Privacy Policy

Controller: Chrexxonxlo, Magasinsgatan 16, 411 18 Göteborg, Sweden.

Last updated:

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, submit forms, or communicate with us. The controller is established in Sweden and primarily serves customers in the European Economic Area. We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Swedish Act containing supplementary provisions to the GDPR (SFS 2018:218), and applicable ePrivacy rules where relevant.

1. Categories of personal data

Depending on your interaction, we may process: identity and contact data (name, email address, optional telephone number); communication content (messages you send); technical data (IP address, browser type, device identifiers, and similar metadata transmitted by your device); and cookie or similar identifiers when you consent to non-essential cookies.

2. Purposes and legal bases

We process data to respond to inquiries and order requests (performance of a contract or steps prior to a contract, and our legitimate interest in operating customer communications). We process data required for legal compliance (such as accounting or tax obligations) where applicable. Where we rely on consent (for example, certain marketing messages or optional analytics), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

3. Storage periods

We retain contact and order-related correspondence for as long as needed to complete your request and for a reasonable period afterward to handle follow-up questions. Statutory retention periods may require longer storage for invoices and accounting records. Technical logs are kept for a limited period compatible with security monitoring and troubleshooting. When data is no longer needed, we delete or anonymize it.

4. Recipients and transfers

We may share data with service providers that host the website, transmit email, or provide analytics when you have enabled those categories in the cookie tool. Some providers may process data outside the European Economic Area; where that occurs, we use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions under Chapter V GDPR.

5. Your rights

Under GDPR, you may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. You may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or your local supervisory authority. To exercise rights, contact us using the identifiers listed on the website. We will respond within one month unless complexity requires an extension as permitted by law.

6. Security measures

We apply appropriate technical and organizational measures, including access limitations, secure transmission where supported, and vendor review. No online transmission is completely risk-free; we work to reduce risks in proportion to the nature of the data.

7. Automated decision-making

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on you.

8. Children

Our services are directed to adults. We do not knowingly collect data from children.

9. Changes

We may update this policy to reflect legal or operational changes. The “Last updated” date will change accordingly. Material changes will be highlighted on the site where appropriate.

10. Advertising, measurement, and approximate location

If you consent to marketing or analytics cookies, partners may process data about your device and coarse location (for example region or city derived from IP) to measure campaigns, cap frequency, and limit irrelevant impressions. We do not use this processing to infer health conditions or to build health-related profiles. Food supplement advertising connected to this site is intended to follow Google Ads policies for dietary supplements and applicable EU and Swedish rules on food information and unfair commercial practices.

11. Contact

For privacy requests, write to the postal address above or use the contact identifiers published on the site (email addresses appear as plain text on the contact section).