Privacy policy

Privacy policy

We at i-nika Superfoods AB (”Inika”, “we ”, ”our” and ”us”) are a Swedish company believing that fueling your body with natural, convenient and earth friendly food is fundamental to live your best life. That’s why our promise to you is just that – functional food brimming with health boosting superfoods with low planetary impact, ready to be enjoyed anywhere in no time.

We at Inika care about your privacy and want you to feel safe when we process your personal data.

With this privacy policy, we want to provide information of our processing of personal data to you when you:

• communicate with us,
• visit our website or social media,
• purchase our products or make a subscription on our products, or
• subscribe to our newsletter.

Below you can find information on how and why we process your personal data, the lawful basis for our processing and the storage period for which we keep your personal data. The information also describes your rights. Your rights are the right to access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to withdraw your consent and the right to lodge a complaint with a supervisory authority. A detailed description of your rights is set out below. Our goal is to be as transparent as possible regarding our processing of your personal data.

In short: Why do we process your personal data?

• If you interact with us without making a purchase, e.g. via our social media, we process your personal data to e.g. communicate and share your posts on social media
• If you visit our website or social media, we process your personal data to analyse how you use the website and show you relevant marketing
• If you make a purchase or agree to a subscription, we process your personal data to e.g.:
• administrate your purchase or subscription,
• provide customer service and track your order,
• send relevant offers and information before, during and after your purchase (newsletters),
• publish customer reviews, and
• comply with legal requirements such as bookkeeping legislation
• If you subscribe to our newsletters, your personal data will be processed to send newsletters to you and analyse how our newsletters are used to improve and develop them
• If you make a complaint or withdraw your purchase/subscription or we have a discussion regarding your purchase, we process your personal data to handle the complaint, claim or withdrawal

A detailed description of our processing of your personal data is set out in the different sections below. By clicking on the links above you can read more about each specific scenario.

In this Policy, you can read more about the following:

Inika is responsible for the processing of your personal data

Which personal data do you need to share with us?

What are your rights when we process your personal data?

Balancing of interests assessments when processing personal data based on the lawful basis “legitimate interests”

How do we process your personal data?

Who can gain access to your personal data and why?

Where are your personal data being processed?

Inika is responsible for processing of your personal data

i-nika Superfoods AB, a Swedish company with company registration number 559263-7887, is responsible for the processing of your personal data as controller when you share your personal data with us.

Should you have any questions regarding our processing of your personal data, or if you wish to exercise any of your rights under data protection legislation, please contact us via our e-mail address privacy@inikasuperfoods.com . Our postal address is Biblioteksgatan 11, 111 46, Stockholm, Sweden.

Which personal data do you need to share with us?

In general, you are not required to provide any of your personal data to us. However, if you want to purchase or make a subscription to our products, we need some of your personal data in order to administrate your purchase or subscription and to comply with legislation or other statutory requirements.

You will find a description of the scenarios when you need to provide your personal data to us and what personal data you need to provide in the tables below where the lawful basis is ”Performance of contract” or ”Legal obligation”. If you do not provide your personal data to us in such scenarios, you will for example not be able to make a purchase.

What are your rights when we process your personal data? Detailed description

You have certain rights that you can exercise to affect how we process your personal data. You can read a more detailed description about what those rights are below.

If you want to know more about your rights or if you want to exercise any of your rights, please contact us and we will help you. Our contact information can be found at the beginning of this privacy policy.

Right to access (Article 15 GDPR)

You have the right to obtain confirmation as to whether we are processing personal data about you or not. If we do process your personal data, you also have a right to obtain a copy of the personal data processed by us as well as information about:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• where the personal data are not collected from you, any available information as to their source;
• the existence of automated decision-making, including profiling, referred to in Article 22.1 and 22.4 GDPR; or
• where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

You also have the right to be provided one copy of the personal data undergoing processing. For any further copies requested by you, we may charge a reasonable fee based on administrative costs. If you have made the request by electronic means the information will be provided to you in a commonly used electronic form, unless otherwise requested by you.

You can make a request by contacting us by our contact information can be found at the beginning of this privacy policy.

Right to rectification (Article 16 GDPR)

You have a right to obtain, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including be means of providing a supplementary statement.

