Privacy policy
Last updated: 31 October 2026
This Privacy Policy explains how AESKA collects, uses, shares and protects personal information when you visit aeska.co, buy from us, contact us, receive our emails or text messages, or interact with our ads and social media. It also explains the rights and choices you have. Please read it together with our Cookie Policy and our Terms of Service.
Contents
- Who we are and how to contact us
- Summary
- What personal information we collect
- How we collect it
- Why we use it and our legal bases
- Payments and payment providers
- Marketing emails and text messages
- Cookies, pixels, session recording and similar technologies
- Customer support, chat and AI tools
- Reviews, photos and creator content
- Videos on our website
- Who we share personal information with
- International transfers
- How long we keep personal information
- Automated decisions, fraud checks and profiling
- Security and data breaches
- Your rights (all customers)
- Additional information for the EU/EEA, UK and Switzerland
- Additional information for US residents
- Additional information for Canada, Australia and New Zealand
- Children
- Third-party websites and their privacy policies
- Changes to this policy
- SMS/MMS text message marketing program privacy
1. Who we are and how to contact us
AESKA is a brand of AOE Ecom AB, a Swedish limited company (aktiebolag), org. no. 559458-2925, VAT no. SE559458292501, Snipvรคgen 18, 542 66 Sjรถtorp, Sweden. AOE Ecom AB is the data controller for the personal information described in this policy ("AESKA", "we", "us").
- Privacy contact: support@aeska.co (please write "Privacy" in the subject line)
- Post: AOE Ecom AB, Privacy, Snipvรคgen 18, 542 66 Sjรถtorp, Sweden
- Person responsible for privacy: the CEO of AOE Ecom AB, reachable at the email and postal address above
- Customers in the UK can contact us directly at the email and postal address above.
We have not appointed a Data Protection Officer because the law does not require one for a business of our size and activities.
2. Summary
- We use your information to sell and deliver your order, provide customer service, prevent fraud, meet our legal duties and, where you allow it, to send you marketing and measure our ads.
- In the EU/EEA, the UK and Switzerland, analytics and advertising tools run only after you accept them in our cookie banner.
- We never see or store your full card number. Payments are handled by payment providers such as Shopify Payments (powered by Stripe) and PayPal.
- We do not sell your personal information for money. In the US, sharing data with advertising partners for targeted ads can count as "selling" or "sharing", and you can opt out at any time under Your Privacy Choices.
- Our orders are packed and shipped by our fulfillment partner in China, so your name, address and phone number go there to deliver your order.
- You can ask to see, correct or delete your data, and you can unsubscribe from marketing at any time.
3. What personal information we collect
| Category | Examples | Required? |
|---|---|---|
| Identity and contact details | First and last name, email address, phone number, delivery and billing address | Required to place an order; phone optional unless the carrier needs it |
| Order and transaction information | Products, quantities, prices, discounts used, order number, order history, returns, withdrawals, refunds, chargebacks | Required to place an order |
| Payment information | Payment method type, last four digits and expiry of a card, payment status, billing country, fraud-risk score from the payment provider. Full card numbers are handled only by the payment provider | Required to pay |
| Account information | Login email, password (stored encrypted by Shopify), saved addresses | Only if you create an account |
| Communications | Emails, chat messages, contact-form messages, survey answers, withdrawal declarations, warranty claims, photos or videos you send about a product | Only if you contact us |
| Marketing preferences | Whether you subscribed to email or text messages, when and how you consented, unsubscribes, which emails you opened or clicked | Only if you subscribe or receive emails |
| Reviews and user content | Rating, review text, photos, videos, first name and last initial, country | Only if you leave a review |
| Device and usage information | IP address, approximate location derived from the IP address (city/region), browser and device type, operating system, language, pages viewed, products viewed, cart activity, clicks, scrolls, referring website or ad, time spent, session recordings | Collected automatically; non-essential parts only with your consent where required |
| Advertising identifiers | Cookie IDs, ad click IDs (for example fbclid, ttclid, gclid), hashed (scrambled) email or phone number used to match ad conversions | Only with consent (EU/UK/CH) or unless you opt out (US) |
| Inferences | Simple segments such as "bought a shoehorn" or "interested in lighting" used to choose which emails and ads to show you | Derived from the information above |
| Business contact information | Name, company, email, order type and quantities from our wholesale (B2B) form | Only if you request a quote |
| Creator information | Name, social handle, contact details, shipping address, payment details and content for creators who work with us | Only if you work with us as a creator |
Sensitive information. We do not ask for, and do not want, sensitive information such as health, ethnicity, religion, sexual orientation or government ID numbers. Please don't include it in messages, reviews or photos. If you send it anyway, we use it only to answer you and then delete it.
