Privacy Policy

Last updated: 15 March 2026

1. Who We Are

Khomlaxxchar is the data controller for personal data collected through this website. Our registered details are:

2. Personal Data We Collect

We collect personal data that you voluntarily provide when you:

• Submit an order request via our contact form (name, email address, phone number, message)
• Contact us directly by phone or email
• Browse our website (technical data via cookies — see our Cookie Policy)

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Contractual necessity (Art. 6(1)(b)) — to process and fulfil your order request.
• Legitimate interests (Art. 6(1)(f)) — to improve our website and customer communication.
• Consent (Art. 6(1)(a)) — for optional analytical and marketing cookies, which you may withdraw at any time.
• Legal obligation (Art. 6(1)(c)) — to comply with Swedish and EU law including consumer and tax regulations.

4. Purposes of Processing

We use your personal data for the following purposes:

• Processing and responding to your order enquiries
• Communicating with you regarding your order, delivery and returns
• Complying with legal obligations under Swedish consumer law (Konsumentköplagen) and EU regulations
• Improving the functionality and user experience of our website

5. Data Retention

We retain your personal data only for as long as necessary for the purposes stated in this policy:

• Order-related data: 7 years in accordance with Swedish accounting law (Bokföringslagen)
• Contact form submissions: up to 12 months following resolution of your enquiry
• Cookie consent records: 12 months from the date of consent

After these periods, your personal data is securely deleted or anonymised.

6. Data Sharing and Third Parties

We do not sell, rent or trade your personal data. We may share data with trusted third-party service providers acting as data processors on our behalf (for example, delivery partners, payment processors). These parties are bound by data processing agreements and are permitted to use your data only for the purposes we specify.

Personal data may be transferred within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.

7. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restriction — to request that we limit the processing of your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. All data transmissions through our website are encrypted via HTTPS.

9. Supervisory Authority

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you believe we have not handled your personal data in accordance with applicable law.

IMY contact: imy.se | Box 8114, 104 20 Stockholm, Sweden | Phone: +46 8 657 61 00

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page with the date of last update indicated above. We encourage you to review this policy periodically.

11. Contact