Privacy Policy

EVASION AB ("EVASION", "we", "our", "us") is a company registered in Sweden (org. nr. 559312-4801), with its registered office at Birger Jarlsgatan 57, 113 56 Stockholm. We operate the website evasion.com and all associated sub-domains (the "Site").

For questions about this policy, contact us at privacy@evasion.com.

We collect information you provide directly to us, including:

— Identity data: name, email address, billing and shipping address, phone number. — Payment data: card number, expiry, and CVV processed via our payment processor (Stripe). We do not store full card details on our servers. — Order data: products purchased, order history, returns, and warranty claims. — Account data: username, password (hashed), and preferences if you create an account. — Usage data: IP address, browser type, pages visited, time on site, referral source — collected automatically via cookies and analytics tools. — Communications: content of emails or messages you send us.

We use your data to:

— Process and fulfil orders, including shipping and payment. — Manage your account and authenticate your identity. — Send transactional emails (order confirmations, shipping updates, warranty notices). — Respond to enquiries and support requests. — Send marketing communications, where you have opted in. — Analyse site usage and improve our products and services. — Comply with legal obligations (tax records, consumer protection law).

Under the GDPR, we rely on the following legal bases:

— Contract: processing necessary to fulfil your order. — Legitimate interests: fraud prevention, site security, and internal analytics. — Consent: marketing emails and non-essential cookies. You may withdraw consent at any time. — Legal obligation: tax and accounting records retained as required by Swedish law.

We do not sell your personal data. We share data only with:

— Payment processors (Stripe) to handle transactions. — Shipping carriers (DHL, PostNord, UPS) to deliver orders. — Cloud infrastructure providers (Vercel, AWS) that host our services. — Analytics providers (Vercel Analytics) under strict data processing agreements. — Legal authorities where required by law.

All third parties are required to process your data only as instructed and in accordance with applicable data protection law.

Some of our service providers are based outside the EEA. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place — typically Standard Contractual Clauses approved by the European Commission.

We retain your data for as long as necessary to fulfil the purposes outlined in this policy. Order records are retained for 7 years to comply with Swedish accounting law. You may request deletion of your account data at any time, subject to legal retention obligations.

Under GDPR, you have the right to:

— Access the personal data we hold about you. — Correct inaccurate data. — Request erasure ("right to be forgotten"), subject to legal exceptions. — Restrict or object to processing. — Data portability: receive your data in a structured, machine-readable format. — Withdraw consent at any time where processing is based on consent. — Lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.

To exercise any right, email privacy@evasion.com. We will respond within 30 days.

We use cookies and similar technologies. See our Cookie Policy for full details. You can manage your preferences via the cookie banner or your browser settings.

Our Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact privacy@evasion.com and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email or by a prominent notice on the Site. The date at the bottom of this page reflects when the policy was last updated.