BAUX

Privacy Policy

Last updated: 7 July 2026

This Privacy Policy explains how BAUX AB (org. no. 556951-4523, “BAUX”, “we”) processes personal data when you submit a product claim through the claim link we sent you. BAUX is the data controller for the personal data described here.

1. What we collect

  • Your details: the name and contact email you enter, so we can identify who raised the claim and get back to you about it.
  • Claim content: the products you flag as affected on your order, the estimated affected quantity, the issue type (e.g. transport damage, missing items), whether the products are installed, and any notes or comments you write.
  • Photos: any images you attach to document the issue. Please avoid including other people or unrelated personal information in the photos.
  • Order reference: the claim is linked to the order it concerns and to your account with BAUX, so our team can handle it in context.
  • Technical data: standard server logs (IP address, browser user-agent, request paths, timestamps) for security, abuse prevention and diagnostics. Logs are retained for a short period (typically 30 days) and then rotated out.

2. Why we process your data (legal basis)

  • Consent (Art. 6(1)(a) GDPR): you tick a box to confirm that BAUX may store and process your personal data to handle this claim. You can withdraw consent at any time (see section 6); this does not affect processing already carried out.
  • Performance of a contract (Art. 6(1)(b) GDPR): to assess and resolve a claim relating to products supplied under your order.
  • Legitimate interest (Art. 6(1)(f) GDPR): to investigate quality and delivery issues, improve our products, and keep the Service secure. We weigh this against your rights and keep the data to the minimum needed.
  • Legal obligation (Art. 6(1)(c) GDPR): where we must retain records to comply with accounting, warranty or product liability law.

3. Who we share data with (sub-processors)

We do not sell your data. We share it only with the sub-processors needed to receive and handle your claim:

  • Supabase: database and file storage. Your claim details and photos are stored in a Supabase project hosted in the EU (eu-north-1, Stockholm).
  • Vercel: application hosting. Page requests and server logs pass through Vercel’s edge network.
  • Email provider: transactional email delivery, so our team can correspond with you about the claim.

We hold a data-processing agreement (DPA) with each sub-processor as required under GDPR Art. 28. Your claim may also be visible to the BAUX representative responsible for your account.

4. Where your data is stored

Your claim data and photos are stored on Supabase servers in the European Union (Stockholm, Sweden). Application compute may run in Vercel’s European regions. Where any provider processes data outside the EEA, we rely on EU Standard Contractual Clauses or an adequacy decision under GDPR.

5. How long we keep it

We keep your claim and its attachments for as long as needed to handle the claim and for the applicable warranty period, and thereafter only where accounting or product-liability law requires it. After that we delete or anonymise the data. Backups expire on a rolling schedule and your data is removed from them as they cycle out (typically within 30 days).

6. Your rights under GDPR

  • Access: get a copy of the personal data we hold about you.
  • Rectification: correct inaccurate data.
  • Erasure: ask us to delete your data.
  • Restriction: limit how we process your data.
  • Portability: receive the data you provided in a machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: where processing relies on your consent.

To exercise any of these, email info@baux.com. We respond within 30 days. You also have the right to lodge a complaint with the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY).

7. Children

The claim process is intended for our business customers and is not directed to children under 16. We do not knowingly collect personal data from children.

8. Changes to this Policy

We may update this Privacy Policy. The current version is always published here with a “Last updated” date. For material changes affecting how we process your data, we will publish the updated version before the change takes effect.

9. Contact

Questions about this Policy or about your data: email info@baux.com.