Política de privacidad
Last updated: 25 February 2026
1. Introduction
Ancient Therapy Scandinavia AB, reg. no. 559523-1969 ("we", "us", "our"), with registered address at Söder Mälarstrand 29, 114 57 Stockholm, Sweden, is the data controller responsible for the processing of your personal data in connection with your visit to and purchases from our website www.ancienttherapy.com.
We are committed to protecting your privacy and process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation. This privacy policy describes what personal data we collect, why we process it, how long we retain it, who we share it with and what rights you have.
If you have any questions about how we process your personal data, please contact us:
Email: info@ancienttherapy.com
Phone: +46 70 142 63 55
Address: Söder Mälarstrand 29, 114 57 Stockholm, Sweden
2. What personal data do we collect and why?
Below we describe, for each purpose, what processing is carried out, what personal data is processed, the legal basis we rely on, what third parties we share data with, and how long we retain the data.
| Purpose | Processing activities | Personal data | Legal basis | Recipients | Retention period |
|---|---|---|---|---|---|
|
Order fulfilment and delivery We need your data to process your order, handle payment and deliver the goods to you. |
Process orders, handle payments, send order confirmations, deliver goods | Name, address, email, phone number, payment information, order history | Performance of a contract (Art. 6(1)(b) GDPR) | Shipping carriers (e.g. PostNord, DHL), Shopify Payments, Klarna (payment) | Order data: 7 years (Swedish Bookkeeping Act). Other data: 24 months after last purchase. |
|
Customer service We need your data to answer your enquiries and help you with any issues. |
Answer enquiries, handle cases and complaints | Name, email, phone number, case history | Performance of a contract (Art. 6(1)(b)) / Legitimate interest (Art. 6(1)(f)) | Shopify (customer service system) | 24 months after the case is closed |
|
Returns and complaints We need your data to handle returns, complaints and refunds in accordance with applicable consumer protection law. |
Handle returns, complaints, refunds | Name, address, email, order information, description of defect | Legal obligation (Art. 6(1)(c)) / Performance of a contract (Art. 6(1)(b)) | Shipping carrier (return shipment), payment service provider (refund) | 3 years and 4 months after delivery |
|
Marketing (newsletter) With your consent, we send newsletters with offers and news. You can unsubscribe at any time. |
Send newsletters, offers and campaigns | Name, email | Consent (Art. 6(1)(a) GDPR) | Email platform (e.g. Klaviyo) | Until consent is withdrawn |
|
Website analytics We analyse anonymised visitor data to improve our website's functionality and content. |
Analyse visitor behaviour, optimise the website | IP address (anonymised), device information, browser type, visit data | Consent (Art. 6(1)(a)) for analytics cookies / Legitimate interest (Art. 6(1)(f)) for essential cookies | Google Analytics, Shopify Analytics, Microsoft Clarity | See Section 8 (Cookies) |
|
Marketing via cookies With your consent, we use cookies to show you relevant ads and measure advertising effectiveness. |
Display relevant ads, measure ad effectiveness, remarketing | IP address, device ID, browsing behaviour, ad interactions | Consent (Art. 6(1)(a) GDPR) | Meta (Facebook/Instagram), Google Ads, TikTok | See Section 8 (Cookies) |
|
Accounting and legal requirements We are required to retain certain transaction data to comply with bookkeeping legislation. |
Comply with bookkeeping obligations | Name, address, transaction data | Legal obligation (Art. 6(1)(c) GDPR) | Accounting system, Swedish Tax Agency (Skatteverket) | 7 years (Swedish Bookkeeping Act) |
3. How we collect your personal data
We collect personal data in the following ways:
- Directly from you: when you place an order, create an account, contact our customer service, subscribe to our newsletter or fill in forms on our website.
- Automatically: through cookies and similar technologies when you visit our website (see Section 8).
- From third parties: payment confirmations from our payment service providers.
