Privacy policy
Last updated: 2026-11-03
This policy explains how Query-IT Motala AB ("we") processes personal data when you visit storeforagents.com, contact us or buy from us.
1. Controller
Query-IT Motala AB, org. no. 559578-9313, Strandvägen 72, 591 45 Motala, Sweden. Email: privacy@storeforagents.com. We are the controller for the processing described here.
2. What we process, why, and on which legal basis
- Orders and delivery - name, email, delivery address, phone number (if given), what you ordered and payment status. Purpose: to carry out your purchase and deliver it. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
- Bookkeeping - order and payment records. Legal basis: legal obligation under the Swedish Bookkeeping Act (Art. 6(1)(c)).
- Customer service, complaints and withdrawals - your contact details and messages. Legal basis: contract and legal obligation; otherwise our legitimate interest in answering you (Art. 6(1)(f)).
- Purchases by AI agents - the data your agent and Stripe send us for the order (for example what is ordered, name, email and delivery address) and technical data about the agent’s requests (IP address and user agent). Purpose: to carry out the purchase, check that it is allowed (for example delivery to Sweden only) and prevent abuse. Legal basis: performance of a contract (Art. 6(1)(b)) and our legitimate interest in security (Art. 6(1)(f)). The provider of your agent processes the data under its own terms and is responsible for that itself.
- Website packages - contact details and the material you send us for your website. Legal basis: performance of a contract (Art. 6(1)(b)). Where we process personal data on your behalf in the website itself, you are the controller and we are the processor (see section 12 of the terms of sale).
- Website enquiries - when a company contacts us about a website, we may collect public information about the company, for example from allabolag.se and the company’s own website, to prepare a proposal. Legal basis: steps taken at your request before a contract (Art. 6(1)(b)) and our legitimate interest in answering the enquiry (Art. 6(1)(f)). You can object at any time.
- Searches on the site - search terms are stored without IP address or any other link to you, as anonymous statistics on what people look for. Please do not type personal data in the search field.
- Security and operation - IP address, browser information and requested pages in server logs. Legal basis: our legitimate interest in keeping the site secure and working (Art. 6(1)(f)).
- Language cookie - only if you allow functional cookies. Legal basis: consent (Art. 6(1)(a)). See the cookie policy.
We do not sell personal data, and we do not use it for profiling or advertising. The site has no analytics or advertising trackers.
3. Who receives the data
- Stripe (Stripe Payments Europe Ltd., Ireland) handles payments. You enter card details on Stripe's page; they never reach us. For some processing, such as fraud prevention and its own legal obligations, Stripe is an independent controller: stripe.com/privacy.
- Hostinger hosts the website and our email, as our processor.
- For purchases by AI agents Stripe passes the order between your agent and us. Stripe and the agent provider are each independent controllers for their own processing.
- Dropshipping supplier (CJdropshipping) receives your name, delivery address, phone number and order contents so that it can ship the goods to you.
- Carriers receive what they need to deliver the parcel, and authorities receive data when the law requires it.
4. Transfers outside the EU/EEA
Stripe may transfer data to the USA under the EU-US Data Privacy Framework and the EU standard contractual clauses. Our dropshipping supplier CJdropshipping is located outside the EU/EEA. We only share the delivery details it needs to ship your order (name, address, phone number and the items ordered); this transfer is necessary to perform our contract with you (GDPR art. 49(1)(b)).
5. How long we keep data
- Order and accounting records: seven years after the end of the calendar year of the purchase (Swedish Bookkeeping Act).
- Customer service, complaint and withdrawal cases: as long as needed to handle the case and possible claims, normally three years (the complaint period).
- Server logs: kept by our hosting provider Hostinger for a limited period and then deleted automatically; we use them only for security and troubleshooting.
- Cookies: see the cookie policy.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. Where we rely on consent, you can withdraw it at any time. Write to privacy@storeforagents.com; we reply within one month.
7. Complaints
If you think we process your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): imy.se. You can also contact the data protection authority where you live.
8. Changes
We update this policy when our processing changes. The date at the top shows the current version.