Privacy Policy

1. Introduction

Khunryonxol ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share information about you when you visit khunryonxol.world or contact us.

We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Swedish Data Protection Act (Dataskyddslagen 2018:218) and other applicable legislation.

2. What Data We Collect

Data you provide directly

• Full name
• Email address
• Phone number (optional)
• Message content submitted via the order form

Data collected automatically

• IP address and browser type (via server logs)
• Pages visited and time spent on site (only if analytics cookies are accepted)
• Cookie preferences

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): To process and fulfil your order enquiry.
• Consent (Art. 6(1)(a) GDPR): For optional analytics and marketing cookies and for direct marketing communications where you have given consent.
• Legal obligation (Art. 6(1)(c) GDPR): To comply with applicable Swedish and EU law, including bookkeeping and tax obligations.
• Legitimate interests (Art. 6(1)(f) GDPR): For security, fraud prevention and improving our services.

4. How We Use Your Data

• Responding to and fulfilling order enquiries
• Sending order confirmations and delivery updates
• Providing customer support
• Complying with legal and accounting obligations
• Improving website functionality and user experience (with your consent)

5. Data Retention

We retain personal data only for as long as necessary for the purposes stated in this policy or as required by law. Specifically:

• Order data: 7 years from the date of the transaction (Swedish Bookkeeping Act).
• Customer communications: Up to 3 years from last contact.
• Analytics data: Up to 26 months (anonymised after 14 months).
• Cookie consent records: 12 months.

6. Sharing Your Data

We do not sell your personal data. We may share data with:

• Delivery and logistics providers — to fulfil your order.
• Payment processors — to securely process transactions.
• IT and hosting providers — who act as data processors under GDPR-compliant contracts.
• Authorities — when required by law (e.g. tax authorities, police).

All third-party processors are bound by data processing agreements meeting GDPR standards.

7. International Transfers

Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights

Under GDPR, you have the following rights:

• Right of access (Art. 15): To request a copy of your personal data.
• Right to rectification (Art. 16): To correct inaccurate or incomplete data.
• Right to erasure (Art. 17): To request deletion of your data ("right to be forgotten").
• Right to restriction (Art. 18): To limit how we process your data in certain circumstances.
• Right to data portability (Art. 20): To receive your data in a structured, machine-readable format.
• Right to object (Art. 21): To object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: At any time, without affecting prior lawful processing.

To exercise your rights, contact us at clients-ask@khunryonxol.world. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with Integritetsskyddsmyndigheten (IMY) — the Swedish Data Protection Authority — at www.imy.se.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. All data transmission occurs over HTTPS/TLS encryption.

10. Cookies

We use cookies on our website. For full information on the cookies we use, their purposes and how to control them, please read our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy periodically. The date at the top of this page reflects the most recent update. We encourage you to review this policy regularly. Continued use of our website after any change constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or how we handle your data: