Privacy Policy

1. Introduction and Data Controller Information

Welcome to Thakreondhak ("we," "us," "our," or the "Company"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://thakreondhak.world (the "Website") or purchase our products.

Data Controller Details

The data controller responsible for your personal data is:

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Swedish Data Protection Act (2018:218), and other applicable data protection laws.

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us and data that is automatically collected when you use our Website.

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number (optional), and mailing address
• Order Information: Details necessary to process and fulfill your orders
• Communication Data: Messages, inquiries, and correspondence you send to us
• Consent Records: Records of your consent to our Privacy Policy and marketing communications

2.2 Information Collected Automatically

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs
• Location Data: General geographic location based on IP address
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and legal bases under Article 6 of the GDPR:

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Order and Transaction Data: 7 years from the date of transaction (for tax and accounting purposes under Swedish law)
• Customer Account Data: Until you request deletion or 3 years after your last interaction with us
• Marketing Consent Records: Until consent is withdrawn, plus 1 year for record-keeping
• Cookie Data: As specified in our Cookie Policy
• Communication Records: 2 years from the date of communication
• Legal Claims: Personal data may be retained for the duration of any legal proceedings plus applicable limitation periods

After the retention period expires, your data will be securely deleted or anonymized.

5. Data Sharing and Recipients

We may share your personal data with the following categories of recipients:

5.1 Service Providers

• Payment Processors: To process your payments securely
• Shipping Partners: To deliver your orders
• Email Service Providers: To send transactional and marketing emails
• Hosting Providers: To host our Website and store data securely
• Analytics Providers: To analyze Website usage (with your consent)

5.2 Legal and Regulatory Authorities

We may disclose your data when required by law, court order, or to protect our legal rights.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

All third parties are contractually obligated to protect your data and process it only for specified purposes.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:

• Transfers to countries with an EU adequacy decision
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules where applicable
• Certification schemes such as the EU-U.S. Data Privacy Framework

You may request information about the safeguards in place by contacting us.

7. Your Rights Under GDPR

Under the GDPR and applicable Swedish law, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data.
• Right to Rectification (Art. 16): You have the right to correct inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): You have the right to request deletion of your personal data ("right to be forgotten") under certain circumstances.
• Right to Restriction (Art. 18): You have the right to restrict the processing of your personal data in certain situations.
• Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): You have the right to object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent (Art. 7): Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right Not to Be Subject to Automated Decision-Making (Art. 22): You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

To exercise any of these rights, please contact us at welcome@thakreondhak.world. We will respond within 30 days. In complex cases, this period may be extended by an additional 60 days, and we will inform you of any such extension.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• SSL/TLS encryption for all data transmitted to and from our Website
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel only
• Regular security assessments and vulnerability testing
• Employee training on data protection and security practices
• Incident response procedures for potential data breaches

While we strive to protect your personal data, no method of transmission over the Internet is completely secure. We encourage you to use strong passwords and protect your account credentials.

9. Children's Privacy

Our Website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will take steps to delete such information.

10. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data.

11. Complaints

If you believe that we have not complied with data protection laws, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY):

We encourage you to contact us first so we can address your concerns directly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a prominent notice on our Website or by sending you an email. We encourage you to review this page periodically for the latest information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: