Privacy policy
Loyaltea collects as little as possible. This page explains what we do collect, why, how long we keep it and what you can ask of us.
Who is responsible
Loyaltea is run by Upper Eight AB (organisation number 556982-9699), Engelbrektsgatan 20, 211 33 Malmö, Sweden. Upper Eight AB is the controller for the personal data described here.
Questions about your data, or requests to use any of the rights below, go through our contact form. Write “Privacy” in your message so it reaches the right person.
What we collect
When you just read the site
You can read Loyaltea without giving us any personal data. Like every website, our web host records technical information when a page is requested, such as the IP address, browser type and the page visited. This is kept for a limited time to keep the site running and secure, and is not used to identify you.
When you use the contact form
If you send us a message we receive what you enter: your name, email address, and, if you choose to give them, your phone number, company and the message itself. We use it only to answer your inquiry and to follow up on it, for example about advertising, a partnership or buying the domain.
If you tick the box to receive news and offers by email, we use your email address for that too. You can unsubscribe at any time, and we then stop.
Cookies and Google Analytics
When you first visit, a banner asks whether you accept cookies. Until you choose, and if you decline, we set no analytics cookies and send nothing to Google. If you accept, we use Google Analytics 4 to count visits and see which pages are read, so we can improve the site. Google Analytics then sets cookies (_ga and _ga_…) and receives information such as the pages you visit, roughly where you are and what device you use.
Your choice is saved in your browser for 12 months. You can change it at any time with the round cookie-settings button in the corner of the screen.
Why we are allowed to
- Answering messages: our legitimate interest in replying to people who contact us, or steps before an agreement you ask for (GDPR article 6.1 f and 6.1 b).
- Analytics and marketing emails: your consent (article 6.1 a), which you can withdraw at any time.
- Server logs: our legitimate interest in keeping the site working and secure (article 6.1 f).
Who else handles the data
- haij, our own platform for the contact form and cookie consent, run by Upper Eight AB and hosted in the EU.
- Google (Google Ireland Limited), for Google Analytics, only if you accept cookies. Google may transfer data to the United States; such transfers are covered by the EU–US Data Privacy Framework.
- Oderland Webbhotell AB in Sweden, which hosts the website.
We never sell personal data, and we don’t share it with advertisers.
How long we keep it
- Contact form messages: as long as needed to handle your inquiry, and no longer than 24 months.
- Marketing emails: until you unsubscribe.
- Google Analytics data: no longer than 14 months.
- Your cookie choice: 12 months in your own browser.
Your rights
Under GDPR you have the right to:
- find out what data we hold about you and get a copy,
- have wrong data corrected,
- have your data deleted,
- restrict or object to how we use it,
- get your data in a format you can take elsewhere,
- withdraw your consent at any time, without affecting what was done before.
Use the contact form for any of these. If you think we handle your data wrongly, you can also complain to the Swedish Authority for Privacy Protection, IMY (imy.se).
Links to other sites
Loyaltea links to tea shops and other websites. When you follow a link, that site’s own privacy policy applies, not this one.
Changes
If we change how we handle personal data we update this page and the date at the top.