Privacy Policy

 

PRIVACY POLICY

1. GENERAL INFORMATION

At FLUFFOW, we take your privacy seriously. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, shop with us or otherwise interact with us.

FLUFFOW is a brand operated by ********.

We operate from Sweden and offer our products to customers in Sweden. If we subsequently offer products or services in other markets, the processing of personal data will be subject to the applicable data protection laws of the relevant market.

The General Data Protection Regulation (GDPR), together with applicable Swedish supplementary data protection legislation, applies to the processing of personal data in Sweden.

Your mandatory rights under applicable data protection legislation are not affected by this Privacy Policy.

2. DATA CONTROLLER

The data controller responsible for the processing of personal data is:

********

Registered address:
********
********
********
********

Company registration number: ********

Email: support@fluffow.com

******** is responsible for the processing of personal data carried out in connection with FLUFFOW.

If applicable data protection legislation requires us to appoint a representative in a particular market, details of the relevant representative will be provided in this Privacy Policy.

3. WHAT PERSONAL DATA WE PROCESS

Depending on how you use our website and services, we may process the following categories of personal data:

  • Name

  • Email address

  • Billing and delivery address

  • Telephone number

  • Order and purchase history

  • Information about products you have purchased

  • Payment-related information necessary to process a payment

  • IP address

  • Information about the device and browser you use

  • Information about how you use our website

  • Information collected through cookies and similar technologies

  • Correspondence and enquiries submitted to customer service

  • Other information you voluntarily provide to us

4. HOW WE COLLECT PERSONAL DATA

We may collect personal data in the following ways:

  • When you place an order

  • When you create or use features on our website

  • When you contact customer service

  • When you subscribe to our newsletter or other marketing communications

  • When you use our website

  • Through cookies, pixels and similar technologies, where permitted and, where required, subject to your consent

  • Through payment, delivery and other service providers involved in fulfilling your order

5. PURPOSES OF PROCESSING

We may process personal data for the following purposes:

  • To process and deliver orders

  • To process payments

  • To fulfil our agreements with customers

  • To communicate with customers regarding orders and customer service

  • To handle returns, complaints and other customer enquiries

  • To administer and improve our website

  • To analyse the use of our website and services

  • To prevent fraud, misuse and security incidents

  • To send marketing communications where permitted and where valid consent or another lawful basis exists

  • To comply with legal and accounting obligations

  • To protect our rights and interests

6. LEGAL BASIS FOR PROCESSING

Depending on the purpose of processing, we process personal data on one or more of the following legal bases:

  • Performance of a contract – where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract

  • Consent – where you have voluntarily given your consent to specific processing

  • Legitimate interests – where processing is necessary for our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms do not override those interests

  • Legal obligation – where processing is necessary to comply with a legal obligation

Processing of personal data in Sweden is subject to the GDPR and applicable Swedish data protection legislation.

7. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies to ensure that our website functions properly, remember necessary settings, analyse website usage and, where permitted, support marketing activities.

Strictly necessary cookies may be used where they are required for the website or a service you have requested to function.

Non-essential cookies and similar technologies are used only where permitted by applicable law and, where consent is required, after valid consent has been obtained.

You can change or withdraw your consent at any time through the cookie settings available on our website.

In Sweden, the applicable rules on cookies and similar technologies include the Swedish Electronic Communications Act (2022:482).

We may use cookies and other technologies, such as tracking pixels, scripts and similar technologies. These technologies are treated in the same way as cookies where required by applicable law.

8. ANALYTICS AND MARKETING TOOLS

Where permitted and, where required, subject to consent, we may use analytics and marketing tools, including:

  • Google Analytics

  • Meta Pixel (Facebook Pixel)

These tools may process information about how visitors use our website, such as visit information, device and browser details, actions taken on the website and other technical information.

The purposes may include analysing traffic, understanding how our website is used, improving our services, and measuring or tailoring marketing activities.

Non-essential tracking is not activated before the required consent has been obtained where applicable law requires such consent.

9. PAYMENT SERVICES

We use third-party payment services to process payments.

Depending on the payment method you select, these may include:

  • Airwallex

  • Shopify Payments, where available and enabled

  • Klarna, where available and enabled

  • Apple Pay, where available and enabled

  • Google Pay, where available and enabled

  • Visa

  • Mastercard

Payment providers may process payment and transaction information necessary to complete the payment.

