Who we are
KYLA AB is a Swedish company. Our website is getkyla.com. When you place an order or interact with our website, we collect and process certain personal information as described in this policy.
Our registered office: Olof Palmes gata 11, 111 37 Stockholm
Contact for data inquiries: hello@getkyla.com
What information we collect
We collect the following types of personal information:
- Order information. Name, shipping address, billing address, email, phone number, and payment details when you place an order.
- Account information. If you create an account, your email address and password (encrypted).
- Marketing information. Your email address if you subscribe to our newsletter.
- Communication. Any messages you send us via the contact form or email.
- Website analytics. Anonymized data about how you use our website, including pages visited, time on site, and device type.
How we use your information
We use the information we collect to:
- Process and fulfill your orders
- Communicate with you about your order, shipping, and customer service inquiries
- Send marketing emails if you have subscribed to our newsletter (you can unsubscribe at any time)
- Improve our website and product offerings based on aggregated, anonymized data
- Comply with legal obligations such as tax reporting and consumer protection
Sharing with third parties
We share your personal information with third parties only as necessary to operate our business:
- Shopify. Our e-commerce platform stores customer data and processes orders.
- Payment processors. Stripe, Klarna, and other payment providers process payment information directly. We do not store full payment card details.
- Shipping carriers. We share name and address with our shipping partners (DHL, PostNord, and others) to deliver your order.
- Email service providers. If you subscribe to our newsletter, we use Klaviyo (or similar) to send emails.
- Analytics. We use Google Analytics or similar tools with anonymized data to understand website usage.
We do not sell your personal information to third parties for marketing purposes.
International data transfers
Some of our service providers (such as Shopify and Google) process data in the United States. We rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection for transferred data.
Your rights under GDPR
If you are in the European Union or United Kingdom, you have the following rights regarding your personal data:
- Right to access. You can request a copy of the personal data we hold about you.
- Right to rectification. You can request that we correct inaccurate or incomplete data.
- Right to erasure. You can request that we delete your personal data (subject to legal retention requirements).
- Right to restrict processing. You can request that we stop processing your data in certain circumstances.
- Right to data portability. You can request your data in a structured, machine-readable format.
- Right to object. You can object to processing based on legitimate interests, including marketing.
- Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time.
To exercise any of these rights, contact us at hello@getkyla.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten) if you believe we have violated your data rights.
Cookies
We use cookies and similar technologies to operate our website, analyze usage, and improve your experience. You can manage cookie preferences in your browser settings.
For details, see our Cookie Policy (or the cookie banner on first visit).
Data retention
We keep your personal data for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, and reporting requirements:
- Order information: 7 years (Swedish accounting law)
- Account information: until you request deletion or close your account
- Marketing subscriptions: until you unsubscribe
- Contact form submissions: 2 years
Security
We take reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS), secure payment processing, and access controls. However, no system is 100% secure. If we become aware of a security breach affecting your data, we will notify you in accordance with applicable law.
Changes to this policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.
Contact
For any questions about this Privacy Policy or how we handle your data, contact us at hello@getkyla.com.