Privacy Policy – KLN Organic AB

Last Updated: August, 2025

1. Introduction

KLN Organic AB is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the General Data Protection Regulation (GDPR – Regulation EU 2016/679) and applicable Swedish laws.

2. Data Controller

The entity responsible for processing your personal data is: KLN Organic AB Email: info@klnorganic.com Registered Address: 16273, Vällingby, Stockholm, Sweden Registration Number: 559422-2142 VAT Number: SE559422214201 EORI Number: SE5594222142

You may refer to the company details in the official Swedish registers.

3. Personal Data We Collect

We may collect various types of personal data, including but not limited to:

Full name
Email address
Phone number
Shipping and billing address
Purchase history
IP address and browser information
Any other data you voluntarily provide

4. How We Use Your Data

We use your personal data for the following purposes:

Processing and fulfilling orders
Responding to your inquiries and support requests
Sending updates, promotional offers, and newsletters (with your explicit consent)
Improving our website and services
Complying with legal obligations

5. Legal Basis for Processing

We process your data based on one or more of the following legal grounds under Article 6 of GDPR:

Your consent: When you provide explicit consent during the purchase process
Performance of a contract: To fulfill our contractual obligations with you as a customer
Legal compliance: When required by law
Legitimate interests: To improve our services, provided it does not override your rights

6. Data Sharing and Disclosure

We do not sell your personal data. We may share it with:

Service providers: Such as payment processors (e.g., Stripe) and shipping companies, who are bound by confidentiality obligations
Legal authorities: When required by law
Third parties: Only with your explicit consent

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined above or as required by law, such as one year following your purchase for order follow-up and tax compliance purposes, unless otherwise stipulated by law.

8. Your Rights Under GDPR

Under Articles 15–22 of GDPR, you have the following rights:

Access: Request a copy of your personal data
Rectification: Correct any inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Object or restrict processing: Object to or restrict the processing of your data
Withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing

9. Response Time to Requests

We are committed to responding to any requests regarding your personal data without undue delay and within the timeframe required by law. Under Article 12(3) of GDPR, we will respond within 30 days from the receipt of your request. If the request is complex or involves multiple issues, we may extend this period by up to an additional 60 days, notifying you within the initial 30-day period.

10. Cookies and Tracking Technologies

We do not use cookies or similar tracking technologies on our website, in order to protect your privacy and ensure your comfort as a customer, aligning with our commitment to a secure, tracking-free experience.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or loss, in accordance with Article 32 of GDPR. Data is stored on secure servers within the European Union.

12. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, in compliance with Article 46 of GDPR.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date, and we recommend that you review it regularly.