Privacy policy

Privacy Policy – Klinta & Co AB

Last updated: 23 September 2026

This privacy policy describes how Klinta & Co AB processes your personal data when you visit our website, shop in our online store, subscribe to our newsletter or text message (SMS) updates, leave a review, or act as a contact person for one of our resellers. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and supplementary Swedish legislation.

1. Data controller

Klinta & Co AB, company registration number 556881-8115, Pumpvägen 4, 243 41 Höör, Sweden, is the controller of the processing of your personal data under this policy. Contact details can be found in section 13.

2. What personal data we process

Depending on how you interact with us, we may process the following data:

•          Contact details: name, address, delivery and billing address, phone number and email address.

•          Order and transaction data: what you have purchased, returned or withdrawn from, order history, payment method and payment status. Card numbers and other complete payment details are handled by our payment service providers and are not available to us.

•          Account data: login details, preferences and settings if you have a customer account.

•          Communications: the content of emails, messages and customer service enquiries, including photos submitted with a complaint.

•          Reviews: your name or first name, rating and the text you write.

•          Marketing data: whether you subscribe to our newsletter or SMS updates, whether you have opted out of marketing, and how you interact with our messages, for example whether they are opened and which links you click.

•          Technical and usage data: IP address, device and browser information, cookies and similar identifiers, and how you navigate the website.

•          Data about resellers’ contact persons: name, role, email address, phone number and the company you represent.

3. Where the data comes from

We receive the data directly from you, automatically when you use the website through cookies and similar technologies, and from our service providers, for example payment and shipping providers, when they process data about your order.

4. Purposes, legal basis and retention period

Purpose	Legal basis	Retention period
Processing orders, payments and deliveries	Performance of a contract	3 years from delivery
Accounting and invoicing	Legal obligation (Swedish Accounting Act)	7 years after the end of the calendar year in which the financial year ended
Handling withdrawals, complaints and customer service enquiries	Performance of a contract and legal obligation (Swedish consumer protection legislation)	24 months after the matter has been closed
Providing a customer account	Performance of a contract	Until you delete the account, or after 24 months of inactivity
Newsletters and SMS updates to subscribers	Consent	Until you unsubscribe or withdraw your consent
Newsletters and SMS updates to existing customers about similar products	Legitimate interest	Until you unsubscribe, but no longer than 24 months after your most recent purchase
Inviting you to review a purchase and publishing reviews	Legitimate interest	For as long as the review is published, or until you request its removal
Web analytics and targeted advertising via cookies and pixels	Consent	According to the retention periods stated in our cookie banner
Security and fraud prevention	Legitimate interest	No longer than 12 months, unless the data is needed for an ongoing investigation
Managing relationships with resellers	Legitimate interest	During the relationship and 12 months thereafter. Accounting records are kept as stated above
Establishing, exercising or defending legal claims	Legitimate interest	Until the claim has been finally resolved

Where we process data on the basis of legitimate interest, we have balanced our interest against your right to privacy. You always have the right to object to such processing, see section 8.

Newsletters and SMS to existing customers. If you have purchased a product from us, we may send you offers about our own similar products to the email address or mobile number you provided at the time of purchase. You are given the opportunity to opt out when you provide your details. If you opt out, you will not receive any marketing from us. Every newsletter contains a link, and every SMS contains instructions, for easily unsubscribing.

5. Who we share data with

We never sell your personal data. We only share it with the following recipients, to the extent necessary for the purposes above:

Recipient	Purpose	Role
Shopify	Operation of the online store	Processor. For certain features an independent controller, see Shopify’s privacy policy
Shopify Payments and PayPal	Payment	Independent controllers for the payment
Klarna	Payment and credit assessment	Independent controller, see Klarna’s privacy policy
DSV Schenker, DHL and UPS	Delivery and notifications	Independent controllers for the transport
Klaviyo	Sending newsletters and SMS	Processor
Lipscore	Review invitations and publication of reviews	Processor
Google (Analytics and Ads), Meta and TikTok	Web analytics and advertising, only if you have given consent	For collection via pixel, we are joint controllers with Meta. Each company is an independent controller for its further processing
Public authorities	When required by law, for example the Swedish Tax Agency	Independent controllers

In the event of a sale or restructuring of the business, data may be transferred to a new owner, who will then continue the processing in accordance with this policy.

6. Transfers outside the EU/EEA

Some of our providers, including Shopify, Klaviyo, Google, Meta and TikTok, may process data outside the EU/EEA, for example in the United States. We ensure that such transfers are based on a European Commission adequacy decision, including the EU–US Data Privacy Framework, or on the European Commission’s standard contractual clauses with supplementary safeguards where necessary.

7. Cookies and similar technologies

We use cookies that are necessary for the online store to function, for example for the shopping cart and checkout. With your consent, we also use cookies and pixels for web analytics (Google Analytics) and advertising (Google Ads, Meta and TikTok). You choose which cookies to accept in our cookie banner and can change or withdraw your consent at any time via the link to the cookie settings on the website.

8. Your rights

You have the right to:

•          access the personal data we process about you and receive a copy of it,

•          have inaccurate data corrected,

•          have your data erased, if it is no longer needed or if we are not required to retain it, for example under the Swedish Accounting Act,

•          request restriction of the processing,

•          object to processing based on legitimate interest. You can always object to direct marketing, in which case we will stop it immediately,

•          withdraw your consent at any time. This does not affect processing carried out before you withdrew it,

•          receive your data in a machine-readable format and have it transferred to another controller (data portability).

Contact us using the details in section 13 to exercise your rights. We will respond within one month. We may need to verify your identity before handling your request.

9. Complaints

If you believe that we are processing your personal data incorrectly, please contact us first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden, www.imy.se, or with the supervisory authority in the EU or EEA country where you live.

10. Children

Our services are not intended for children. To make a purchase, you must be at least 18 years old or have the consent of a parent or guardian. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that your child has provided data to us, please contact us and we will delete it.

11. Security

We take technical and organisational measures to protect your personal data against unauthorised access, loss and alteration, including access controls and encrypted transmission. You are responsible for keeping your login details confidential.

12. Changes to this policy

We may update this policy, for example in the event of changed procedures or new legislation. The latest version is always available on our website, together with the date of the most recent update. In the event of significant changes, we will inform you in accordance with applicable law.

13. Contact

Klinta & Co AB
Pumpvägen 4, 243 41 Höör, Sweden
info@klintaco.se · +46 413 334 39
Company registration number 556881-8115