Privacy policy

Last updated 28 October 2026.

1. Introduction

Your privacy is important to us at Posterstar Sweden AB ("Posterstar", "we"). This policy explains how we collect, use, share and protect your personal data when you visit posterstar.com and buy our products. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish law.

2. Data controller

Posterstar Sweden AB, company reg. no. 559275-7404
Edsviksvägen 31B, 182 33 Danderyd, Sweden
Email: support@posterstar.com

3. What data we collect and why

When you place an order

Name, shipping and billing address, email address, phone number and details of your order, including the design you created: texts, chosen motifs and colours, and for a map poster the place you chose.

Purpose: to receive and produce your order, ship it and handle complaints. Legal basis: performance of a contract.

When you pay

Payment takes place in Kustom's checkout, with the payment methods shown there. Your card details go directly to the payment provider and are not stored by us. Legal basis: performance of a contract. Kustom's and the payment methods' own privacy policies apply to the data you give them.

When you create an account

Name, email address, saved addresses and your order history, so that you can sign in and see your orders. Legal basis: performance of a contract. You can ask us to delete your account at any time.

When you contact customer service

Name, email address, order number and what you write to us, so that we can answer and resolve your request. Legal basis: our legitimate interest in giving you good service.

When you use the map designer

When you search for a place, your search term and IP address are sent to Photon, a search service for OpenStreetMap run by komoot GmbH in Germany. The map images are loaded from OpenFreeMap, which then also sees your IP address. We store none of this until you order, and then only the place and texts printed on the poster.

If you subscribe to our newsletter

Email address and possibly your name, to send you offers and inspiration. Legal basis: consent. You can unsubscribe at any time using the link in every email.

4. Cookies

The shop uses the cookies it needs to work, and, only if you agree, cookies for statistics and marketing. You make your choice in the cookie banner and can change or withdraw it at any time under Cookie settings at the bottom of every page.

Necessary cookies

Your cart (_medusa_cart_id) and the country you shop from (_ps_country).
Your sign-in, if you have an account (_medusa_jwt).
Technical cookies that make pages load correctly (_medusa_cache_id, _medusa_locale).
Your cookie choice (_ps_consent), kept for 180 days.

Kustom's checkout sets its own cookies to process your payment; Kustom's privacy policy applies to them. Legal basis for the necessary cookies: they are needed to provide the shop you have asked to use.

Statistics and marketing cookies (only with your consent)

If you choose "Accept all", we use Google Tag Manager to load Google Analytics, Meta's pixel and Google Ads.

Google Analytics shows us how the site is used: which pages and products are viewed, where visitors come from and how many go on to buy. It sets cookies such as _ga, kept for up to two years, and does not store IP addresses.

Meta's pixel and Google Ads set cookies such as _fbp and _gcl_au, normally kept for about three months, and record which pages and products you view and what you buy. We use this to measure our ads and to show relevant ads on Facebook, Instagram and Google. Legal basis: your consent. For the collection and transfer of data through Meta's pixel, we and Meta are joint controllers.

If you choose "Necessary only", none of these cookies are set. Google's tags may then send at most signals without cookies or identifiers (Google Consent Mode), which Google uses to estimate visits and the effect of ads.

5. Who we share data with

We never sell your personal data. We only share it with the providers we need to deliver:

Printful, which prints and ships your poster: name, address and contact details.
Carriers, such as PostNord in Sweden: name, address and contact details for delivery notices.
Kustom and the payment methods in the checkout: order details to process the payment.
Medusa (Medusa Cloud), which runs the shop, stores its data and files and sends order emails.
Photon (komoot GmbH) and OpenFreeMap, when you use the map designer, as described above.
Meta Platforms Ireland Ltd and Google Ireland Ltd, only if you accept cookies for statistics and marketing, as described under Cookies.

6. Transfers outside the EU/EEA

Some providers, such as Printful, Meta and Google, may process data outside the EU/EEA, including in the USA. In that case we make sure there is a valid safeguard, such as the EU-US Data Privacy Framework (Meta and Google are certified) or the European Commission's Standard Contractual Clauses, so your data is protected as well as within the EU.

7. How long we keep your data

Purchase records: at least seven years, as required by the Swedish Bookkeeping Act.
Customer service requests: normally 2-3 years, to handle follow-up questions and complaints.
Customer account: until you ask us to delete it, except what we must keep by law.
Newsletter: as long as you are subscribed. If you unsubscribe, we delete or anonymise your data.

8. Your rights

Under the GDPR you have the right to:

get a copy of the data we hold about you
have inaccurate or incomplete data corrected
have your data erased, except what we are required by law to keep, such as accounting records
restrict the processing of your data
receive your data in a machine-readable format (data portability)
object to processing based on legitimate interest

9. Complaints

If you think we process your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se, or the data protection authority in your country.

10. Security

We protect your data with technical and organisational measures, such as encrypted transfer (TLS), against unauthorised access, loss and alteration.

11. Changes

We may update this policy. The latest version is always here, with the date of the latest change at the top.