Privacy policy

Last updated: 26 September 2026

Your privacy is important to us. In this privacy policy we explain what personal data Don Lorino processes, why we process it, how long it is kept and what rights you have.

1. Data controller

Don Lorino is a brand operated by Alexandra Lundegård AB. Alexandra Lundegård AB is the data controller for the processing of personal data described in this policy.

Alexandra Lundegård AB
Company registration number: 559264-0311
Håven 1
193 41 Sigtuna
Sweden
Email: info@donlorino.com

2. What personal data we process

The data we process depends on how you use our website and which services you use. It may include:

• name, delivery address and billing address,
• email address and phone number,
• order details, selected products, payment status, delivery details, returns and complaints,
• communication with customer service,
• account details if you create a customer account,
• photos you upload in the Pawtraits portrait tool, the portrait images created from them and your choice of style and format, even if you don't buy anything,
• details you want engraved on a personalised product, for example an ID tag,
• technical data, such as IP address, device type, browser and time zone, and
• data about how you use the website, for example which pages and products you visit and how you found us.

Payment details are processed by the payment provider you choose. Don Lorino normally only has access to the information needed to see the payment status and administer the order, not full card details.

3. Where the data comes from

We primarily receive the data directly from you when you place an order, contact us, create an account, sign up for marketing, request a return or upload a photo in the portrait tool. Technical and usage data may be collected through cookies and similar technologies. We may also receive delivery and payment status from our delivery and payment providers.

4. Why we process the data

Handling purchases, payment and delivery

We process contact, order, payment and delivery details to receive and administer your order, deliver the goods, send order information and handle payment.

Legal basis: The processing is necessary to perform the contract with you.

Pawtraits – portraits and previews

When you use our Pawtraits portrait tool, we process the photo you upload, your chosen style and the portrait images that are created. We do this to show a preview and, if you buy, to produce, print and deliver your portrait and handle any complaints. The portraits are created using Google's AI service Gemini, which processes the photo on our behalf.

We do not store your original photo; we only use it during the short time the portrait is being created. Neither we nor Google use your photos to train AI models. Google may retain data for a limited time to detect and prevent misuse of the service.

A photo of an animal is not normally personal data in itself. However, the photo is linked to your order, it may show people and it may contain metadata, for example where and when the picture was taken. We therefore treat all uploaded photos as personal data. Consider removing location information before uploading a photo. Only upload photos you have the right to use, and if a person is visible in the photo, you are responsible for ensuring they have agreed to it.

Legal basis: For the preview: steps taken at your request before entering into a contract. For purchases: the processing is necessary to perform the contract with you.

Engraved and other personalised products

When you order an engraved or otherwise personalised product, we process the details you want engraved or added, for example a name or phone number, in order to make and deliver the product.

Legal basis: The processing is necessary to perform the contract with you.

Customer service, returns and complaints

We process your contact details, order details and the communication or documentation needed to answer questions and handle returns, withdrawals, exchanges, complaints and warranty cases.

Legal basis: Performance of a contract and, where applicable, a legal obligation. For general customer service, the processing may also be based on our legitimate interest in providing good service and following up customer cases.

Accounting and other legal obligations

We process data to the extent required to meet obligations under, for example, accounting, tax and consumer legislation.

Legal basis: Legal obligation.

Preventing fraud and protecting our business

We may process order, payment and technical data to prevent and investigate fraud, misuse, security incidents and unauthorised attempts to use the website.

Legal basis: Our legitimate interest in protecting customers, the website and the business. In some cases the processing may also be necessary to establish, exercise or defend legal claims.

Newsletters and direct marketing

If you sign up for our newsletter, we process your email address and information about your choices in order to send offers and news. You can unsubscribe at any time via the link in the email or by contacting us.

Legal basis: Consent where required. In situations where the law permits marketing to existing customers, the processing may be based on our legitimate interest in marketing similar products, always with the option to object free of charge.

Portraits in our marketing

We only show your portrait or your photo in our channels, for example on Instagram or the website, if you have separately consented to this. You can withdraw your consent at any time.

Legal basis: Consent.

Analytics, development and advertising

Depending on your choice in our cookie settings, we may use information about how the website is used to measure traffic, understand which parts work well, improve the customer experience and measure or tailor advertising. Such processing may involve sharing data with providers of analytics and advertising services.

Legal basis: Consent. You can change or withdraw your choice at any time via the website's cookie settings. Withdrawing consent does not affect the lawfulness of processing already carried out.

