This Privacy Policy explains how Svenskatt collects, uses, stores and protects your personal data when you visit our website, place an order, create an account, start a subscription, contact us, or otherwise interact with us. We want to be clear about what information we collect, why we collect it, how we use it, and what rights you have.
1. Who we are
This website is operated by: Svenskatt AB Company registration number: 559552-3258 Address: Kevingeringen 83, 182 50 Danderyd, Sverige Email: mjau@svenskatt.com Svenskatt AB is the data controller for the personal data described in this Privacy Policy. This means we are responsible for deciding how and why your personal data is processed.
2. What personal data we collect
We may collect and use the following types of personal data.
Information you provide to us
This may include:
- Your name
- Email address
- Phone number
- Delivery address
- Billing address
- Account login details
- Order details
- Subscription details
- Delivery instructions
- Customer support messages
- Reviews, survey responses or feedback
- Information you choose to give us about your cat, such as name, age, weight, dietary needs, preferences or feeding history
Payment information
When you place an order or start a subscription, payment is handled by our payment provider, Stripe. We do not store your full card details ourselves. Your payment details are processed and stored securely by Stripe. We may receive limited payment-related information, such as payment status, transaction ID, card type, the last four digits of the card, billing details, fraud checks, refunds and chargeback information.
Website and technical information
When you use our website, we may collect technical information such as:
- IP address
- Device type
- Browser type
- Operating system
- Pages visited
- Approximate location based on IP address
- Time and date of visit
- Referral source
- Cookie and tracking preferences
- Interactions with our website, emails or adverts
We use tools such as PostHog, Google Analytics and Microsoft Clarity to help us understand how our website is used and how we can improve it. We may also use advertising and marketing technologies from Meta, Google Ads, TikTok and Pinterest.
3. How we collect personal data
We collect personal data when you:
- Visit our website
- Place an order
- Create an account
- Start, pause, change or cancel a subscription
- Contact us by email, Intercom or customer support
- Sign up to marketing emails
- Leave a review or provide feedback
- Interact with our emails, adverts or social media
- Accept, reject or manage cookies on our website
We may also receive personal data from third parties who help us provide our services, such as payment providers, delivery partners, analytics providers, advertising platforms and customer support tools.
4. Why we use your personal data
We use your personal data for the following purposes.
To process and deliver your orders
We use your personal data to:
- Process your order
- Take payment
- Send order confirmations
- Pack and dispatch your order
- Deliver your order to the correct address
- Contact you about delivery issues
- Handle returns, refunds, complaints or product issues
The legal basis for this processing is that it is necessary to perform our contract with you.
To manage your subscription
If you start a Svenskatt subscription, we use your personal data to:
- Set up and manage your subscription
- Process recurring payments
- Send subscription reminders or updates
- Manage pauses, changes or cancellations
- Contact you about subscription issues
- Provide customer support
The legal basis for this processing is that it is necessary to perform our contract with you.
To provide customer support
We use your personal data to:
- Respond to questions
- Resolve delivery or product issues
- Handle complaints
- Investigate damaged, missing, delayed or unsafe orders
- Keep records of our communication with you
We use Intercom to help manage customer support and customer communications. The legal basis for this processing is our legitimate interest in providing good customer service and resolving issues with our products and services. In some cases, it may also be necessary to perform our contract with you or comply with legal obligations.
To send transactional emails
We use Resend to send service-related emails, such as order confirmations, delivery updates, subscription notices, payment notices, account messages and other important non-marketing communications. The legal basis for this processing is that it is necessary to perform our contract with you, comply with legal obligations, or support our legitimate interest in operating our business and keeping customers informed about their orders and accounts.
To comply with legal obligations
We use certain personal data to comply with legal obligations, including:
- Accounting and bookkeeping
- Tax records
- Consumer law obligations
- Product safety and traceability requirements
- Responding to lawful requests from authorities
The legal basis for this processing is compliance with legal obligations.
To improve our website, products and services
We may use personal data to:
- Understand how customers use our website
- Improve website performance
- Improve product information and customer experience
- Understand delivery issues
- Review customer feedback
- Develop new products and services
We use tools such as PostHog, Google Analytics and Microsoft Clarity for analytics and website improvement. The legal basis for this processing is our legitimate interest in improving our business, website, products and services.
To send marketing communications
If you sign up to receive marketing, we may use your email address to send you news, offers, product updates and other marketing communications by email. The legal basis for marketing communications is your consent, where consent is required. Marketing emails may be sent using Resend. You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us at mjau@svenskatt.com.
To advertise our products
We may use advertising technologies from Meta, Google Ads, TikTok and Pinterest to show adverts, measure advertising performance, understand how people interact with our adverts, and improve our marketing. Where we use advertising cookies, pixels or similar tracking technologies, we will ask for your consent where required.
To prevent fraud and protect our business
We may use personal data to:
- Detect and prevent fraud
- Protect our website and systems
- Prevent misuse of promotions, discounts or accounts
- Investigate suspicious orders or payment activity
- Enforce our Terms & Conditions
The legal basis for this processing is our legitimate interest in protecting our customers, business, website and services.
5. Information about your cat
We may collect information about your cat if you choose to provide it, for example your cat’s name, age, weight, food preferences, feeding history or dietary needs. We use this information to help provide our products and services, such as subscription setup, feeding guidance, customer support and product recommendations. Information about your cat is not usually personal data by itself. However, if it is connected to your account or order, we treat it carefully because it is linked to you. Please do not provide sensitive information about yourself or another person unless it is necessary.
