Privacy Policy
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, make a purchase, or contact our support team. This may include your name, email address, postal address, phone number, and payment information.
2. How We Use Your Information
We use the information we collect to process your orders, communicate with you about products and services, improve our offerings, and comply with legal obligations. We do not sell your personal information to third parties.
3. Data Storage and Security
Your data is stored securely using industry-standard encryption. We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
4. Who We Share Data With
We use the following providers (data processors) to run the shop. They receive only the data their task needs and may not use it for their own purposes. • Stripe — payments. Card and payment details are handled by Stripe and never reach our servers. • Klarna — if you choose Klarna in Stripe’s checkout, Klarna Bank AB processes your data as an independent controller for payment and credit assessment. • Google (Firebase Authentication) — sign-in with an email link or Google account. • Google Cloud — hosting of our server and database (EU, the Netherlands) and storage of product images. • Cloudflare — delivery of the website. • Resend — email such as order confirmations and newsletters. • Sentry — error reporting so we can fix bugs (EU region, without names or email addresses). • Google Analytics — visitor statistics, only if you consent to analytics. • Addrevenue — affiliate measurement, only if you consent to marketing. Some providers are US companies. Transfers outside the EU/EEA are protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
5. Your Rights
Under GDPR, you have the right to access, correct, delete, or export your personal data at any time. You may also object to or restrict certain processing of your data, and withdraw consent at any time. To exercise these rights, please contact us at privacy@apofemme.com. If you believe we process your data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se, or with the data protection authority in the country where you live.
6. Cookies
We use cookies and similar technologies on our website. You can manage your preferences at any time via the "Manage Cookies" link in our footer.
Essential Cookies
These cookies are strictly necessary for the website to function. They cannot be disabled. • apfm_sid — Session cookie for your shopping cart and login state. Expires after 2 weeks. • csrftoken — Security token that protects against cross-site request forgery. Expires after 1 year. • apofemme_cookie_consent — Remembers your cookie choice in your browser’s local storage.
Analytics Cookies
These cookies help us understand how visitors use our website. Google Analytics is only loaded if you consent to analytics. • _ga, _ga_* — Google Analytics cookies that distinguish visitors for usage statistics. Expire after 2 years.
Marketing Cookies
These cookies are used for affiliate attribution. Addrevenue is only loaded if you consent to marketing. • addrevenue — Affiliate tracking cookie (and matching local-storage entry) from Addrevenue.io for attributing purchases to marketing partners. Expires after 45 days.
7. Contact Us
If you have questions about this Privacy Policy, please contact us at privacy@apofemme.com or write to us at Apofemme Scandinavia AB (reg. no. 559283-5721), Essinge Brogata 8, 112 61 Stockholm, Sweden. Apofemme Scandinavia AB is the data controller.