CHZ Bento Cakes

Privacy Policy & Terms

Last updated: October 2026

Who we are

CHZ Bento Cakes (Karina Chaban), Stockholm, Sweden, is the data controller for personal data collected through this website. Contact: karina@chzbentocakes.com, +46 76 851 01 74.

What data we collect

• Contact details: name, phone number, email address and, if you give it, your Instagram handle.

• Delivery details: street address, postcode, city, and the recipient's name and phone number.

• Allergy and dietary information you tell us about (this can be health-related data — we only use it to make your order safely).

• Order details: products, options, date and time slot, notes and reference images you upload.

• Reviews you choose to submit (name, rating, text, photo).

Why we use it and legal basis

• To make, prepare and hand over your order and to contact you about it — performance of a contract (GDPR art. 6(1)(b)).

• Allergy information — your explicit consent when you provide it (art. 9(2)(a)); you can withdraw it at any time, but we may then be unable to make your order safely.

• Bookkeeping and receipts — legal obligation under Swedish accounting law (art. 6(1)(c)).

• Publishing reviews — your consent (art. 6(1)(a)).

Who we share it with

We never sell your data. We share it only as needed: our hosting and database provider (within the EU/EEA where possible), Google Maps to check delivery addresses, our email provider to send order confirmations, and our pickup partner Blombaren Barkarby (order number and name only) so they can hand over your order. If you book your own courier, you share your details with them directly.

How long we keep it

Order data is kept for as long as needed to complete the order and handle questions, and accounting records for 7 years as required by Swedish law. Reference images and allergy notes are deleted within 12 months after your order.

Your rights

You have the right to access, correct, delete or move your data, to restrict or object to processing, and to withdraw consent. Email karina@chzbentocakes.com and we'll reply within 30 days. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Cookies

We only use what's necessary for the shop to work (e.g. your cart and language choice stored in your browser). We don't use advertising cookies.

Order terms

• All prices are in SEK and include VAT (moms).

• Orders must be placed at least 2 days in advance. Your time slot is the window in which we notify you that the order is ready.

• Products are handmade to order and perishable, so the right of withdrawal does not apply (Distance Contracts Act, ch. 2 § 11). Contact us as soon as possible if you need to change your order.

• If you book your own courier, the courier service is responsible for the transport once the order is handed over.