Privacy Policy
Last updated: April 9, 2025
This Privacy Policy describes how Hickap AB (“the site”, “we”, “us”, or “our”) collects, uses, and shares your personal data when you visit or make a purchase from hickap.com (“the site”) or otherwise interact with us through our services (collectively referred to as “the services”).
By using the services, you agree to the practices described in this Privacy Policy. We recommend that you read it carefully.
Changes
We may update this Privacy Policy from time to time to reflect, for example, changes in our practices or for other operational, legal, or regulatory reasons. When we do, we will update the “Last updated” date above and post the updated policy on the site.
Collection of Personal Data
To provide our services, we collect personal data about you from various sources, depending on how you interact with us.
Personal data you provide to us:
-
Contact details, such as name, address, email address, and phone number.
-
Order information, including shipping address, billing address, payment details (processed by our payment providers), purchase history, and communication related to orders.
-
Account information, if you create an account.
-
Customer service data, such as the content of messages you send to us.
-
Loyalty data, such as points, gift cards, and referrals.
-
Reviews and other user-generated content.
Information collected automatically:
When you visit the site, we automatically collect certain information, such as:
-
Device and browser information, including IP address, device type, and browser type.
-
Usage data, such as pages you visit, time on page, clicks, and how you interact with our services.
-
Cookies and similar technologies, such as pixels and SDKs, are used to collect usage data (see below for more information).
Information from third parties:
We also receive information from third-party services we work with, including:
-
Shopify (platform)
-
Klaviyo (email and marketing)
-
Meta, Google, TikTok, and Snapchat (advertising and tracking)
-
Hotjar (behavior analysis)
-
Payment providers (for payment processing)
-
Distribution partners (for delivery)
All information we receive from third parties is processed in accordance with this policy.
Use of Personal Data
We use your personal data to:
-
Provide products and services
-
Manage payments, deliveries, returns, and customer support
-
Communicate with you about your account or purchases
-
Send marketing communications (if you’ve consented)
-
Personalize ads and offers based on your activity
-
Conduct analytics and improve our services
-
Prevent fraud and ensure security
Legal basis under GDPR:
Depending on the purpose of the processing, we rely on:
-
Your consent (e.g., for cookies and newsletters)
-
Contractual obligations (e.g., order processing)
-
Our legitimate interest (e.g., improving services and fraud protection)
When we process data based on legitimate interest, we perform a balancing test.
Cookies and Tracking Technologies
We use cookies, pixels, and similar technologies to:
-
Enable basic functionality on the site
-
Understand how visitors use our site
-
Personalize content and ads
We use third-party tools such as Google Analytics, Meta Pixel, Klaviyo, TikTok Pixel, Snapchat Pixel, and Hotjar.
Consent to Cookies
We use Cookiebot to manage consent in accordance with GDPR. When you visit our site, a cookie banner appears allowing you to consent to (or reject) different categories of cookies.
Cookies that are not strictly necessary are only activated if you give your consent.
Cookiebot logs your consent (or refusal) in compliance with GDPR requirements.
You can change or withdraw your consent at any time via the cookie settings at the bottom of our website.
Sharing of Personal Data
We share your data with:
-
Vendors and service providers who help us deliver the services (e.g., Shopify, Klarna, PostNord)
-
Marketing and analytics services (e.g., Meta, Klaviyo, Google, TikTok)
-
Authorities when required by law
-
Other parties, if you give us consent
We do not sell your personal data.
International Transfers
We may transfer your data outside the EU/EEA (e.g., to the US) if any of our providers are based there. Such transfers are conducted using:
-
The EU Commission’s Standard Contractual Clauses, or
-
Transfers to countries with an approved adequate level of protection
Data Retention
We retain your personal data as long as necessary to:
-
Provide our services
-
Comply with applicable laws (e.g., accounting)
-
Protect our rights and manage legal claims
After this, the data is securely deleted or anonymized.
Your Rights
You have the right to:
-
Request access to your personal data
-
Correct inaccurate data
-
Request deletion of data
-
Object to or restrict certain processing
-
Withdraw consent at any time
-
Receive your data in a portable format
-
File complaints with a supervisory authority
In Sweden, this is the Swedish Authority for Privacy Protection (IMY): www.imy.se
To exercise your rights, contact us at info@hickap.com.
Children’s Personal Data
Our services are not directed to children under 13 years of age. We do not knowingly collect data from children without parental consent. If you believe we have collected information about a child, please contact us so we can delete the data.
Contact
For questions about this Privacy Policy or how we handle personal data, contact us at:
Hickap AB
Sankt Eriksgatan 119
113 43 Stockholm, Sweden
📧 info@hickap.com