4. How we collect it
- From you, when you browse, place an order, create an account, subscribe, take part in a survey or pop-up, contact us, chat with us, leave a review or apply to work with us.
- Automatically, through cookies, pixels, tags, local storage, server-side tracking and similar technologies (see section 8 and our Cookie Policy).
- From service providers, such as Shopify, payment providers, our fulfillment partner and carriers (for example delivery status), and our chargeback provider.
- From advertising and social media platforms, such as Meta (Facebook, Instagram), TikTok, Google and Pinterest, for example when you click one of our ads or interact with our social media pages. These platforms are separate controllers for their own data.
5. Why we use it and our legal bases
For customers in the EU/EEA, the UK and Switzerland, each use relies on a legal basis under the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection.
| Purpose | Information used | Legal basis (EU/UK/CH) |
|---|---|---|
| Processing, paying for, packing, shipping and tracking your order | Identity, contact, order, payment | Performance of a contract |
| Handling returns, withdrawals, refunds, exchanges and warranty claims | Identity, contact, order, communications | Contract; legal obligation (consumer law) |
| Sending order confirmations, shipping updates and service messages | Contact, order | Contract |
| Running your customer account | Account, order | Contract |
| Answering questions and complaints by email, chat or form | Contact, communications, order | Contract or legitimate interest in helping you |
| Preventing and detecting fraud, payment abuse, chargebacks and misuse of discounts | Order, payment, device, IP | Legitimate interest in protecting our business and customers |
| Bookkeeping, tax, customs, product safety and consumer-law records | Order, payment, communications | Legal obligation |
| Product safety and recalls: contacting you if a product you bought needs a safety warning or recall | Contact, order | Legal obligation; legitimate interest in your safety |
| Sending marketing emails and texts | Contact, marketing preferences, order history, inferences | Consent; for existing customers, legitimate interest under the existing-customer rule (section 7) |
| Asking you to review a product you bought | Contact, order | Legitimate interest (you can opt out in every request) |
| Showing and measuring our ads on other platforms, building audiences | Advertising identifiers, device and usage, hashed contact details, order | Consent |
| Analytics, heatmaps and session recordings to improve the site | Device and usage | Consent |
| Remembering your country, currency and language | Device and usage | Legitimate interest; consent where cookies need it |
| Post-purchase surveys and product research | Survey answers, order | Legitimate interest (answers are optional) |
| Publishing reviews and customer photos | Reviews and user content | Consent (you choose to submit) and legitimate interest |
| Working with creators and wholesale partners | Creator and business information | Contract or steps before a contract |
| Establishing, exercising or defending legal claims | Any relevant information | Legitimate interest; legal obligation |
| Selling or restructuring our business | Any relevant information | Legitimate interest |
Where we rely on legitimate interest, we have balanced our interest against your rights and expectations. You can object at any time (section 18). Where we rely on consent, you can withdraw it at any time without affecting what we did before.
6. Payments and payment providers
When you pay, your payment details go directly to the payment provider you choose through an encrypted connection. We do not see or store your full card number or security code.
| Payment method | Provider | What the provider receives |
|---|---|---|
| Credit and debit cards (Visa, Mastercard, American Express, Maestro, UnionPay) and local methods such as iDEAL, Bancontact, BLIK, MB WAY, MobilePay and Satispay | Shopify Payments, powered by Stripe | Card or account details, name, billing address, email, order amount, device and IP information for fraud checks |
| Shop Pay | Shopify | The details you save in Shop Pay, order details |
| PayPal | PayPal | Your PayPal account details and order details |
| Apple Pay | Apple, and the card issuer | A device-specific token, not your card number, plus order amount |
| Google Pay | Google, and the card issuer | A token and the details stored in your Google account, plus order amount |
The payment provider uses this information to process your payment, check for fraud, meet anti-money-laundering and card-network rules, and handle refunds and disputes. Some payment providers act as independent controllers for these purposes under their own privacy policies, which are linked in section 22. If you pay in instalments with a provider that offers it at checkout, that provider runs its own credit checks under its own terms and privacy policy.
When a payment is disputed (a chargeback), we share the order, delivery, tracking and communication records needed to respond with the payment provider and with our dispute provider, Chargeflow.
7. Marketing emails and text messages
Emails. We send marketing emails only if you subscribed, for example through our pop-up, footer form or the checkbox at checkout. If you bought from us and did not object, we may also send you emails about similar AESKA products; you can object at the moment you give us your email and in every email. Every marketing email contains an unsubscribe link, and unsubscribing takes effect within a few days at most.
Email measurement. Our emails contain small images and links that tell us whether an email was opened and which links were clicked, and which device and approximate location were used. We use this to send fewer, more relevant emails and to stop emailing people who never open them. You can block this by turning off images in your email program.
Text messages (SMS/MMS). We send marketing texts only to people who opted in at checkout, in a sign-up form or by texting a keyword. Consent is not a condition of any purchase. Message frequency varies and message and data rates may apply. You can stop texts at any time by replying STOP (or any other reasonable way of telling us, such as "unsubscribe" or "cancel"), and get help by replying HELP. We send marketing texts only between 9:00 and 20:00 on Monday to Saturday and between 12:00 and 20:00 on Sunday, in your local time. Section 17 of our Terms of Service explains the program in full. Section 24 below explains how we handle information from the program.
AI in our text messages. Our text message program is run by our provider TxtCart and uses artificial intelligence to write some messages, recommend products and answer your replies. To do this, it uses your mobile number, your messages and replies, your purchase history, your browsing activity on our site and your product preferences. This is profiling for marketing: in the EU/EEA, the UK and Switzerland we do it only with your consent, and you can stop it at any time by replying STOP. Our providers act on our instructions under data processing terms and may not use your personal information for their own marketing. You can ask for a person at any time by emailing support@aeska.co.
Mobile information is not shared. We do not sell, rent or share your mobile phone number or text-messaging consent with third parties for their own marketing. Text-messaging opt-in data is shared only with the providers that run our messaging program (TxtCart, Shopify and Klaviyo) and is not used by them for their own purposes.
Pop-ups and offers. If you sign up to get a discount or free gift, the offer and its conditions are shown in the pop-up and in section 15 of our Terms of Service. See section 19 for the US "notice of financial incentive".
8. Cookies, pixels, session recording and similar technologies
We use cookies, pixels, tags, local storage and server-side connections to run the store, remember your choices, understand how the store is used and measure our ads. The full list of tools, what each does and how long it lasts is in our Cookie Policy.
- EU/EEA, UK and Switzerland: only strictly necessary tools run until you choose in our cookie banner. You can accept, decline or choose by category, and change your mind any time with Cookie settings in the footer.
- United States and other countries: analytics and advertising tools may run by default. You can opt out of targeted advertising on our Your Privacy Choices page or with a Global Privacy Control (GPC) signal from your browser, which we honour as an opt-out for that browser.
- Session recording: where allowed, Microsoft Clarity records how visitors move, click and scroll on our pages, so we can find and fix things that confuse people. Clarity is set to mask what you type into form fields, and we do not use recordings to identify you. Recordings are kept for up to 30 days.
- Server-side tracking: some events, such as a purchase, are also sent from our servers to advertising partners (through wetracked.io and Triple Whale) to measure ads more accurately. These follow the same choices you make in our banner or under Your Privacy Choices.
- Do Not Track: browsers' "Do Not Track" signals are not a recognised standard, so we respond to GPC instead.
9. Customer support, chat and AI tools
- Chat and email support run on Re:amaze. Messages you send in chat, by email or through our contact form are stored by Re:amaze on our behalf so we can answer you and keep a record of your case. By starting a chat you understand that the conversation is recorded and stored for these purposes.
- AI assistance. We may use AI tools (including Anthropic's Claude and xAI's Grok) to help our team analyse store data, draft replies and translate messages. A person on our team is responsible for what we send you. If an automated or AI assistant answers you directly in chat or by text message, we tell you so, and you can ask for a human.
- We do not use AI tools to make decisions about you that have legal or similarly significant effects.
10. Reviews, photos and creator content
- After delivery, we may ask you through Judge.me to review the product you bought. If you post a review, we publish your first name and last initial, country, rating, text, any photos or videos and the date. We mark a review "Verified" only when it is linked to a real AESKA order of that product.
- We publish reviews of every star rating and do not edit the meaning or rating of a review. How our reviews work is explained in section 20 of our Terms of Service.
- You can ask us to remove your review or photo at any time.
- If you work with us as a creator (for example through Trybe UGC), we use your details to manage the collaboration, pay you, ship products and use your content as agreed in your creator agreement.
11. Videos on our website
Our product pages contain short product videos (some delivered through ReelUp). We measure how videos are viewed to improve our pages. We do not share information about which videos you watched, together with information that identifies you, with advertising platforms.