We will notify each recipient to whom the personal data has been provided to of any correction that has been made, unless this turns out to be impossible or entails a disproportionate effort. If you want information about these recipients, you are welcome to contact us. You will find our contact information at the beginning of this privacy policy.

Right to erasure (“the right to be forgotten”) (Article 17 GDPR)

You shall have the right to obtain from us the erasure of your personal data without undue delay and we have the obligation to erase your personal data without undue delay where one of the following grounds applies:

• the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you withdraw your consent on (according to Article 6.1 a) and where there is no other legal ground for the processing;
• you object to the processing pursuant to Article 21.1GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21.2 GDPR;
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law which that applies to us; or
• your personal data have been collected in relation to the offer of information society services referred to in Article 8.1GDPR.

If we have made the personal data public and is obliged pursuant to erase the personal data according to above, we, taking account of available technology and the cost of implementation, shall take the reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication, those personal data.

Note that our obligation to erase and inform according to above shall not apply to the extent that processing is necessary according to the following reasons:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing by Union or Member State law which applies to us or for the performance of a task carried out in the public interests or in the exercise of official authority vested by us;

for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right to erasure is likely to render impossible; or

• for the establishment, exercise or defence of legal claims.

We erase your personal data at your request, if we do not have an obligation to store personal data in accordance with applicable laws and regulations.

We will notify each recipient to whom the personal data has been provided to about any erasure according to above, if this do not occur to be impossible or entails a disproportionate effort. If you want more information about these recipients, you are welcome to contacts us. You will find our contact information at the beginning of this privacy policy.

Right to restriction of processing (Article 18 GDPR)

You have the right to obtain from us restriction of processing if:

• the accuracy of the personal data is contested by you (thus only during a period enabling us to verify the accuracy of this);
• the processing is unlawful, and you oppose the erasure of the personal data and requests the restriction of their use;
• you need the personal data for the establishment, exercise or defence of legal claims even though we no longer need the personal data for the purposes of the processing; or
• you have objected to processing pursuant to Article 21.1GDPR pending the verification whether our legitimate grounds override yours.

Where the processing has been restricted according to above, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence or legal claims of for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. We will notify you before the restriction of the processing end.

We will notify each recipient to whom the personal data has been provided to about any restriction of processing according to above, if this do not occur to be impossible or entails a disproportionate effort. If you want more information about these recipients, you are welcome to contacts us. You will find our contact information at the beginning of this privacy policy.

Right to data portability (Article 20 GDPR)

You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and, where technically feasible, have your personal data transferred to another company (“data portability”). This applies to personal data that you have provided to us in a structured, commonly used and machine-readable format, if our processing of your personal data is based on the lawful basis consent (Article 6.1 a) or contract (Article 6.1 b) GDPR) and the processing is carried out by automated means.

The exercise of the right to data portability shall not be without prejudice to Article 17 GDPR. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested by us.

Your right to data portability shall not adversely affect the rights and freedoms of others.

Right to withdraw consent (Article 7.3 GDPR)

You have the right to withdraw your consent at any time, which you have given to one of our processing’s based on the legal ground consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority (without prejudice to any other administrative or judicial remedy), in particular in the EU/EEA member state of your habitual residence, place of work or place of the where the alleged infringement of applicable data protection laws has allegedly occurred.

Balancing of interests assessments when processing personal data based on the lawful basis “legitimate interests”

As we state above, for some purposes, we process your personal data based on our “legitimate interest”. By carrying out a balancing of interests assessment concerning our processing of your personal data, we have concluded that our legitimate interest for the processing outweighs your interests or rights which require the protection of your personal data.

If you want more information in relation to our balancing of interests assessments, please do not hesitate to contact us. Our contact information can be found at the beginning of this privacy policy.

Detailed description about how we process your personal data

How do we process your personal data?

You can read more about how we process your personal data in the tables below. As we are legally required to provide some of the information to you, the text is extensive and may be perceived as difficult to understand. If you have any questions regarding the information set out herein, do not hesitate to contact us.

The below tables describe in detail (i) when we process your personal data (ii), what kind of data we process, (ii) why we process your personal data, (iv) how long we will process your personal data and (v) the lawful basis for the processing. The lawful basis is the basis for processing your personal data according to the GDPR.

