Privacy Policy

Last updated:

1. Introduction

Skyxaronslaxyron ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website skyxaronslaxyron.world and purchase our products.

We process personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Swedish Data Protection Act (Dataskyddslagen, SFS 2018:218), which supplements the GDPR with national provisions. Non-essential cookies and similar technologies are used only where permitted—typically on the basis of your consent—as explained in our Cookie Policy. Other processing is carried out on the legal bases set out in Section 4.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Skyxaronslaxyron
  • Address: Vildmannavägen 1, 903 47 Umeå, Sweden
  • Email: customer@skyxaronslaxyron.world
  • Country: Sweden

We have not appointed a Data Protection Officer (DPO) where not required by law. For all privacy matters, contact us using the details above.

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us when you:

  • Place an order on our website
  • Contact us with inquiries
  • Subscribe to our newsletter
  • Browse our website (including technical data collected automatically)

Providing personal data is voluntary, but certain fields (e.g. for placing an order or contacting us) may be necessary to enter into or perform a contract.

3.1 Information You Provide

  • Identity Data: Full name
  • Contact Data: Email address, phone number (optional), delivery address
  • Transaction Data: Details about orders and payments
  • Communication Data: Messages and correspondence with us

3.2 Automatically Collected Information

  • Technical Data: IP address, browser type and version, operating system
  • Usage Data: Information about how you use our website
  • Cookie Data: See our Cookie Policy for details

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

4.1 Contract Performance (Article 6(1)(b) GDPR)

  • Processing and fulfilling your orders
  • Delivering products to your specified address
  • Managing payments and refunds
  • Providing customer support

4.2 Legitimate Interests (Article 6(1)(f) GDPR)

  • Improving our website and services
  • Analyzing website usage patterns
  • Preventing fraud and ensuring security
  • Administering and protecting our business

4.3 Consent (Article 6(1)(a) GDPR)

  • Sending marketing communications (e.g. newsletters), where you have opted in
  • Non-essential cookies and similar technologies, as described in our Cookie Policy

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4.4 Legal Obligation (Article 6(1)(c) GDPR)

  • Complying with tax and accounting requirements
  • Responding to lawful requests from authorities

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order Data: 7 years (for tax and legal compliance)
  • Account Data: Until account deletion or 3 years of inactivity
  • Marketing Data: Until consent withdrawal or 2 years of no engagement
  • Cookie Data: As specified in our Cookie Policy

6. Your Rights Under GDPR

Subject to applicable conditions and exceptions in the GDPR and Swedish law, you have the following rights regarding your personal data:

  • Right to Access (Article 15): Obtain confirmation as to whether we process your data and, where that is the case, access to the personal data and certain information about the processing
  • Right to Rectification (Article 16): Request correction of inaccurate or incomplete data
  • Right to Erasure (Article 17): Request deletion of your data where grounds under the GDPR apply ("right to be forgotten")
  • Right to Restriction (Article 18): Request that we restrict processing in certain situations
  • Right to Data Portability (Article 20): Receive personal data you provided in a structured, commonly used, machine-readable format and transmit it to another controller, where technically feasible
  • Right to Object (Article 21): Object to processing based on legitimate interests (including profiling based on those interests) and to processing for direct marketing purposes
  • Right to Withdraw Consent (Article 7): Withdraw consent at any time, where processing is based on consent

We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please contact us at customer@skyxaronslaxyron.world. We will respond without undue delay and in any event within one month of receipt of the request (that period may be extended by two further months where necessary, in accordance with Article 12 GDPR). You also have the right to lodge a complaint with a supervisory authority (see Section 11).

7. Data Sharing, Processors, and Transfers

We may share your personal data with:

  • Shipping partners: To deliver your orders
  • Payment processors: To process payments securely
  • IT, hosting, analytics, and other service providers (processors): Who process personal data on our behalf under written agreements that require them to implement appropriate security measures and to process data only on our instructions
  • Professional advisers: Where legally required or reasonably necessary (e.g. accountants, lawyers)
  • Public authorities: When required by EU or Swedish law, court order, or lawful request

We do not sell your personal data. Any transfer of personal data to countries outside the European Economic Area (EEA) takes place only where permitted under Chapter V GDPR, for example using the European Commission's standard contractual clauses (SCCs) or another approved mechanism, supplemented where required by a transfer impact assessment.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure storage with access controls
  • Regular security assessments
  • Employee training on data protection

9. Children's Privacy

Our website and products are not directed at children. We do not knowingly collect personal data from children. Under Swedish law implementing Article 8 GDPR, a child may lawfully consent to information society services from age 13; below that age, parental consent would be required. If you believe we have collected personal data from a minor without appropriate consent, please contact us immediately so we can delete the information where required.

10. Changes to This Policy

We may update this Privacy Policy when necessary—for example, due to changes in our processing, technology, or legal requirements. The current version is indicated by the "Last updated" date. Where changes materially affect you, we will provide additional notice where required by law (e.g. on our website or by email).

11. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):

  • Website: www.imy.se
  • Address: Box 8114, 104 20 Stockholm, Sweden

12. Contact Us

For questions about this Privacy Policy or our data practices, please contact us:

  • Email: customer@skyxaronslaxyron.world
  • Address: Vildmannavägen 1, 903 47 Umeå, Sweden