Privacy policy

This policy describes how Bangerpack processes your personal data when you visit and shop at bangerpack.com. We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

Data controller

Bangerpack is run by White Tree AB
Company registration number: 556824-4239
Registered office: Helsingborg, Sweden
Email: [email protected]
Phone: +46 76 686 03 32

Questions about your personal data go to [email protected].

When you shop with us

• Your order. Name, delivery address, email address, phone number, the items you buy, prices and payment status. We use them to handle and deliver your order. Legal basis: to perform the contract with you. We need these details to sell to you; without them we cannot take your order.
• Payment. The payment service provider receives the details needed for the payment, and your card details go directly to it. We only receive information on whether the payment went through. Legal basis: to perform the contract. The provider may also process data for its own purposes, such as preventing fraud, and its own privacy notice applies to that.
• Delivery. The carrier and the pickup point receive your name, address, phone number and email address so that they can deliver the parcel and notify you. Legal basis: to perform the contract.
• Returns, withdrawals, complaints and questions. Your name, your order number, your email address and what you write to us, by email, through the contact form or in the returns portal. We use them to handle your matter. Legal basis: to perform the contract, to meet our obligations under consumer law, and our legitimate interest in resolving matters properly.
• Notify me. If you ask to be notified when an item is in stock or released, we use your email address and the item you chose to send you that email. Legal basis: to take steps at your request before a contract is concluded.
• Accounting. Orders and payments are part of our accounts. Legal basis: our legal obligation under the Swedish Bookkeeping Act.

When you visit the shop

• Our shop platform. The shop runs on the e-commerce platform QuickButik, which delivers the pages and therefore receives your IP address and information about your browser. QuickButik's network provider Cloudflare delivers the pages and measures page loads and loading times, without cookies.
• Visit counter. QuickButik counts the visits to our shop for our statistics. For this, a random identifier for your browser tab is stored in your browser for as long as the tab is open, and the address and title of the page, the website you came from (if it was another site) and that identifier are sent to QuickButik. This happens for every visitor.
• Fonts. The shop's fonts are loaded from Google Fonts. Your browser then connects to Google, which receives your IP address and information about your browser.
• Our own server. Some files, such as the order in which products are listed and the data for the search, are loaded from our own server at cdn.bangerpack.com, hosted by Oracle in Stockholm. The server keeps a log of requests with the time, a shortened IP address (only its first half) and information about the browser. Older entries are deleted automatically as the log fills up.
• Contact page. The contact form is protected against spam by Google reCAPTCHA. When you open the contact page, Google receives your IP address, information about your browser and how you use the page, and stores some information in your browser (see Cookies). Google's own privacy policy applies to Google's processing.

Legal basis: our legitimate interest in running a shop that works, loads quickly and is protected against abuse, and in knowing how many people visit it.

Newsletter

You can sign up for our newsletter about new releases, restocks and member prices in the forms in the shop and on the page you see after an order. Nothing is ticked in advance. You are only signed up once you have clicked the link in the confirmation email we send you, and if you do not click it, you will not receive any newsletters.

• What we process. Your email address, the list you signed up for and its language, and as proof of your consent: the time and IP address of your sign-up and of your confirmation, the page you signed up on and the version of the consent text you were shown.
• Legal basis. Your consent. You can withdraw it at any time with the unsubscribe link in every newsletter or by emailing us. Withdrawing does not affect emails sent before.
• Newsletter service. The confirmation email and the newsletters are sent through Get a Newsletter (Get a Newsletter Scandinavia AB, Sweden), which processes the data on our behalf within the EU and records whether an email is opened and which links are clicked, so that we can see what our subscribers are interested in.

Statistics (Google Analytics)

We use Google Analytics to see how the shop is used. What happens depends on your answer in the cookie banner.

• Before you have answered. The visit is measured without cookies and without anything being stored in your browser. Google receives the address of the page, your screen size, language, browser and IP address, with a new identifier for every page view, so your visit cannot be followed from page to page. Legal basis: our legitimate interest in knowing how many visit the shop and what they look at.
• If you say yes to statistics. Google Analytics uses cookies that recognise your browser between visits. Legal basis: your consent.
• If you say no. Google Analytics is not loaded at all, and any Google Analytics cookies from an earlier yes are deleted.