4. Who we share your personal data with
We share your personal data with the following categories of recipients to the extent necessary:
- Shipping carriers: PostNord, DHL and other carriers depending on your location
- Payment service providers: Shopify Payments, Klarna
- IT and platform provider: Shopify
- Analytics tools: Google Analytics, Microsoft Clarity
- Advertising platforms: Meta, Google Ads, TikTok (only with your consent for marketing cookies)
- Email platform: Klaviyo (newsletters)
- Public authorities: Swedish Tax Agency, where required by law
All recipients who process personal data on our behalf do so in accordance with our instructions and pursuant to data processing agreements.
5. International transfers
Some of our service providers (Shopify, Google, Meta, TikTok, Microsoft) transfer personal data to countries outside the EU/EEA, including the United States and Canada. Where such transfers take place, an adequate level of protection is ensured through:
- European Commission adequacy decisions (e.g. the EU-US Data Privacy Framework)
- Standard Contractual Clauses (SCCs) approved by the European Commission
Please contact us if you would like more information about the safeguards applied.
6. Your rights under the GDPR
Right of access
You have the right to request confirmation as to whether we process your personal data and, if so, to receive a copy of the data together with information about how it is processed.
Right to rectification
You have the right to request that inaccurate or incomplete personal data about you is corrected or completed.
Right to erasure ("right to be forgotten")
In certain circumstances, you have the right to request the deletion of your personal data, e.g. if the data is no longer needed for the purposes for which it was collected, or if you withdraw your consent. We may need to retain certain data due to legal requirements (e.g. bookkeeping legislation).
Right to restriction of processing
In certain circumstances, you have the right to request that the processing of your personal data is restricted, e.g. if you contest the accuracy of the data.
Right to data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transfer that data to another data controller.
Right to object
You have the right to object to processing based on legitimate interest. We will then cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You always have the right to object to processing for direct marketing purposes.
Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. This applies, for example, to newsletters (click "unsubscribe") and marketing cookies (change your cookie settings). Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority if you believe that we process your personal data in breach of the GDPR. The lead supervisory authority for our company is the Swedish Authority for Privacy Protection (IMY): www.imy.se. You may also contact the supervisory authority in your country of residence.
To exercise your rights, please contact us at info@ancienttherapy.com or call +46 70 142 63 55. We will respond to your request without undue delay and at the latest within one month.
7. Security
We take appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our website is encrypted with SSL/TLS, and payments are handled by PCI DSS-certified payment service providers.
8. Cookies
We use cookies and similar technologies on our website. Below we describe which cookies we use, their purpose, duration and how you can manage them. This information constitutes our cookie policy.
8.1 What are cookies?
Cookies are small text files stored on your device (computer, mobile phone or tablet) when you visit a website. Cookies are used to ensure the website functions correctly, to improve your experience and to collect statistics on how the website is used. Some cookies are essential for the site to work, while others help us understand how visitors use the site or display relevant advertisements.
8.2 Cookie categories
Essential cookies
These cookies are required for the website to function correctly, e.g. to manage your shopping cart, save language settings and process purchases. They are set automatically and do not require your consent.
Personalisation
These cookies allow the website to remember your settings such as language, currency and region for a better experience. They are only set after you give your consent.
Analytics
These cookies help us understand how visitors use the website by collecting anonymised statistics. We use this information to improve the website's functionality and content. These cookies are only set after you give your consent.
Marketing cookies
These cookies are used to show you relevant advertisements based on your interests, limit the number of times you see an ad, and measure the effectiveness of advertising campaigns. Information may be shared with third parties such as Meta (Facebook/Instagram), Google and TikTok. These cookies are only set after you give your consent.