6. Cookies and similar technologies
Our website uses cookies and similar technologies. Cookies are small files stored on your device. They can help a website work properly, remember your preferences, understand how the website is used, and support marketing or advertising. We use the following types of cookies:
Necessary cookies
These cookies are needed for the website to work and to keep it secure, stable and reliable. They may be used for things like checkout, account login, security, shopping basket functionality, remembering your cookie choices, and understanding how the website is used so we can fix technical issues and improve how the site works — including anonymised session replays. We use the following product analytics and website-improvement tools as part of operating the website:
- PostHog
- Google Analytics
- Microsoft Clarity
Microsoft Clarity may help us understand website behaviour, such as clicks, scrolling and general user interaction patterns. The legal basis for this processing is our legitimate interest in operating, securing and improving our website. These cookies do not usually require consent.
Marketing cookies and pixels
These cookies and similar technologies may be used to show relevant adverts, measure advertising performance, understand how people interact with adverts, and build advertising audiences. We may use marketing technologies from:
- Meta
- Google Ads
- TikTok
We will only use marketing cookies, advertising pixels and similar tracking technologies where we have the required consent.
Managing cookies
When required, we will ask for your consent before placing non-essential cookies on your device. You can manage or withdraw your cookie consent through Cookie Settings on our website. You can also control cookies through your browser settings. If you block certain cookies, some parts of the website may not work properly.
7. Who we share personal data with
We may share personal data with trusted third parties who help us run our business and provide our services. These may include:
- Cloud, hosting, security and infrastructure providers, including Cloudflare
- Payment providers, including Stripe
- Delivery and logistics partners, including PostNord
- Email providers, including Resend
- Customer support tools, including Intercom
- Analytics providers, including PostHog, Google Analytics and Microsoft Clarity
- Advertising platforms, including Meta, Google Ads, TikTok and Pinterest
- Accounting, bookkeeping and tax providers
- Professional advisers, such as accountants or lawyers
- Authorities, regulators or courts where required by law
We only share personal data where necessary and only for the purposes described in this Privacy Policy.
8. Delivery partner
We share the information needed to deliver your order with our delivery partner, PostNord. This may include your name, delivery address, phone number, email address, delivery instructions and order information needed for delivery. PostNord is currently our only delivery partner.
9. Payment provider
Payments are processed by Stripe. We do not store your full card details ourselves. Stripe may process your payment details, billing information, fraud prevention information and transaction data. Stripe may also process personal data in accordance with its own privacy information.
10. Cloud and hosting
We use Cloudflare for cloud, security, performance and infrastructure services. We use EU data residency settings for our data. Cloudflare may process technical data such as IP addresses, device information, security logs and website traffic data where necessary to provide cloud, security and performance services.
11. International transfers
We store and process personal data within the EU/EEA. We do not transfer personal data outside the EU/EEA. If this changes in the future, we will take steps to ensure that any transfer is protected in accordance with applicable data protection laws. This may include using providers in countries with an adequacy decision, approved contractual safeguards, or other lawful transfer mechanisms.
12. How long we keep personal data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless we are required to keep it for longer by law. In general:
- Order, invoice, payment and accounting records are kept for seven years for accounting and tax purposes.
- Account information is kept for as long as your account remains active, and for a reasonable period afterwards.
- Subscription information is kept for as long as your subscription is active, and for a reasonable period afterwards.
- Customer support messages are kept for as long as needed to deal with your enquiry and maintain appropriate business records.
- Marketing consent records are kept for as long as needed to show that consent was given or withdrawn.
- Cookie consent records are kept for as long as needed to manage and evidence your cookie choices.
- Analytics data is kept for the period set in the relevant analytics tool.
13. How we protect personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, secure passwords, encryption where appropriate, secure payment processing, staff access limits, system monitoring, EU data residency settings where available, and working with reputable service providers. No website, email system or online service can be guaranteed to be completely secure. If you believe your personal data or account has been compromised, please contact us as soon as possible at mjau@svenskatt.com.
14. Your rights
Under data protection law, you may have the right to:
- Request access to the personal data we hold about you
- Ask us to correct inaccurate or incomplete personal data
- Ask us to delete your personal data in certain circumstances
- Ask us to restrict the use of your personal data in certain circumstances
- Object to certain processing, including processing based on legitimate interests
- Object to direct marketing at any time
- Withdraw consent where processing is based on consent
- Request a copy of your personal data in a portable format
- Complain to the Swedish Authority for Privacy Protection
To exercise your rights, contact us at mjau@svenskatt.com. We may need to verify your identity before responding to a request.
15. Marketing choices
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or by contacting us at mjau@svenskatt.com. If you unsubscribe from marketing, we may still send you non-marketing messages, such as order confirmations, delivery updates, subscription notices, payment notices, customer service messages and important legal or product safety information.
16. Children
Our website and products are intended for adults buying cat food. You must be at least 18 years old to place an order. We do not knowingly collect personal data from children.
17. Automated decision-making
We do not use your personal data for automated decision-making that has legal or similarly significant effects on you.
18. Links to other websites
Our website may contain links to third-party websites, such as payment providers, delivery partners, social media platforms or other services. We are not responsible for the privacy practices or content of third-party websites. You should read their privacy policies before providing personal data to them.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will be published on our website with the “Last updated” date at the top. If we make significant changes, we will take appropriate steps to inform you, such as displaying a notice on our website or contacting you directly where required.
20. Complaints
If you have questions or concerns about how we use your personal data, please contact us first at mjau@svenskatt.com so we can try to resolve the issue. You also have the right to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, known as IMY. Website: www.imy.se
21. Contact
For questions about this Privacy Policy or how we process personal data, please contact: Svenskatt AB Email: mjau@svenskatt.com Company registration number: 559552-3258 Address: Kevingeringen 83, 182 50 Danderyd, Sverige