Privacy Policy

Last updated: 27 July 2026

Fjornrunning.com is operated by FA Group Sverige AB (company registration number 559472-7066), which provides this website and related information, content, features, tools, products and services (the "Services"). Fjornrunning.com uses Shopify as its e-commerce platform. This privacy policy describes how we collect, use and share your personal data when you visit, use or make a purchase through the Services, or otherwise communicate with us. In the event of a conflict between our terms of use and this privacy policy, this privacy policy governs the processing of personal data.

Please read this privacy policy carefully. By using the Services you confirm that you have read and understood how your data is collected, used and shared under this policy.

Data controller: FA Group Sverige AB, company registration number 559472-7066, is the controller of the personal data processed through the Services.

Personal data we collect

By "personal data" we mean information that identifies, or can reasonably be linked to, you or another person. This does not include information collected anonymously or de-identified so that it can no longer be linked to you. We may collect or process the following categories of personal data, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details, including name, address, billing address, delivery address, telephone number and email address.
• Financial information, including card and account details, transaction details, payment method, payment confirmation and other payment data.
• Account information, including username, password, security questions, settings and preferences.
• Transaction information, including products you view, add to a basket or wishlist, buy, return, exchange or cancel, and your purchase history.
• Communications with us, including information you share when contacting customer service.
• Device information, including information about your device, browser or network connection, IP address and other unique identifiers.
• Usage information, including information about how and when you interact with the Services.

Where we collect personal data from

• Directly from you, for example when you create an account, use the Services, communicate with us or otherwise provide personal data.
• Automatically through the Services, for example from your device when you use our products and services, and through cookies and similar technology.
• From our suppliers, for example when they process personal data on our behalf.
• From our partners or other third parties.

How we use your personal data, and our legal basis

We process your personal data for the purposes set out below. Each purpose has a stated legal basis under the GDPR:

Purpose	Examples	Legal basis
Providing, tailoring and improving the Services	Handling orders, payments, deliveries, returns and exchanges; account administration	Performance of a contract (Art. 6(1)(b))
Marketing and advertising	Email, SMS, targeted advertising	Consent (Art. 6(1)(a)), where required under Swedish marketing law
Security and fraud prevention	Authentication, detecting fraudulent or unlawful activity	Legitimate interests (Art. 6(1)(f))
Communicating with you	Customer service, support	Performance of a contract (Art. 6(1)(b))
Legal compliance	Accounting, responding to requests from authorities, legal claims	Legal obligation (Art. 6(1)(c))

Cookies and similar technology

We use cookies and similar tracking technology to operate the website, remember your preferences, analyse traffic and display relevant marketing, including through Meta (Facebook/Instagram), Google Ads and TikTok. Non-essential cookies (for example for marketing and analytics) are set only with your active consent, which you can give or refuse through our cookie banner when you visit the website. You can change your choices at any time in your browser settings or through our cookie banner.

How we share personal data

In certain cases we may share your personal data with third parties for legitimate purposes under this policy, for example:

• With Shopify, suppliers and other third parties that perform services for us (for example IT operations, payment processing, data analysis, customer service, cloud storage, order handling and delivery).
• With business and marketing partners (for example Meta, Google, TikTok) in order to display relevant advertising, to the extent you have consented to this.
• When you request, consent to or direct us to share certain information with a third party, for example for delivery.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your use of the Services in order to provide and improve them. Information you provide to us is shared with Shopify and with any third parties that may be located in countries other than the one you live in. Shopify may also use certain information to offer particular shared functionality ("enhanced features") based on interaction with our store together with other merchants on the platform. In those cases Shopify is an independent data controller for that processing. Read more in Shopify's privacy policy for consumers.

Third-party websites and links

The Services may contain links to websites or platforms operated by third parties. If you follow such links you should review their own privacy and security policies. We are not responsible for the content, privacy practices or security of such external sites.

Children and minors

The Services are not directed at, and are not intended to be used by, anyone under the age of 18. Under the Swedish Contracts Act (1915:218) you must be of age (18) or have the consent of a guardian in order to enter into a binding agreement, including a purchase agreement through our website. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided personal data to us, contact us and we will delete it.

Security and retention of your data

No security measure is entirely free of risk, and we cannot guarantee complete security. Information sent to us may be insecure in transit — avoid sending sensitive information through insecure channels.

We retain personal data for as long as is necessary for each purpose, as follows:

• Accounting records (invoices, receipts, transaction data linked to purchases): 7 years, in accordance with the Swedish Accounting Act (1999:1078).
• Account details: for as long as you have an active account with us, plus a reasonable period afterwards in order to handle any disputes.
• Marketing consent (for example an email list): until you withdraw your consent or unsubscribe.
• Customer service cases: up to 24 months after the case is closed, for follow-up and quality assurance.
• Cookies and tracking data: according to the time limits set out in the policies of the respective third-party tools (Meta, Google, TikTok).

Your rights and choices

Depending on where you live, you may have the following rights in relation to your personal data:

• Right of access — to request access to the personal data we hold about you.
• Right to erasure — to request that we delete your personal data.
• Right to rectification — to request that we correct inaccurate personal data.
• Right to data portability — to receive a copy of your data, or request that we transfer it to a third party, in certain cases.
• Managing communication preferences — we send marketing emails only if you have actively consented to them (opt-in), for example through a voluntary checkbox at checkout or when signing up to a newsletter. You can unsubscribe at any time through the link in our emails. Even after unsubscribing we may continue to send non-marketing emails, such as order confirmations.

If you are resident in the EU/EEA or the United Kingdom, you also have the right to:

• Object to or restrict processing for certain purposes.
• Withdraw consent — this does not affect the lawfulness of processing carried out before the withdrawal.

You can exercise these rights by contacting us using the details below. We may need to verify your identity before we act on your request. You may also appoint a representative to act on your behalf, provided that the representative can demonstrate their authority.

Complaints

If you have a complaint about how we process your personal data, contact us using the details below. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the competent supervisory authority in Sweden: imy.se.

International transfers

We may transfer, store and process your personal data outside the country in which you live. Where data is transferred outside the EU/EEA or the United Kingdom, we use recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses (SCCs), unless the receiving country has already been assessed as providing an adequate level of protection.

Changes to this policy

We may update this privacy policy from time to time, for example following a change in practice or for legal or regulatory reasons. An updated version will be published on the website with a new date under "Last updated".

Contact

If you have questions about our privacy policy, or wish to exercise your rights, contact us:

FA Group Sverige AB
Company registration number: 559472-7066
Email: info@fjornrunning.com

FA Group Sverige AB is the controller of the personal data processed in accordance with this policy.