8.3 What specific cookies do we use?
The following cookies have been identified on our website (scan date: 13 February 2026):
Essential cookies
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| localization | Shopify (first party) | Stores language and region settings for a personalised experience | 1 year |
| cart_currency | Shopify (first party) | Remembers your country of origin and displays the correct transaction currency | 14 days |
| _shopify_essential | Shopify (first party) | Contains essential information for store functionality (cart, session, authentication) | 1 year |
| _shopify_s | Shopify (first party) | Session management – keeps track of your cart and session | Session |
| _shopify_y | Shopify (first party) | Supports the website's internal analytics functions | 2 years |
| cart | Shopify (first party) | Stores the contents of your shopping cart | 2 weeks |
| cart_sig | Shopify (first party) | Verifies the integrity of the shopping cart | 2 weeks |
| secure_customer_sig | Shopify (first party) | Manages customer authentication and login sessions | 1 year |
| _tracking_consent | Shopify (first party) | Stores your cookie consent preferences | 1 year |
| consentHeader | ancienttherapy.com (first party) | Stores the status of the cookie consent banner | Session |
| _shs_state | ancienttherapy.com (first party) | Session management for internal Shopify functions | Session |
Personalisation
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| shopifyChatData | ancienttherapy.com (first party) | Stores data for the website's chat function | Persistent |
Analytics
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| bugsnag-anonymous-id | ancienttherapy.com (first party) | Used by BugSnag/Juicer for error reporting and analytical purposes | Persistent |
| _clck | Microsoft Clarity (third party) | Stores a unique user ID for Clarity statistics and heatmaps | 1 year |
| _clsk | Microsoft Clarity (third party) | Links pageviews within a user session for heatmaps and session replay | 1 day |
| CLID | Microsoft Clarity (third party) | Identifies the first time Clarity encounters a visitor | 1 year |
Marketing cookies
| Cookie | Provider | Purpose | Duration | Data sent to |
|---|---|---|---|---|
| data-timeout | ancienttherapy.com (first party) | Used for marketing tracking | 7 days | USA |
| shopify_recently_viewed | ancienttherapy.com (first party) | Stores recently viewed products for marketing and personalised product recommendations | Persistent | Canada |
| _fbp | Meta (third party) | Facebook Pixel – displays relevant ads on Facebook and Instagram | 3 months | USA |
| _ttp | TikTok (third party) | TikTok Pixel – measures the effectiveness of advertising campaigns on TikTok | 13 months | USA |
This table is based on a scan conducted on 13 February 2026. Cookies may change as apps and tools are updated. We review and update this information regularly.
Unclassified cookies
During the scan, an additional 6 cookies from shop.app (Shopify's Shop app) were identified that have not yet been classified, including _shop_app_essential. These are related to Shopify's platform functionality. We update this list on an ongoing basis.
8.4 Third parties and sharing of information
Certain cookies are issued by third parties or share data with them (see the "Provider" and "Data sent to" columns above). These third parties may process the data for their own purposes in accordance with their respective privacy policies:
- Meta (Facebook/Instagram): https://www.facebook.com/privacy/policy/
- TikTok: https://www.tiktok.com/legal/privacy-policy
- Google: https://policies.google.com/privacy
- Microsoft: https://privacy.microsoft.com/privacystatement
- Shopify: https://www.shopify.com/legal/privacy
8.5 International transfers via cookies
According to our scan, data from certain cookies is transferred to the United States and Canada. Where such transfers take place, an adequate level of protection is ensured through European Commission adequacy decisions (e.g. the EU-US Data Privacy Framework for the USA, the adequacy decision for Canada) or Standard Contractual Clauses (SCCs).
8.6 How to manage and disable cookies
When you visit our website for the first time, a consent manager (cookie banner) is displayed where you can choose which categories of cookies to accept or decline.
Change your preferences later: You can change your cookie settings at any time by clicking the "Cookie Settings" link in the footer at the bottom of our website. This will reopen the consent manager and allow you to update your choices.
You can also block or delete cookies via your browser settings:
- Chrome: Settings → Privacy and Security → Cookies
- Safari: Settings → Privacy
- Firefox: Settings → Privacy & Security
- Edge: Settings → Cookies and Site Permissions
Please note that blocking essential cookies may affect the website's functionality, e.g. the shopping cart may not work correctly.
9. Changes to this policy
We may update this privacy policy from time to time. The latest version is always published on our website. In the event of material changes, we will notify you by email or by means of a prominent notice on our website.
10. Contact
If you have any questions about this privacy policy or our processing of your personal data, please contact us:
Ancient Therapy Scandinavia AB
Söder Mälarstrand 29
114 57 Stockholm, Sweden
Email: info@ancienttherapy.com
Phone: +46 70 142 63 55