Google keeps the detailed event data for two months and data linked to a browser for 14 months after that browser's last visit. Google signals, which links data to signed-in Google accounts, is turned off, and the statistics are not linked to any advertising account.

Advertising

We do not use advertising tags or marketing cookies on bangerpack.com.

Who receives your data

• QuickButik, our e-commerce platform, which runs the shop, the checkout and the returns portal.
• The payment service provider that handles your payment.
• The carrier and the pickup point that deliver your parcel.
• Google, which hosts our email and provides Google Analytics, Google Fonts and reCAPTCHA.
• Cloudflare, which delivers the shop's pages on behalf of QuickButik.
• Oracle, which hosts our server for cdn.bangerpack.com in Stockholm, where newsletter sign-ups and the proof of consent are also handled.
• Get a Newsletter, which sends our newsletters, if you have signed up for them.
• Authorities, when the law requires it.

Providers that process data on our behalf do so according to our instructions. We never sell your data.

Transfers outside the EU

Google and Cloudflare are based in the USA and may process data there. Such transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, for companies certified under it, or on the European Commission's standard contractual clauses.

How long we keep your data

• Orders and accounting records: seven years after the end of the financial year, as the Swedish Bookkeeping Act requires.
• Returns, complaints and other matters: while the matter is ongoing and after that for as long as a complaint about the item can be made, which under Swedish law is three years from delivery.
• Notify me: until the notification has been sent, or until you ask us to delete it.
• Newsletter: until you unsubscribe. A sign-up that has not been confirmed within 30 days is deleted. The proof of your consent is kept for three years after you unsubscribe, so that we can show that you had agreed.
• Statistics: as described under Statistics above. How long each cookie is kept is listed on the Cookies page.
• Data we process with your consent: until you withdraw your consent.

Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict the processing and to receive your data in a machine-readable format (data portability). You can object at any time to processing that is based on our legitimate interests. Where we process data with your consent, you can withdraw your consent at any time; this does not affect processing that took place before. How to change your answer in the cookie banner is explained on the Cookies page.

Contact us at [email protected] to use your rights. If you are not satisfied with how we process your data, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or to the data protection authority in the EU country where you live or work. The authorities are listed by the European Data Protection Board.

Automated decisions

We do not make decisions about you based solely on automated processing.

Cookies

Which cookies and other browser storage the shop uses, and how you control them, is described on the Cookies page.

Chat (Chase)

The shop has a chat where you can ask Chase questions. Chase is an AI assistant, not a person. The answers are produced by an AI service based on our range, our terms and conditions and the shop's own pages.

When you use the chat, we process what you write, which page you are on, and your email address and order number if you give them. We also process your IP address to protect the chat against misuse, for example repeated attempts to look up orders.

• Answering your questions and helping you shop — to take steps you ask for before a purchase and to perform the contract of sale.
• Showing your order when you give the order number and the email address you ordered with — to perform the contract of sale.
• Sending your request to our customer service — to perform the contract of sale, and our and your legitimate interest in having the matter resolved.
• Improving the answers and protecting the chat against misuse — our legitimate interest. We read conversations to correct mistakes in the answers. The AI service also reviews finished conversations and assesses whether Chase was helpful, and every night the answers our answer check stopped. It is Chase's answers that are assessed, not you as a customer.

The chat runs on a server at Oracle in Stockholm. The answers are produced by the AI service Claude from Anthropic, emails from the chat are sent through the email service Resend, and requests and replies end up in our email at Google. All four process the data on our behalf as processors. Anthropic does not use the messages to train its models and deletes them within 30 days. If a conversation breaks Anthropic's usage policies, it may be kept for up to two years. Anthropic, Resend and Google may process the data in the USA, and the transfer takes place under the European Commission's standard contractual clauses.

We keep conversations for twelve months. We keep a request for as long as it is ongoing and then for at most three years, because you have three years to complain about a faulty item. IP addresses in our protection logs are deleted after 30 days.

So that the chat remembers the conversation when you change page, the conversation, together with any email address and order number you have written, is stored in your browser for as long as the visit lasts. This only happens once you use the chat. When you close the tab it disappears, and the Forget the conversation button removes it straight away. With us, the conversation is kept according to the retention periods above.

The chat may sometimes ask a question, for example when you have been reading about an item for a long time or are about to leave the page. This is worked out in your browser. We count how often the question is shown and used, without storing anything about you or your browser, and not at all if you have said no to statistics in the cookie banner.