5. Cookies and similar technologies

We use necessary cookies so that the website, cart, checkout and security features work. For other cookies, for example for statistics, functionality or marketing, we ask for your consent before they are placed or read, where consent is required by law.

The Pawtraits portrait tool runs on a separate address (my-pet-dreamscape.lovable.app) that is displayed within our website. There, cookies and similar technologies for statistics and marketing, for example the Meta pixel, are only used if you have consented.

You can read more about which cookies and providers are used, their purposes and retention periods, and change your choices via the website's cookie settings.

6. Who we share personal data with

We only share personal data when necessary for the purposes described in this policy. Recipients may include:

• Shopify, which provides our e-commerce platform and technical operations,
• payment providers and banks, to carry out payments, refunds and checks,
• PostNord and other transport or logistics partners, for delivery, tracking and returns handling,
• suppliers and manufacturers, when necessary to produce or deliver an ordered item, for example an engraved ID tag,
• Pawtraits providers: Lovable and Supabase for the portrait tool and storage of the portrait images, Google (Gemini) for creating the portraits, Replicate for upscaling the portraits and Gelato for printing and shipping posters and canvases, which then also receives your name and delivery address,
• IT, email, customer service and storage providers, for operations, communication and support,
• analytics and advertising providers, to the extent you have consented to such processing, and
• authorities or other recipients, when we are required to disclose data by law or to establish, exercise or defend legal claims.

Providers that process personal data on our behalf may only use the data according to our instructions and are covered by data processing agreements. Some recipients, for example banks and payment providers, may be independent data controllers for their own processing.

We do not sell your personal data.

7. Transfers outside the EU/EEA

Some of our service providers may process personal data in countries outside the EU/EEA. When such a transfer takes place, we ensure there is a lawful transfer mechanism, for example an adequacy decision from the European Commission or the European Commission's standard contractual clauses, together with supplementary safeguards where needed.

This applies, among others, to Google and Replicate, which may process data in the USA. The transfers are based on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses under each provider's data processing agreement.

Contact us if you would like to know more about the safeguards used for a particular transfer.

8. How long we keep personal data

We do not keep personal data longer than necessary for each purpose. In essence, this means the following:

• Order and payment records that constitute accounting information are kept for as long as accounting legislation requires, normally seven years.
• Data needed to handle complaints, disputes or other legal claims is kept for as long as the matter can be raised or needs to be defended.
• Customer service cases are kept for as long as needed to answer and follow up the case, and thereafter for the time required with regard to any legal claims.
• We do not keep original photos uploaded to Pawtraits. They are only used during the short time the portrait is being created. Google may retain data for a limited time to detect misuse of the service.
• AI-generated portrait images from Pawtraits, both previews and finished portraits, are kept for 30 days and then deleted automatically, whether or not you have made a purchase.
• Data for engraved products is kept for as long as needed to make and deliver the product and handle any complaints.
• Newsletter data is processed until you unsubscribe or withdraw your consent. After that, we may keep limited information to ensure you don't receive further emails.
• Data collected through cookies is kept according to the retention periods stated in the cookie settings.

9. Your rights

Depending on the circumstances, you have the right to:

• receive information about how we process your personal data,
• request access to the personal data we hold about you,
• request that incorrect or incomplete data is corrected,
• request that data is erased,
• request that processing is restricted,
• object to processing based on legitimate interest,
• always object to direct marketing,
• receive certain data in a structured, commonly used and machine-readable format and, where technically possible, have it transferred to another data controller, and
• where processing is based on consent, withdraw your consent at any time.

The right to erasure, for example, is not absolute. We may need to keep certain data to meet a legal obligation or to establish, exercise or defend legal claims.

To exercise your rights, contact us at info@donlorino.com. We may need to ask for information to verify your identity. We normally respond to your request within one month.

10. Complaints

If you believe we are processing your personal data incorrectly, please contact us so we can try to fix the problem. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): www.imy.se.

11. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Only people and providers who need the data for their work have access to it.

12. Changes to this policy

We may update this privacy policy when our processing or applicable rules change. The latest version is always available on this page, and the date of the latest update is shown at the top.

13. Contact us

If you have any questions about this policy or our processing of personal data, you're welcome to contact us:

Alexandra Lundegård AB (Don Lorino)
Håven 1
193 41 Sigtuna
Sweden
Email: info@donlorino.com