Privacy policy
Privacy Policy
Last updated: 1 October 2026
Svenska Kakao AB (Reg. no. 556943-3674), Tranesvägen 37, SE-273 92 Skåne-Tranås, Sweden, is the data controller and operates this store and website, including all related information, content, features, tools, products and services (the "Services"). The Services are powered by Shopify. This Privacy Policy describes how we collect, use and disclose your personal data when you visit, use or make a purchase through the Services or otherwise communicate with us. If there is a conflict between our Terms of Purchase and this Privacy Policy, this Privacy Policy prevails with regard to the processing of personal data.
Please read this Privacy Policy carefully.
Personal data we collect or process
"Personal data" means information that identifies, or can reasonably be linked to, you or another person. Depending on how you interact with the Services, we may process the following categories:
- Contact details: name, address, billing address, shipping address, phone number and email address.
- Payment information: payment method, transaction details and payment confirmations. Card details are handled directly by our payment providers and are not stored by us.
- Account information: username, password, preferences and settings, if you create an account.
- Transaction information: items you view, add to your cart or wishlist, purchase, return or cancel, as well as previous transactions.
- Communications with us: information you provide when contacting us, for example in customer service enquiries.
- Device information: information about your device, browser and network connection, IP address and other unique identifiers.
- Usage information: how and when you interact with the Services.
Sources of personal data
We collect personal data:
- directly from you, when you create an account, make a purchase, subscribe to our newsletter or contact us
- automatically through the Services, including through cookies and similar technologies
- from our service providers and partners, for example payment and shipping providers
How we use your personal data and legal basis
| Purpose | Legal basis |
|---|---|
| Managing orders, payments, deliveries, returns and complaints | Contract |
| Managing your customer account | Contract |
| Customer service and communication with you | Contract or legitimate interest (being able to answer your questions) |
| Security and fraud prevention | Legitimate interest (protecting you and us against fraud) |
| Email newsletter | Consent. We only send newsletters to those who have actively signed up, and you can unsubscribe at any time via the link in each email. |
| Web analytics and improving the Services (Google Analytics) | Consent via our cookie banner |
| Targeted advertising (Google Ads, Meta) | Consent via our cookie banner |
| Bookkeeping and other legal requirements | Legal obligation (including the Swedish Bookkeeping Act) |
| Handling legal claims and disputes | Legitimate interest |
Cookies
We use cookies and similar technologies. Necessary cookies are required for the website and checkout to function and are used without consent. Analytics and marketing cookies (Google Analytics, Google Ads and the Meta Pixel) are only used if you have given your consent in our cookie banner. You can change or withdraw your consent at any time via the cookie banner.
How we disclose personal data
We may disclose your personal data to:
- Shopify and other providers that perform services on our behalf, such as IT operations and cloud storage.
- Payment providers: Shopify Payments, Klarna and Qliro (including payment by Swish). Klarna and Qliro may act as independent data controllers, for example when carrying out credit checks, and will then process your data in accordance with their own privacy policies.
- Shipping companies: PostNord and DHL, to deliver your orders.
- Advertising and analytics partners: Google and Meta, if you have consented to marketing and analytics cookies. These partners process the data in accordance with their own privacy policies.
- Other recipients in connection with a business transaction, such as a merger or acquisition, to comply with legal requirements (for example requests from authorities), or to protect our rights.
Relationship with Shopify
The Services are provided by Shopify, which processes personal data to provide and improve the Services. Data may be shared with Shopify and third parties in countries other than where you live. We also use certain advanced Shopify features based on data from your interactions with our store, other merchants and Shopify. For these purposes, Shopify is the data controller and is responsible for responding to your requests regarding your rights. Read more in Shopify's Consumer Privacy Policy: https://privacy.shopify.com/en
Third-party websites and links
The Services may contain links to websites operated by third parties. We are not responsible for their privacy or security practices, and we recommend that you read their terms. Information you share on social media may be visible to others.
Children's data
The Services are not intended for children, and we do not knowingly collect personal data about children. If you are a parent or guardian and want data about your child deleted, please contact us.
Security
We take reasonable technical and organisational measures to protect your data. However, no security measures are completely impenetrable. Please do not send sensitive information to us through insecure channels.
How long we keep your data
- Order and bookkeeping records: at least seven years after the end of the calendar year in which the financial year ended, in accordance with the Swedish Bookkeeping Act.
- Customer account: for as long as the account is active, or until you request its deletion.
- Customer service enquiries: for as long as needed to handle the enquiry and any complaints, or until you request deletion.
- Newsletter: until you unsubscribe.
- Cookies: in accordance with the retention periods stated in our cookie banner.
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- request access to your personal data
- request rectification of inaccurate data
- request erasure, unless we are required to keep the data, for example under the Swedish Bookkeeping Act
- request restriction of processing
- object to processing based on legitimate interest
- receive your data and have it transferred (data portability)
- withdraw your consent at any time, without affecting processing carried out before the withdrawal
You can exercise your rights by contacting us using the details below. We may need to verify your identity and will respond to your request within the time required by law, normally within one month. For data processed by Shopify as data controller, see https://privacy.shopify.com/en
Complaints
If you have concerns about how we process your personal data, please contact us first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), Box 8114, SE-104 20 Stockholm, www.imy.se, or with the supervisory authority in the EU country where you live.
International transfers
Some of our providers, including Shopify, Google and Meta, may process data outside the EU/EEA, for example in the United States and Canada. In such cases, we use recognised safeguards:
- adequacy decisions, such as the EU–US Data Privacy Framework or the Commission's decision for Canada
- the European Commission's Standard Contractual Clauses
Changes to this Privacy Policy
We may update this Privacy Policy. The revised version will be published on the website with a new "Last updated" date.
Contact
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Svenska Kakao AB
Reg. no. 556943-3674
Tranesvägen 37, SE-273 92 Skåne-Tranås, Sweden
Phone: +46 417 201 25
Email: shop@svenskakakao.se