Privacy Policy

    Your privacy. Our duty.

    We handle your personal data with respect and full transparency, in line with the GDPR and Swedish law. Last updated: May 2026.

    Controller

    PLÄNTLY AB

    Encrypted data

    HTTPS/TLS

    Response time

    24 hours

    Legislation

    GDPR + IMY

    1. Data controller

    PLÄNTLY AB

    Reg. no.: SE559400472201

    Vretensborgsvägen 5, 126 30 Hägersten, Sweden

    Email: hello@plaently.com

    Web: www.plaently.com

    We are the data controller for the personal data we collect about you when you visit our website, shop in our store or subscribe to our newsletter.

    2. What data we collect and why

    2.1 At purchase

    Name, email, delivery address, billing address, phone, order history. Card details are handled by a third-party provider — we store none.

    Legal basis: Performance of contract (GDPR art. 6.1 b)

    Retention: 7 years (Swedish Bookkeeping Act)

    2.2 Customer account

    Name, email, password (encrypted), order history.

    Legal basis: Performance of contract (GDPR art. 6.1 b)

    Retention: As long as the account is active

    2.3 Newsletter

    Email, date/time of consent, IP at signup.

    Legal basis: Consent (GDPR art. 6.1 a) — withdrawable anytime

    Retention: Until unsubscribe or deletion request

    2.4 Customer service

    Name, email, message.

    Legal basis: Legitimate interest (GDPR art. 6.1 f)

    Retention: 2 years after case closed

    3. How we use your data

    • Process and deliver your order
    • Send order confirmation and tracking
    • Handle returns, complaints and customer service
    • Send newsletters — only with your consent
    • Improve the website with anonymized analytics
    • Comply with legal obligations

    We never sell your data to third parties.

    4. Who we share data with

    Shipping partners

    PostNord Sverige AB and DHL Express (Sweden) AB. Name, delivery address and phone to fulfil delivery.

    Payments

    Klarna AB handles payments securely. We store no card details.

    Email & Analytics

    Email platform + Google Analytics for newsletters, transactional emails and anonymized web stats.

    All third parties are bound by data processing agreements and may not use your data for their own purposes.

    5. Transfer to third countries

    Some providers may store data outside the EU/EEA. We ensure appropriate safeguards via the EU Commission's Standard Contractual Clauses (SCC).

    6. Your rights

    Access (art. 15)

    Request a copy of your data

    Rectification (art. 16)

    Correction of inaccurate data

    Erasure (art. 17)

    ”Right to be forgotten”

    Restriction (art. 18)

    Restricted processing

    Portability (art. 20)

    Data in machine-readable format

    Objection (art. 21)

    Against processing based on legitimate interest

    Exercise your rights: email hello@plaently.com with the subject ”GDPR request”. We respond within 30 days.

    7. Complaints

    Swedish Authority for Privacy Protection (IMY)

    Box 8114, 104 20 Stockholm

    www.imy.se · imy@imy.se

    We hope you'll come to us first — we're happy to resolve any issues quickly.

    8. Cookies

    Necessary cookies

    Required for checkout and session handling. Cannot be disabled.

    Analytics cookies

    Anonymized statistics. Requires consent.

    Marketing cookies

    Ads on Meta and Google. Requires consent.

    Manage your preferences via the cookie banner at the bottom of the page.

    9. Security

    • All data traffic is encrypted with HTTPS/TLS
    • Card details are never handled by us — payment via certified providers
    • Access to personal data is restricted to relevant staff

    In case of a personal data breach, we report to IMY within 72 hours.

    10. Changes

    The current version is always available at plaently.com/privacy-policy. We notify of material changes via email.

    11. Contact

    PLÄNTLY AB · Reg. no. SE559400472201

    Vretensborgsvägen 5, 126 30 Hägersten

    hello@plaently.com

    www.plaently.com

    Prepared in accordance with the EU General Data Protection Regulation (GDPR), the Swedish Act (2022:482) on Electronic Communications and IMY's guidelines.