Privacy policy

Elin PK operates this store and website, including all related information, content, features, tools, products and services to provide you with a tailored shopping experience (the “Services”). Elin PK is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy takes precedence for the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services you acknowledge that you have read and understand how your information is collected, used and disclosed as described here.

We process your personal information in accordance with the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA) and other applicable privacy laws depending on where you live.

Data Controller and Contact

Elin PK is the controller for the personal information processed through the Services, except for certain processing activities where Shopify acts as an independent controller as described under “Relationship with Shopify”.

Company: Elin PK AB
Email: info@elinpk.com
Address: Södra Vägen 53, 412 54 Gothenburg, Sweden

If you have any questions about this policy or how we process data, you may contact us using the details above.

Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or de-identified so that it cannot be linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this information, depending on how you interact with the Services, where you live and as permitted or required by law:

• Contact details such as name, address, billing address, shipping address, phone number and email address.
• Financial information such as credit card numbers, debit card numbers, financial account numbers, payment card details, payment confirmations and transaction information.
• Account information such as username, password, security questions, preferences and settings.
• Transaction information such as items viewed, added to cart, added to wishlist, purchased, returned, exchanged or cancelled and your past transactions.
• Communications such as information you provide when contacting customer support.
• Device information such as device type, browser type, network connection, IP address and unique identifiers.
• Usage information such as how and when you use or navigate the Services.
• Online identifiers and cookies including cookie IDs, pixel IDs and anonymous analytics identifiers.

We also use cookies and similar technologies to collect anonymous or aggregated data, such as:

• total number of visitors and page views
• which pages and products are most popular
• general device type such as mobile, tablet or desktop
• approximate geographic region based on IP address
• how visitors move between pages and where they leave the website

This anonymous data does not identify you and helps us understand and improve the Services.

Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including when you create an account, make a purchase or communicate with us.
• Automatically when you use the Services, including through your device and through cookies and similar technologies.
• From our service providers, including when they collect or process personal information on our behalf.
• From partners or other third parties such as advertising platforms, analytics providers or social media networks, where permitted by law.

Legal Bases for Processing

Under GDPR we must explain the legal bases we rely on when processing personal information. Depending on the situation we process your information based on:

• Contract (GDPR Art. 6(1)(b)) when processing is necessary to enter into or perform a contract with you, for example processing and delivering orders and providing customer support.
• Legitimate interest (GDPR Art. 6(1)(f)) when we have a legitimate business interest that does not override your rights, such as improving the Services, preventing fraud and some types of marketing or analytics.
• Consent (GDPR Art. 6(1)(a)) when you have provided your consent, for example for email marketing or advertising cookies. You may withdraw consent at any time.
• Legal obligation (GDPR Art. 6(1)(c)) when we must comply with legal obligations such as accounting, taxation or responding to lawful requests.

How We Use Your Personal Information

Depending on how you interact with us we may use your personal information for the following purposes:

Provide, personalise and improve the Services (legal basis: contract, legitimate interest)

We use personal information to fulfil orders, process payments, arrange delivery, handle returns, manage your account, remember your preferences and provide a tailored shopping experience including product recommendations.

Marketing and advertising (legal basis: consent, legitimate interest)

We use personal information to send marketing emails, SMS messages and promotions and to show online ads for our products on other websites. We may use Klaviyo, Google Ads, Meta (Facebook and Instagram), Pinterest, TikTok and Snapchat for this. When required by law we obtain consent before processing for advertising purposes.

Security and fraud prevention (legal basis: legitimate interest, legal obligation)

We use personal information to verify accounts, provide a secure shopping experience, detect and investigate fraudulent or harmful activity and protect the Services.

Communication with you (legal basis: contract, legitimate interest)

We use personal information to provide customer support, respond to inquiries and maintain our relationship with you.

Legal reasons (legal basis: legal obligation, legitimate interest)

We may use personal information to comply with laws, respond to legal requests, participate in legal proceedings or enforce our policies.

Cookies, Pixels and Tracking

We use cookies and similar technologies in the Services. Types of cookies we use include:

• Strictly necessary cookies for basic functions such as cart, checkout, login and security.
• Functional cookies to remember settings and improve your experience.
• Analytics cookies to understand how visitors use the site, such as Google Analytics and Shopify analytics.
• Advertising and remarketing cookies such as Google Ads, Meta Pixel, Pinterest Tag, TikTok Pixel, Snapchat Pixel and Klaviyo tracking.