If you interact with us without making a purchase, e.g. our social media

If you are in contact with us before you make a purchase or agree to a subscription, e.g. by sending us an e-mail or sending us a message via our social media, we will process your personal data as described in the tables below. We process the personal data that you provide to us and information from your social media account (if you use such account to communicate with us).

When contacting us through a social media platform, we suggest that you also read the privacy information of that platform.

To communicate with you

Storage period: We will delete your personal data upon your request.

• If you chat with us via Instagram Direct Messenger or via Facebook Messenger, your personal data will be deleted upon your request, unless you choose to continue to communicate with us by e.g. entering your e-mail address.
• If you contact us via e-mail, your personal data will be stored in order for us to give you the best possible service, unless you request that we delete it after the matter has been solved.
• Your communication with us on social media (e.g. comments) can be deleted by you at any time. We will remove posts or comments which are in breach of the rules of the platform or in conflict with applicable legislation as soon as possible.

To share your posts on social media

Storage period: Your posts will be shared on our social media until we delete the post or you ask us to remove it.

If you visit our website or social media

We analyse how our website is used and provide you with relevant marketing on other websites you visit based on such analysis. This means that your personal data is processed when you visit our website. To protect your privacy, we have taken measures to avoid identifying you when you visit our website. For instance, we only process an encrypted version of your IP-address.

When you visit our website, we will gather your personal data from the device you are using to visit our website and from the companies we collaborate with (see below). Such companies will also use previous information they have about you to show you interesting offers from us.

When you use our website, we will gather personal data by using cookies. If you would like to know how we do this, it is described in our Cookie Policy which you can find here.

To analyse how our website is used

Storage period: We will store your personal data for a period of 180 days.

Google will continue to store your personal data for their own purposes and Google will inform you separately about such storing.

To show you relevant marketing online from us

Storage period: You will see marketing from us for a maximum period of 180 days after your visit to our website.

Google (including YouTube) and Facebook (including Instagram) will continue to process your personal data as independent controllers. Information on how long they store your personal data can be found in their respective privacy information.

* Profiling: We use so called profiling to be able to show you offers that are relevant to you and to provide you with customized marketing. We use profiling because without it, you would instead see offers and information which you are probably not interested in. You have the right to object to profiling as described below under the section explaining your rights.

If you make a purchase or agree to a subscription

When you make a purchase or agree to a subscription, we will process your personal data as described below. Such personal data is collected directly from you. We use Shopify as a provider of payment providers. We will share your personal data with Shopify and the payment provider that you have chosen. For a full list of our payment providers see here . The payment provider you have chosen will also process your personal data for its own account.

To administrate and enable your purchase

Storage period : We will store the personal data during the purchase process and thereafter for a relevant period of time. In case of a claim, dispute or similar we need to store some of your personal data for a longer period according to what is stated below.

Your order and payment information will be stored for a longer period to comply with bookkeeping legislation.

In addition to the above, your personal data will also be processed by Shopify and Shopify’s payment suppliers to manage your payment. Shopify and Shopify’s payment suppliers are controllers of such processing of your personal data and will give you separate information regarding their use of personal data.

To administrate and enable your subscription

Storage period : We will store the personal data during the period for your subscription and thereafter for a period of 24 months after the subscription is terminated. In case of a claim, dispute or similar we need to store some of your personal data for a longer period according to what is stated below.

Your order and payment information will be stored for a longer period to comply with bookkeeping legislation.

In addition to the above, your personal data will also be processed by Shopify and Shopify’s payment suppliers to manage your payment. Shopify and Shopify’s payment suppliers are controllers of such processing of your personal data and will give you separate information regarding their use of personal data.

To provide customer service and track your order

Storage period: We will delete your personal data upon your request after your customer service matter has been solved.

To publish customer reviews

Storage period: We will send a request for you to submit a customer review after your purchase. We will stop sending requests if you object to receiving such e-mails. If you choose to submit a review, we will remove your review from our website and delete your personal data until you ask us to delete your review.

To comply with bookkeeping and accounting legislation

Storage period: We will store any document constituting bookkeeping material and personal data included until the end of the seventh (7) financial year according to Swedish bookkeeping and accounting legislation. The regulation means that we store bookkeeping material until and including the seventh year after the end of the calendar year for the fiscal year to which the personal data relates.