For card payments, information may also be processed by the relevant payment networks and card issuers involved in the transaction.

In certain circumstances, payment providers may act as independent data controllers for the processing they carry out. Where this is the case, their own privacy policies and terms also apply.

10. SHARING PERSONAL DATA

We do not share personal data with others except where necessary to operate our business, provide our services, fulfil orders, comply with legal obligations or where another valid legal basis applies.

Personal data may be shared with the following categories of recipients:

  • Shopify and providers supporting our online store platform

  • Payment providers, including Airwallex and other providers used to process payments

  • Shipping and logistics partners

  • IT, hosting and operational service providers

  • Analytics and marketing providers

  • Customer service and communication service providers

  • Accounting professionals and other professional advisers

  • Public authorities where we are legally required to disclose information

We require service providers processing personal data on our behalf to handle the information securely and lawfully and only in accordance with the agreed purposes.

11. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process or store personal data outside Sweden or the European Economic Area (EEA).

Where personal data is transferred to a country outside the relevant protected area, we ensure that the transfer complies with applicable data protection legislation.

This may include transfers based on:

  • An adequacy decision

  • Standard Contractual Clauses (SCCs)

  • Other lawful transfer mechanisms or derogations available under applicable legislation

Where necessary, relevant assessments and safeguards are implemented before or in connection with an international transfer.

12. RETENTION AND DELETION OF PERSONAL DATA

We retain personal data only for as long as necessary for the purposes for which it was collected or for as long as we are legally required to retain it.

The retention period depends, among other things, on:

  • The purpose of processing

  • The duration of the customer relationship

  • Statutory retention requirements

  • The need to document transactions and agreements

  • The need to handle potential disputes or legal claims

Information that must be retained for accounting, tax or other legal purposes will be kept for the period required by applicable law.

When personal data is no longer necessary, it will be securely deleted or anonymised unless further retention is required.

13. YOUR DATA PROTECTION RIGHTS

Under the GDPR and applicable data protection legislation, you may have the right to:

  • Access the personal data we process about you

  • Correct inaccurate or incomplete personal data

  • Request the deletion of personal data where the relevant conditions are met

  • Restrict the processing of your personal data

  • Request data portability

  • Object to certain types of processing

  • Withdraw your consent at any time where processing is based on consent

  • Object to direct marketing

Withdrawing your consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

To exercise your rights, you can contact us at:

support@fluffow.com

We may request information necessary to verify your identity before processing your request.

14. DIRECT MARKETING

We may send marketing communications by email or other electronic channels where permitted by applicable law and where we have a valid legal basis to do so.

If marketing communications are based on consent, you may withdraw your consent at any time.

You may also unsubscribe from marketing communications at any time by following the unsubscribe instructions included in the relevant message.

We comply with applicable Swedish rules governing marketing communications and electronic communications.

15. COMPLAINTS TO A SUPERVISORY AUTHORITY

If you believe that personal data is not being processed in accordance with applicable data protection legislation, you may contact us first to give us an opportunity to investigate the matter.

You also have the right to lodge a complaint with the relevant supervisory authority.

In Sweden, you may contact:

Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY)

https://www.imy.se/en/

You may also have the right to lodge a complaint with the supervisory authority in another country or jurisdiction where you live, work or where you believe a breach of data protection rules has occurred.

16. INFORMATION SECURITY

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, misuse or other unlawful processing.

However, no method of transmitting or storing information is completely secure. We therefore cannot guarantee the absolute security of personal data.

17. CHILDREN'S PRIVACY

Our website is not specifically directed at children.

We do not knowingly collect personal data from children where applicable law requires parental or guardian consent.

If we become aware that we have received personal data from a child in breach of applicable requirements, we will take the necessary steps in accordance with applicable law.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy if there are changes to our business, our services, the way we process personal data or applicable legislation.

The current version will be available on our website.

Where significant changes occur, we will provide additional information or notify you by appropriate means where required by applicable law.

19. CONTACT

If you have any questions about this Privacy Policy or how we process personal data, you can contact us:

FLUFFOW

Legal company name: ********

Registered address:
********
********
********
********

Company registration number: ********

Email: support@fluffow.com

Last updated: 28 October 2026