You can manage cookies through your browser settings and, where available, through a cookie banner or preference center. You may also opt out of advertising cookies through tools such as youronlinechoices.eu and aboutads.info.

How We Disclose Personal Information

We may disclose your personal information under the following circumstances:

• With Shopify, service providers and third parties who perform services on our behalf such as IT services, payment processing, analytics, customer support, cloud storage and order fulfilment.
• With business and marketing partners such as Shopify, Klaviyo, Google, Meta, Pinterest, TikTok and Snapchat to support personalised advertising based on your online activity.
• With Vexxa AB staff and contractors who support the operation of the Services under confidentiality obligations.
• When you request or consent to disclosure, for example shipping providers or social media integrations.
• With our affiliates or within our business group.
• In connection with a business transaction such as a merger, acquisition or bankruptcy, or as required by law.

We do not sell personal information in a common sense meaning. In some jurisdictions certain advertising activities may be considered “selling” or “sharing”. Where required we provide mechanisms to opt out of such activities.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you provide will be transmitted to Shopify and third parties in other countries where permitted by law.

Shopify also uses enhanced data features that may include information about your interactions with our store, other stores and Shopify. In these cases Shopify is responsible for processing and responding to rights requests for those activities.

You can learn more here:
Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy
Shopify Privacy Portal: https://privacy.shopify.com

International Transfers

Your personal information may be transferred, stored or processed outside your country, including in countries where Shopify, Klaviyo, Google, Meta, Pinterest, TikTok and Snapchat operate.

When transferring personal information outside the EU, EEA or UK we use approved mechanisms such as Standard Contractual Clauses or rely on adequacy decisions when available.

Security and Retention

No security measures are perfect and we cannot guarantee perfect security. Information sent to us may not be secure during transmission. Avoid sending sensitive information through unsecure channels.

We retain personal information based on factors such as account requirements, legal obligations, dispute resolution and enforcement of policies. Generally:

• Order and transaction data is kept as required by accounting and tax law.
• Marketing data is kept until you withdraw consent or object.
• Technical logs and security data are kept long enough to protect the Services and investigate incidents.

Your Rights

Depending on your location you may have some or all of the following rights:

• Right of access (GDPR Art. 15)
• Right to deletion (GDPR Art. 17)
• Right to rectification (GDPR Art. 16)
• Right to restrict processing (GDPR Art. 18)
• Right to data portability (GDPR Art. 20)
• Right to object (GDPR Art. 21)
• Right to withdraw consent

Opt out of “selling” or “sharing” for targeted advertising

In some jurisdictions you may opt out of the “sale” or “sharing” of personal information or out of processing for targeted advertising. If available we will provide opt out tools within the Services.

Managing communication preferences

You may unsubscribe from marketing emails at any time by using the link in our emails. We may still send non marketing emails such as order updates.

If you live in the EU, EEA or UK you may exercise your rights by contacting us at info@elinpk.com. You may also contact your local data protection authority. A list of EEA authorities is available at:
https://edpb.europa.eu/about-edpb/about-edpb/members_en

The Swedish Authority for Privacy Protection (IMY):
https://www.imy.se

We do not discriminate against anyone who exercises their privacy rights. We may need to verify your identity before responding to your request.

Children’s Data

The Services are not intended for children and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you believe a child has provided personal information, contact us to request deletion.

Third Party Websites and Links

The Services may link to websites or platforms operated by third parties. We are not responsible for their privacy or security practices. You should review their policies before providing personal information.

Information you share on public or semi public areas, including social media platforms, may be visible to other users without limitation. Linking to such platforms does not imply endorsement unless stated in the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time for operational, legal or regulatory reasons. Updates will be posted on this page and the “Last updated” date will be revised. When required by law we will notify you of material changes.

Contact

If you have any questions about our privacy practices or this Privacy Policy or if you want to exercise your rights you can contact us at:

Company: Elin PK AB
Email: info@elinpk.com
Address: Södra Vägen 53, 412 54 Gothenburg, Sweden

We are the controller of your personal information in accordance with applicable data protection laws.