If you subscribe to our newsletters

The chart below describes how we process your personal data if you subscribe to our newsletters. We gather your personal data directly from you and provide some personal data ourselves by analysing how you use our newsletters.

To send newsletters

Storage period: You can choose to unsubscribe or object to receiving newsletters and marketing at any time. If you object to receiving marketing from us, we keep track of this in our “unsubscribe-list” to avoid sending you any further marketing material.

If you have objected to receiving marketing from us

We will store information about you who have objected to receiving marketing from us. We have received the personal data from you.

To comply with marketing legislation

Storage period: You will be listed in our “unsubscribe-list” until further notice.

If you make a complaint or withdraw your purchase/subscription or we have a discussion regarding your purchase

We do everything we can to please our customers and as a result rarely receive complaints, but should you want to make a complaint, withdraw your purchase or discuss your purchase, we will process your personal data as described below. We will collect your personal data from you or provide the information ourselves.

Note that the ongoing claim or right may mean that we cannot delete all your personal data after your request.

To handle any withdrawals, complaints or claims

Storage period: We will store your personal data from the time the complaint or claim was initiated and for the duration of such complaint or claim.

Who can gain access to your personal data and why?

Your personal data is initially collected and processed by us and we do not sell your personal data. This means that your personal data will be handled by our employees, but only personnel who need such access to conduct their work.

To conduct our business, we need to work with suppliers and partners who will process your personal data. We are responsible for any sharing of your personal data and to make sure your personal data is safe when shared with third parties as set out below.

We will share your personal data with our data processor. A processor processes data only on our behalf, which means that we are still responsible for the data they are processing. We share your personal data with the following categories of processors:

• We will share your personal data with the third party that provides a system for and helps us administrate our performance, ecommerce and email marketing.
• We will share your personal data with our IT suppliers , e.g. for web development and hosting, who will process the personal data on our behalf and on our instructions to ensure good and secure IT operations. We only share your personal data with our IT suppliers if it is necessary for them to fulfil their obligations towards us according to the contract that we have with them. If you only use our social media platforms or visit our website, we will not share your personal data with our IT suppliers.
• We will share your personal data with our email provider, Klaviyo Inc.
• If you choose to submit a review of the product that you have purchased from us, we will share your personal data with the company that provides a service to administrate customer reviews.
• If you make a purchase or agree to a subscription, we will share your data with Warehouse and 3PI which helps us with logistics and warehouse management.

We also share your data with other controllers, who are responsible for processing your data. The other controllers are:

• If you interact with us or visit our social media accounts, the social media platform that you use will process personal data about you as a user.
• When you use our website and consent to us doing so, we will also share your personal data with:
• Google , which provide the service to analyse the website , and
• The companies which provide the marketing services we use ( Google (including YouTube), and Facebook (including Instagram).
• When you make a purchase or agree to a subscription, Shopify and Shopify’s payment suppliers, will process your personal data to carry out your payment. Shopify and Shopify’s payment suppliers acts as controller in relation to all such processing and will inform you separately about how Shopify and Shopify’s payment suppliers processes your personal data. If you choose to pay by invoice, your personal data may be shared with a company assessing your financial situation. For a full list of payment suppliers klick here
• If you make a purchase or agree to a subscription of a product that we deliver to you, the company that transports your product will process your personal data to make the delivery.

If you have any questions regarding how we share your personal data or want to know more about who we share your personal data with, please feel free to contact us .

Where are your personal data processed?

We only process your personal data within the EU/EEA. In some instances our co-operation partners such as Google and Facebook may transfer your personal data outside the EU/EEA. However, such transfer only takes place in accordance with applicable data protection legislation meaning that we will transfer your personal data outside the EU/EEA when we can ensure an appropriate level of protection of your personal data. We will transfer your personal data under the Standard contractual clauses (article 46.1 c) GDPR together with supplementary measures. You can find the Standard contractual clauses here .

If you want to know more about what safeguards we implement for transfers of personal data or receive a copy of the safeguards you are always very welcome to contact us. Our contact information can be found at the beginning of this privacy policy.

This privacy policy was adopted by i-nika Superfoods AB on 2022.04.18.