12. Who we share personal information with
We share personal information only as described here and only as needed for the purposes in section 5. We require our service providers (processors) to use it only on our instructions, to keep it secure and to delete it when it is no longer needed.
| Recipient (location) | Purpose | Role |
|---|---|---|
| Shopify (Canada, Ireland, USA) | Store platform, checkout, hosting, order emails, Shop Pay, Shopify Flow and Messaging | Processor; independent controller for Shop Pay and fraud services |
| Shopify Payments / Stripe (Ireland, USA), PayPal (Luxembourg, USA) | Payments, fraud checks, refunds, disputes | Independent controllers for some purposes |
| BestFulfill (China) | Packing and shipping orders | Processor |
| Carriers and postal services (for example national postal services and couriers in your country) | Delivering parcels, customs clearance | Independent controllers |
| Customs and tax authorities | Customs declarations and tax compliance | Independent controllers |
| Track123 | Tracking page and shipping notifications | Processor |
| Chargeflow (USA) | Responding to payment disputes | Processor |
| Yonda Tax and our accountants | Tax calculation, filing and bookkeeping | Processors or independent controllers |
| Klaviyo (USA) | Email marketing, sign-up forms | Processor |
| TxtCart (USA) | Text message marketing, cart reminders by text (only to people who opted in to texts), AI-generated messages and replies | Processor |
| Consentmo | Cookie banner, consent records, privacy requests, withdrawal form | Processor |
| Alia | Sign-up pop-ups, quizzes and rewards | Processor |
| Judge.me | Review requests and display | Processor |
| Fairing (USA) | Post-purchase surveys | Processor |
| Re:amaze (USA) | Customer support and chat | Processor |
| Kaching (Bundles, Cart, Upsell) | Bundle offers, cart and upsell features | Processor |
| Koin | Store credit and rewards | Processor |
| GemX | A/B testing of page designs and offers | Processor |
| Faire | Wholesale orders from retailers (business contact details only) | Independent controller |
| Weglot, Shopify Translate & Adapt | Translating the store | Processors |
| GemPages, Section Store | Building store pages | Processors (no or minimal personal data) |
| Microsoft (Clarity) (USA) | Analytics, heatmaps, session recordings | Processor (with consent) |
| PostHog (EU hosting) | Product analytics, page performance and on-site surveys | Processor (with consent) |
| ReelUp | Shoppable video and video analytics | Processor |
| Triple Whale (USA), wetracked.io | Ad attribution and server-side ad tracking | Processors |
| Meta (Facebook, Instagram), TikTok, Google, Microsoft Advertising (Bing), Pinterest, AppLovin | Showing and measuring our ads, building audiences | Joint or independent controllers (with consent in EU/UK/CH; US opt-out) |
| Trybe UGC | Managing creator collaborations | Processor |
| AI service providers (for example Anthropic and xAI) | Helping our team analyse data and draft messages | Processors |
| Professional advisers (lawyers, auditors, insurers) | Advice, audits, insurance, claims | Independent controllers under confidentiality |
| Courts, police, regulators and other authorities | When the law requires or to protect rights and safety | Independent controllers |
| A buyer or investor in our business | If AESKA or its assets are sold or restructured, under the same protections | Independent controller |
Advertising platforms may combine information from our site with information they already hold and use it for their own purposes under their own privacy policies (section 22). We do not sell personal information to data brokers.
13. International transfers
We are based in Sweden, and many of our providers are in the EU. Some are in other countries, mainly the USA, Canada and China. When personal information from the EU/EEA, the UK or Switzerland goes to a country without an adequacy decision, we use one of these safeguards:
- Adequacy decisions, for example for Canada and for US companies certified under the EU-US Data Privacy Framework (and its UK Extension and Swiss framework);
- Standard Contractual Clauses approved by the European Commission, with the UK Addendum and Swiss adjustments, plus extra measures where needed;
- for shipping data sent to our fulfillment partner in China: the transfer is necessary to perform your order (Article 49(1)(b) GDPR), we send only what is needed to pack and ship it (name, delivery address, phone number and order contents), and our partner is contractually required to keep it secure and use it only to fulfil your order.
You can ask us for a copy of the relevant safeguards at support@aeska.co.
