Privacy Policy
Last updated 1 September 2026.
This policy explains what personal data we collect when you use longevitygoods.com, why we collect it, how long we keep it and what you can do about it. It is written to be read, not to be survived.
Who is responsible for your data
The controller of your personal data is:
- Lovli Group AB
- Company registration number 559482-1091
- Västergatan 19, 434 30 Kungsbacka, Sweden
- Email: info@longevitygoods.com
Write to that address about anything in this policy, including the rights listed further down.
What we collect, and why
When you place an order
We collect your name, email address, delivery and billing address, phone number if you give one, and what you ordered. We need this to accept the order, deliver it, handle returns and keep the accounts.
The legal basis is performance of the contract with you. The parts we keep for accounting are kept because the law requires it.
We do not receive or store your full card details. Payment is handled by our payment provider, which processes the card data itself.
When you create an account
We store your email address, your name, an encrypted password, your saved addresses, your order history, your wishlist and — if you fill them in — a profile picture chosen from our own set of icons and a short presentation. The basis is the contract with you, and your consent for the parts you choose to add yourself.
If you sign in with Google we receive your name, your email address and your Google account identifier. We do not receive your Google password.
When you write to us
When you use the contact form or email us, we store your name, your email address, any order number you give and what you wrote, so that we can answer you and find the conversation again if you come back. The basis is our legitimate interest in answering the questions we are asked.
We do not store the IP address of contact form submissions. A short-lived, hashed record is used to stop the form being abused for spam, and it disappears after an hour.
When you browse the site
Our web host keeps standard server logs, which include IP addresses, for security and troubleshooting. Cookies are described in our cookie policy.
Analytics, only if you agree. If you accept analytics cookies in the banner, we use Google Analytics 4 (Google Ireland Limited) to see which pages are visited, where visitors come from and where they leave, so that we can improve the shop. IP addresses are shortened, and we do not use the data to identify you. The basis is your consent (GDPR art. 6(1)(a)); you can withdraw it at any time under “Cookie settings” at the bottom of every page, and until you accept nothing is loaded. We run no advertising pixels and no other tracking.
Purchase statistics, without cookies. When an order is paid, our server reports the purchase itself to Google Analytics — the order number, the amount, the currency and the products bought, but no name, no address and no other personal details. The report is sent from our server to Google’s: your browser is not involved, and no cookie is set or read. If you accepted analytics cookies, the report carries the same visitor identifier your browser already uses, so the purchase is counted once, not twice. If you did not, it carries a random identifier that cannot be connected to you or to any visit. The legal basis is our legitimate interest in knowing what the shop sells (GDPR art. 6(1)(f)); you can object at any time via the address below.
Who we share it with
We do not sell your personal data, and we do not share it for anyone else’s marketing. We do share it with the companies that make the shop work, and only with what they need:
- Our web host, which stores the site and its database.
- Our payment provider, which processes your payment.
- Carriers, which need your name, address and contact details to deliver the parcel.
- Our email provider, which sends order confirmations and replies.
- Google, for analytics — pseudonymous usage data if you have accepted analytics cookies, and purchase statistics without personal details for every paid order, as described above.
- Authorities, when the law requires us to.
These companies are processors acting on our instructions, under data processing agreements, except where they are controllers in their own right for their own part of the work — a payment provider is, for example.
Transfers outside the EU/EEA
We keep the data inside the EU/EEA wherever we can. If a supplier processes data outside it, the transfer is covered by the European Commission’s standard contractual clauses or another lawful mechanism. Google Analytics data may be processed in the United States; Google LLC is certified under the EU–US Data Privacy Framework.
How long we keep it
- Order and accounting records: seven years after the end of the financial year, because Swedish bookkeeping law requires it.
- Your account: for as long as you have one. Ask us to delete it and we will, except for what accounting law makes us keep.
- Messages to customer service: up to 24 months, so that we can follow up a case and see the history of a returning customer.
- Server logs: a short period set by our host, for security.
Your rights
Under the GDPR you have the right to:
- ask what data we hold about you, and get a copy of it,
- have inaccurate data corrected,
- have data erased, when we no longer have a reason to keep it,
- ask us to restrict how we use it,
- receive the data you gave us in a machine-readable format, and have it moved,
- object to processing we base on legitimate interest,
- withdraw a consent you have given, without it affecting what we did before you withdrew it.
Email info@longevitygoods.com to use any of them. We answer within one month.
If you think we handle your data wrongly you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or to the supervisory authority in the country where you live.
Security
The site runs over an encrypted connection, passwords are stored hashed, and access to the administration is limited to the people who need it. No system is perfectly secure, but we treat your data as if it were our own — because some of it is.
Changes to this policy
We update this policy when the way we work changes. The date at the top tells you when it last happened.