints and related correspondence.
Payment data: payment status, payment method, transaction identifiers and limited card information such as card brand and last digits. Full card details are handled by Stripe and are not stored by us.
Artwork and uploaded files: logos, images, print files, design instructions and any metadata or personal data contained in material you submit for production.
Communications: information provided through contact forms, quote requests, email, telephone, reviews, comments or customer support.
Website and device data: IP address, browser and device type, operating system, referral source, pages viewed, shopping-cart activity, cookie identifiers and security or diagnostic logs.
Preferences: wishlist contents, marketing preferences, newsletter subscription and cookie choices where applicable.
Social-login data: if you choose a supported social sign-in service, we may receive your name, email address, provider identifier, profile image and an access token needed to authenticate the login.

3. How we collect personal data

We receive personal data directly from you when you make a purchase, register an account, upload artwork, subscribe to communications or contact us. We also collect limited technical data automatically when you use the website and receive information from payment providers, delivery partners and social-login providers where necessary to provide the service you requested.

4. Purposes and legal bases

To process quotes, orders, payments, production, delivery, returns and customer support: necessary to enter into or perform a contract with you.
To create and administer customer accounts and wishlists: necessary to provide requested account features and based on our legitimate interest in making repeat purchases easier.
To comply with accounting, tax, consumer-protection and other legal requirements: compliance with legal obligations.
To secure the website, prevent fraud, protect transactions and establish or defend legal claims: our legitimate interests and, where applicable, legal obligations.
To measure and improve the website, products and customer experience: our legitimate interests and, for non-essential analytics technologies where required, your consent.
To send newsletters or other direct marketing: your consent or another lawful basis permitted by applicable marketing law. You may unsubscribe at any time.

5. Payments and fraud prevention

Payments on flaggby.com are processed by Stripe. Information required to complete the payment, authenticate the transaction, prevent fraud and handle refunds or disputes is sent to Stripe. Stripe acts as an independent controller or processor depending on the activity and processes data under its own privacy terms. Stripe and its fraud-prevention tools may use automated checks. A transaction may be declined or selected for review where fraud or security risks are detected. See Stripe’s Privacy Policy.

6. Service providers and other recipients

We share personal data only where necessary for the purposes described above. Recipients may include:

Stripe and other payment, authentication and fraud-prevention providers;
hosting, website, database, backup, caching and security providers, including services used by WordPress, WooCommerce, Jetpack, Akismet, Wordfence and LiteSpeed/QUIC.cloud;
Google services used for website analytics, performance and search reporting, including Google Analytics, Search Console and PageSpeed Insights;
social-login providers selected by you;
production partners, suppliers and subcontractors that help manufacture or customise your order;
carriers and logistics partners that deliver orders;
email, newsletter and customer-support providers;
accountants, auditors, insurers, legal advisers, public authorities or courts where required by law or necessary to protect legal rights.

Comments and reviews may be checked by Akismet for spam. If Gravatar is used, an anonymised value derived from your email address may be sent to Gravatar to determine whether a profile image is available.

7. International transfers

Some service providers may process personal data outside Sweden or the European Economic Area. Where required, transfers are protected by an adequacy decision, the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism, together with appropriate safeguards.

8. Cookies and similar technologies

Flaggby.com uses cookies and similar technologies to operate the shop, keep track of the shopping cart, maintain login sessions, secure the website, remember preferences and understand website usage. Necessary cookies are required for core functions. Analytics and other non-essential technologies are used only to the extent permitted by applicable law. You can restrict or delete cookies through your browser settings, although blocking necessary cookies may prevent parts of the shop from working correctly.

9. Comments, reviews, embedded content and uploaded media

If you submit a comment or review, we may process the information entered, your IP address and browser user-agent to detect spam and abuse. Approved content and your chosen display name may be visible publicly. Embedded content from third-party websites behaves as if you visited that third party directly and may allow that provider to collect data under its own privacy policy.

Files uploaded for printing or design may contain metadata, including location information. Please remove information that is not needed for your order. We use uploaded material only to provide the requested quotation, design, production and support unless another use has been agreed.

10. Retention

We retain personal data only for as long as necessary for the relevant purpose and legal requirements. Order, invoice and accounting records are normally retained for at least seven years in accordance with Swedish accounting requirements. Account information is retained while the account remains active, subject to records we must keep for legal reasons. Quotes, correspondence, artwork, support records and security logs are retained for as long as reasonably needed to provide the service, handle warranties or disputes, prevent fraud and protect the website. Newsletter data is retained until you unsubscribe or the service is discontinued. Comments and reviews may remain while the related content is published.

11. Security

We use appropriate technical and organisational safeguards designed to protect personal data against accidental or unlawful loss, alteration, disclosure or access. Access is limited to people and service providers who need the information for their work. No internet service can, however, guarantee absolute security.

12. Your rights

Depending on the circumstances, you may have the right to request access to your personal data, correction, deletion, restriction of processing, data portability or to object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing that occurred before withdrawal. Legal obligations may prevent us from deleting certain records immediately.

To exercise your rights, contact [email protected]. We may need to verify your identity before responding. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or with the supervisory authority in the country where you live or work.

13. Children

The shop is intended for businesses and adults and is not directed at children. If you believe a child has provided personal data without appropriate authorisation, please contact us.

14. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current version and its last-updated date will be published on this page.

Company Flags

Banner Flags