Privacy Policy

1. Who we are (data controller)

The controller responsible for your personal data is Caalam Digital Solutions AB (org. no. 559489-5954), Kummingatan 7, 424 43 Göteborg, Sweden. For any privacy question or to exercise your rights, contact us at support@secrethairvitamins.com.

2. What we collect

• Order & contact details — name, email, shipping address, and order contents.
• Payment data — processed directly by our payment provider (Stripe). We never see or store your full card number.
• Technical data — IP address, device/browser type, and basic usage data needed to run the site securely.
• Support chat messages — if you message our help assistant, we process and retain the conversation to answer your enquiry and improve our support.

3. Why we process it & legal basis

• To fulfil your order (process payment, ship, support) — performance of a contract (GDPR Art. 6(1)(b)).
• To send order confirmations & service emails — performance of a contract.
• To meet accounting/tax obligations — legal obligation (Art. 6(1)(c)).
• To secure and improve the site — our legitimate interest (Art. 6(1)(f)).
• Marketing emails, if any — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Who we share it with (processors)

We share data only with service providers that help us run the store, under data-processing agreements:

• Stripe — payment processing.
• Resend — sending transactional order emails.
• Vercel — website hosting, infrastructure and cookieless web analytics.
• Meta Platforms Ireland Ltd — the Meta (Facebook/Instagram) advertising pixel and Conversions API, loaded only with your consent. Meta acts as an independent controller for its own purposes.
• TikTok Information Technologies UK Ltd — the TikTok advertising pixel and Events API, loaded only with your consent.
• Microsoft Ireland Operations Ltd — Microsoft Clarity analytics (usage statistics and heatmaps), loaded only with your consent.
• Shipping/fulfilment partners — to deliver your order.

Some providers may process data outside the EU/EEA; where they do, transfers are protected by EU Standard Contractual Clauses or an equivalent safeguard. We never sell your personal data.

5. How long we keep it

Order and invoicing records are kept for as long as required by the accounting and tax laws that apply to our business. Other data is kept only as long as needed for the purpose it was collected for, then deleted or anonymised.

6. Cookies & tracking

Strictly-necessary cookies that operate checkout and keep the site secure are always active. Analytics and marketing cookies load only after you accept them in our cookie banner; you can decline, and you can withdraw consent at any time by clearing the shv_consent cookie in your browser. The non-essential technologies we use, subject to your consent (Art. 6(1)(a)), are:

• Meta Pixel (cookies _fbp, _fbc) — measurement and marketing for Meta ads.
• TikTok Pixel (cookie _ttp) — measurement and marketing for TikTok ads.
• Microsoft Clarity — usage statistics, session replay and heatmaps to help us improve the site.

We also use Vercel Web Analytics, which is cookieless, does not use persistent identifiers, and does not track you across other sites.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing of your data, and to data portability. To exercise any of these, email support@secrethairvitamins.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).