PRESTAGED
SVEN
 
Legal

Privacy policy

How Prestaged collects, uses and protects personal data.

This English version is provided for information only. The Swedish version is the binding version in the event of any discrepancy.

Last updated 6 September 2026

Overview

Prestaged ("Prestaged", "we", "us") operates the curated marketplace prestaged.com. This privacy policy describes what personal data we collect, why, how long we keep it, and what rights you have under the EU General Data Protection Regulation (GDPR).

Prestaged is the data controller. Questions can be directed to [Contact Prestaged](mailto:prestaged.app@gmail.com).

Data we collect

  • Account details. Email address, name and account type (buyer or studio) when you create an account.
  • Studio details. Company name, registration number, contact details, location and description when a studio applies to be verified.
  • Content you publish. Item listings, styling projects, images, prices and descriptions.
  • Enquiries and messages. The content of enquiries sent between buyers and studios via the platform.
  • Technical data. IP address, browser type, device type and time of visit, to the extent needed for security and operation.

We never collect payment card details. Prestaged does not handle payments, shipping or checkout.

Why we process the data

  • Creating and administering your account — legal basis: contract.
  • Facilitating contact between buyer and studio — legal basis: contract.
  • Verifying studios and preventing fraud — legal basis: legitimate interest.
  • Security, logging and abuse prevention — legal basis: legitimate interest.
  • Communications about how the platform works — legal basis: contract.
  • Newsletters and product information — legal basis: consent.

Sharing of data

We never sell personal data. Data is shared only with:

  • Providers who run the service — database, authentication, file storage and email delivery. All process data as processors within the EU/EEA or under a valid transfer mechanism.
  • The other party in an enquiry. When you contact a studio, your name, email address and message are shared with that studio.
  • Authorities when we are required to by law.

Instagram import

Only professional Instagram accounts (Creator or Business) can be connected. We retrieve your username and account type. When you open the image picker, we read previews of your recent posts, solely to display them in the picker. Captions are only fetched for the posts you actually import, and only the images you actively select are copied to and stored by Prestaged. We never post, comment or make changes on Instagram.

The connection can be removed at any time under Interiors, and we suggest doing so right after an import. You can also request deletion via Instagram. In both cases we delete our access, the account information for the connection, and our import history. If you also want to revoke the app's permission on Instagram, do so in Instagram under Apps and websites. Images you have already imported remain as your own content on Prestaged until you remove them or delete your account.

TikTok import

If you choose to connect a TikTok account, we retrieve your username and account id. When you open the video picker, we read the title, description, length and cover image of your own videos, solely to display them in the picker. We never download the video file itself — it plays via TikTok's own embed. The cover image of a video you actively select is copied to and stored by Prestaged. We never post anything on TikTok.

The connection can be removed at any time under Interiors. We then revoke access with TikTok and delete the connection information we have stored. Interiors you have already created remain as your own content on Prestaged until you remove them.

Retention period

  • Account details are kept for as long as the account is active, and for up to twelve months thereafter.
  • Enquiries and messages are kept for 24 months to handle disputes and abuse.
  • Studio applications are kept for 36 months for accounting and review purposes.
  • Published content is removed when you delete it or your account.

Your rights

You have the right to request a copy of your data, correction, deletion, restriction of processing and data portability, and to object to processing based on legitimate interest. Consent can be withdrawn at any time.

[Contact us](mailto:prestaged.app@gmail.com). We respond within 30 days. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Security

Access to data is controlled server-side with permission rules per account. Images and files are stored in private storage with signed links. Only authorised staff have administrative access, and administrative actions are logged.

Changes

We may update this policy. Material changes are announced by email or in the interface before they take effect. The date of the latest update is shown at the top of the page.

Other documents