Privacy Policy

Tankeom AB, corp. reg. no. 559513-7703, (“we”, “us”) is committed to protecting your privacy. This policy explains how we collect, use and protect your personal data in accordance with the EU General Data Protection Regulation (“GDPR”). 

Data controller

Tankeom AB is the data controller for the processing of your personal data and is therefore responsible for ensuring that your data is handled correctly and securely in accordance with applicable legislation. If you have any questions, please contact us using the contact details in the “Contact us” section below.

What personal data do we process?

Personal data means any information that directly or indirectly relates to a natural, living person. Accordingly, personal data is information about you and your person, e.g. your name, your contact information and your IP address.

Processing means any operation which is performed on personal data, such as collection, storage, use, adaptation or disclosure.

Customers, suppliers and partners

We collect and store the following information about you that we need to contact you and to fulfil our undertakings toward you as (i) a customer, supplier or partner; (ii) a company representative for a customer, supplier or partner; or (iii) potential customers, suppliers and partners.

Personal information and contact information, such as name, address, telephone number and email address. 

Information regarding order history, purchased products and time of purchase. 

Information regarding your interaction with our emails, including whether messages are opened or links are clicked.

Information and feedback that you provide to us by email, via our social media or by other channels of communication. 

Information regarding complaints and warranty matters.

Payment information, such as bank information, account number and, where applicable, IBAN, SWIFT etc. and payment history. 

Visitors to our website

In connection with visits to our website, we collect the following information about you that we need to be able to improve, streamline, simplify and develop our website.

Technical data, such as IP address, URL, unique device ID, network and device performance, browser, language and identification settings, geographic location, operating system, other information from cookies and usage data related to your interaction with the website, or similar mechanisms (device information).

Purpose 

We use your personal information for the following purposes: 

1. To comply with our legal obligations under applicable accounting and tax legislation
2. To manage orders, payments, deliveries, returns and customer enquiries.
3. To send you updates regarding orders. 
4. To answer questions and investigate complaints, claims and support issues relating to purchases.
5. To create customer accounts and maintain correct information about you.
6. To verify your identity and check your age in order to create a customer account.
7. For other communication with you as a customer, where we respond to enquiries received by our customer service team or via other digital channels (including social media).
8. To maintain, protect, and improve our website's functionality through Shopify.
9. To improve your customer experience and develop our customer offering for you.
10. To prevent and detect fraud and misuse of our services. 
11. To manage and send newsletters, updates, and company announcements.

Legal basis

With regard to point 1 under the section “Purpose” above, the legal basis for the processing is to comply with legal obligations under applicable accounting and tax legislation.

With regard to points 2–6 under the section “Purposes” above, the legal basis for the processing of your personal data is that we need to be able to fulfil the contract you enter into with us in connection with your purchase of our products from our website or when you create a customer account. If you do not provide us with the relevant personal data, we are unfortunately unable to offer you to purchase our products from our website and/or to enable you to create a customer account. 

With regard to points 7–10 under the section “Purposes” above, the legal basis for the processing of your personal data is that the processing is necessary for purposes relating to our legitimate interests. This means that we consider our interests in processing your personal data for the purposes listed above to outweigh the infringement of your privacy resulting from the processing. This assessment has been made in particular in light of the fact that we consider the processing to be beneficial to you. Our legitimate interest for points 7-10 is: (7) to be able to respond efficiently to customer enquiries and maintain good customer relations; (8) to ensure that our website operates securely, reliably and efficiently for our customers; (9) to develop and improve our products, services and customer experience in order to remain competitive and meet customer expectations; and (10) to protect our business and our customers from fraud, misuse and other unlawful activity.

With regard to point 11 under the section “Purposes” above, the legal basis for the processing of your personal data is that the processing is necessary for purposes relating to our legitimate interests to keep existing customers and contacts informed about our products, services and company news in order to maintain and develop our customer relationships, provided that the communication does not relate to direct marketing, in which case the legal basis for the processing of your personal data is your consent. If you subscribe to our newsletter or consent to receive marketing communications, we use Klaviyo to manage email marketing campaigns and customer communications. You may withdraw your consent and unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our emails or by contacting us directly using the contact details in the “Contact us” section below.

How long do we store your personal data?

Your personal data is stored for as long as there is a need to retain it in order to fulfil the purposes for which the data was collected in accordance with this Privacy Policy. Thereafter, your personal data will be deleted.

When purchasing products from our website, and if you do not have a customer account, we will delete your personal data within [X] days once our assignment has been completed, unless legal requirements (e.g. the Swedish Accounting Act regarding proof of purchase/invoices) require your data to be retained for a longer period, up to seven years.

