Privacy Policy
Scope and legal framework
This notice explains how we process personal data when you visit our website, submit forms, or purchase food supplements such as Solveny. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR where applicable, and Swedish national implementing measures. Where local law grants stronger protections, we honour the higher standard.
Categories of data we collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact | Name, email, phone if provided | Forms you submit |
| Transaction data | Order history, delivery address, payment confirmation tokens | Checkout partner systems |
| Technical data | IP address, device type, browser language | Server and analytics tools with consent |
| Cookie records | Consent logs, preference IDs | Cookie banner storage |
Purposes and lawful bases
- Contract (Art. 6(1)(b) GDPR): processing orders, deliveries, and related customer support.
- Legitimate interests (Art. 6(1)(f) GDPR): securing the website, preventing fraud, improving product information while balancing your rights.
- Consent (Art. 6(1)(a) GDPR): optional analytics and marketing cookies, newsletter signup where offered.
- Legal obligation (Art. 6(1)(c) GDPR): bookkeeping, tax filings, and dispute resolution retention.
Retention
Contact form copies remain for twenty-four months unless a longer period is required for an ongoing claim. Accounting records follow Swedish bookkeeping rules, currently seven years. Cookie consent logs stay for twenty-four months to demonstrate compliance. Technical server logs rotate after ninety days unless an incident investigation extends the window.
Recipients and transfers
We work with payment processors, logistics partners, and cloud hosting providers located inside the European Economic Area. If a transfer outside the EEA occurs, we rely on standard contractual clauses or equivalent safeguards. A list of subprocessor categories is available upon request.
Security measures
We enforce TLS encryption, role-based access, pseudonymised analytics where possible, and staff confidentiality commitments. Security reviews take place when systems materially change.
Your rights
You may request access, rectification, erasure, restriction, objection, and portability relating to personal data we control. You may withdraw consent at any time without affecting earlier lawful processing. Contact us using the postal address above or the email labels published in the site footer. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Automated decision-making
We do not use automated decision-making that produces legal effects about you.
Children
Our services target adults. We do not knowingly collect data from anyone under sixteen without parental authority.
Updates
We revise this policy when our practices or laws change. Material updates will be noted with a refreshed "Last updated" date shown on this page.
Geographic scope
The data controller is based in Göteborg, Sweden (European Union). This policy applies to all visitors and customers regardless of country of origin. EEA residents are protected by the GDPR. UK residents are covered by the UK GDPR. Where buyers are located outside these areas, we apply GDPR-equivalent safeguards as a baseline. No services are intentionally directed at jurisdictions where the online sale of food supplements is restricted by local law.
Advertising and supplement product context
Throxxenxogvalen advertises Solveny, a food supplement sold without a prescription. Solveny is not a medicine and no medical claims are made. When we use paid advertising platforms, including Google Ads, we comply with applicable platform policies that restrict targeting based on sensitive health conditions. Marketing cookies and advertising audience features are only activated with your explicit consent. We do not use health-related inferences to build sensitive-category audience profiles. You can opt out of personalised advertising through your browser settings or through Google Ads Settings at adssettings.google.com. Partner ad-platform privacy policies are available on each respective platform's website.