When having a customer account, we retain your data for as long as you have an active account, and for [X] days after your account is deleted, in case of any restoration request.

When in contact with us, we retain your data for the duration of our contact and for the time necessary to resolve any complaints, claims or support issues relating to purchases, and for up to two years after the issue has been resolved, in order to be able to defend against any legal claims. 

When subscribing to our newsletter, we retain your data for the duration of your subscription and it will be deleted within [X] days of unsubscribing. You can unsubscribe from our newsletter at any time using the link in each email. To exercise your rights, please contact us using the contact details in the “Contact us” section below.

How we share your information

We do not sell or share your personal information with third parties for their own marketing.

We may share your personal data with the following categories of third parties:

• E-commerce platform providers – to operate and manage our online store and website.
• Payment service providers – to process payments and prevent fraud.
• Shipping and delivery providers – to arrange and manage the delivery of your orders.
• Logistics and warehousing providers – to manage order fulfilment, warehousing, and shipping operations.
• Warehouse management system providers – to administer and process orders within our logistics operations.
• Accounting and financial administration providers – to manage invoicing, receipts, and other accounting records in compliance with applicable accounting and tax legislation.
• System integration providers – to transfer and synchronise information between our business systems, including our online store, accounting systems, and logistics systems.
• Email marketing and customer communication providers – to manage newsletters, marketing campaigns, and customer communications, where you have consented to receive such communications.

Our website runs on Shopify. Shopify may collect and process certain technical information (such
as IP address and usage details) to operate and secure the site. For more details on how Shopify processes data, please refer to (i) Shopify Consumer Privacy Policy; and (ii) Shopify Privacy Portal.

Regarding personal data that occurs and is processed on social media, such as Facebook, Instagram, Twitter, YouTube and LinkedIn, we refer users to the policy provided by the respective service providers for information on how each service provider processes personal data. 

Necessary security measures and transfer of personal data to third countries

You should always feel secure when providing your personal data to us. We have therefore implemented the necessary security measures to protect your personal data against unauthorised access, alteration and deletion, such as encryption, access controls and backups. We will not disclose your data to anyone else, other than as expressly set out in this Privacy Policy.

We may transfer your personal data to countries outside the EU/EEA. If your personal data is transferred to a country outside the EU/EEA, we will take the necessary measures to ensure that the transfer of the personal data is legal and that your personal data is processed securely and with an adequate level of protection that is comparable to the protection offered within the EU/EEA, for example by entering into the European Commission’s standard contract clauses with the recipient. If you wish to obtain a copy of the standard contractual clauses, please contact us. Our contact information is set out under the “Contact us” section below. 

Your rights

As a data subject, you have the following rights:

• Right of access: You have the right to access your personal data and to receive a copy of the personal data concerning you that we process.
• Right to rectification: If the personal data we process about you is inaccurate, incomplete or out of date, you have the right to ask us to rectify it.
• Right to erasure: You have the right to request that we erase your personal data. If we do not have a legal basis for continuing to process the personal data, it must be erased.
• Right to object: In certain circumstances, you have the right to object to our processing of your personal data. You have an absolute right to object to the processing of your personal data for direct marketing purposes.
• Right to restriction: In certain cases, you have the right to request that we restrict the processing of your personal data. This means that we may only process the personal data in ways other than storing it under certain conditions. 
• Right to data portability: Where personal data is processed with your consent or on the basis of a contract with you, you have the right to receive your personal data in a machine-readable format and to transfer that data to another data controller.
• Right to withdraw consent: Where personal data is processed with your consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Swedish Data Protection Authority (IMY), Box 8114, 104 20 Stockholm.

Cookies

We use cookie-like techniques in order to provide certain functions on our website, to improve the website and to deliver a better and more personal service. The information is stored in the form of a file comprising encrypted login data. [For more information about the cookies we use and how to manage your preferences, please see our Cookie Policy.]

Children's privacy

Our website, services and newsletters are intended for adults only. We do not knowingly collect or process personal data from minors. When creating a customer account, we ask users to confirm that they meet the applicable age requirement. If we become aware that we have inadvertently collected personal data from a minor, we will delete such data without undue delay.

Changes to this Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last updated" date. We may also notify customers via email.

Contact us

If you have any questions or wish to exercise your data rights, please contact us:

Email: info@tankeom.com

Address: Box 31062, 200 49 Malmö, Sweden

Last updated: June 30, 2026