14. How long we keep personal information
| Information | How long |
|---|---|
| Orders, invoices, payments, refunds | 7 years after the end of the financial year (Swedish Accounting Act) |
| Customer service, chat, withdrawal and warranty records | 3 years after the case closes (the Swedish complaint period), longer if a claim is ongoing |
| Product safety and recall records | As long as the product could be in use, up to 10 years |
| Customer account | Until you close it; order records then as above |
| Email and SMS subscription and consent records | While you are subscribed, plus up to 5 years after you unsubscribe as proof of consent and opt-out |
| Marketing profile of inactive subscribers | Deleted or anonymised after 24 months without opening or clicking |
| Reviews | While the product page is live, or until you ask us to remove it |
| Analytics and advertising data | Up to 13 months; session recordings up to 30 days |
| Fraud and chargeback records | Up to 3 years after the dispute closes |
| Wholesale enquiries | 2 years after last contact |
| Creator records | Duration of the collaboration plus 3 years |
After these periods we delete or anonymise the information.
15. Automated decisions, fraud checks and profiling
Shopify and our payment providers automatically score orders for fraud risk. A high score may lead us to verify or cancel an order, but a person on our team reviews it before we cancel. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
We group customers into segments (for example by products bought or emails opened) to decide which emails and ads to show. This is profiling for marketing, and you can object to it at any time.
We may test different page designs, offers or prices with different groups of visitors for short periods. Visitors are assigned to a test at random; we do not set individual prices based on your personal characteristics.
16. Security and data breaches
We use HTTPS encryption, access controls, two-factor authentication on our admin accounts, role-based staff access and PCI DSS compliant payment providers. Our providers are contractually required to protect your information. No system is completely secure. If a personal data breach is likely to put you at risk, we will tell you and the relevant authorities without undue delay as the law requires.
17. Your rights (all customers)
Wherever you live, you can:
- ask what personal information we hold about you and get a copy;
- ask us to correct or complete it;
- ask us to delete it (we may keep what the law requires, such as bookkeeping records);
- unsubscribe from marketing emails and texts at any time;
- withdraw any consent you gave;
- complain to us or to a regulator.
How to make a request: email support@aeska.co with the subject "Privacy request", or write to the postal address in section 1. To protect your account, we may ask you to confirm your identity, usually by replying from the email used for your orders. Requests are free. If someone makes a request on your behalf, we may ask for proof of their authority.
18. Additional information for the EU/EEA, UK and Switzerland
- Your extra rights: to restrict processing, to data portability, and to object at any time to processing based on legitimate interest, including direct marketing and profiling for marketing.
- Response time: within one month, extendable by two further months for complex or numerous requests (we will tell you).
- Withdrawing consent: use Cookie settings in the footer, the unsubscribe link, reply STOP, or email us.
- Complaints: you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se), to the authority where you live or work, to the UK Information Commissioner's Office (ico.org.uk), or to the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch).
- Why we need some information: we cannot process an order without your name, delivery address and payment; providing marketing information is always optional.
19. Additional information for US residents
Your rights. Depending on your state (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia), you may have the right to know what personal information we collect, use, disclose, sell or share; to access, correct and delete it; to get a portable copy; to opt out of the "sale" or "sharing" of personal information and of targeted advertising and profiling; to limit the use of sensitive personal information (we do not use it); and not to be discriminated against for exercising these rights. We apply these rights to all US customers, whether or not your state's law requires it.
How to exercise them: use our Your Privacy Choices page or email support@aeska.co. You may use an authorised agent; we will ask for your signed permission and may verify your identity directly. We respond within 45 days, and may extend once by 45 days if needed.
Appeals: if we decline your request, you can appeal by replying to our decision with the word "Appeal". We will answer within 60 days. If you are not satisfied, you can contact your state Attorney General.
Selling and sharing. We do not sell personal information for money. We allow advertising partners (such as Meta, TikTok, Google, Microsoft, Pinterest and AppLovin) to collect identifiers, internet activity and purchase events on our site for targeted advertising and ad measurement. Under some state laws this is a "sale" or "sharing". You can opt out with Your Privacy Choices or a GPC signal. We do not knowingly sell or share personal information of consumers under 16.
California notice at collection. In the past 12 months we collected these categories of personal information: identifiers (name, email, phone, address, IP address, cookie and ad IDs); customer records (billing and delivery details); commercial information (orders, returns); internet or other electronic network activity (browsing, clicks, session recordings); approximate geolocation (from IP); audio/visual information (review photos and videos you upload); and inferences (marketing segments). We collect them from the sources in section 4, for the purposes in section 5, disclose them to the recipients in section 12, and keep them for the periods in section 14. We "sell" or "share" identifiers, internet activity and commercial information with advertising partners. We do not collect sensitive personal information for the purpose of inferring characteristics.
Notice of financial incentive. We sometimes offer a discount, free gift or other reward when you sign up for our emails or texts (for example a welcome discount code). The terms of each offer are shown where you sign up and in section 15 of our Terms of Service. You join by entering your email or phone number and can withdraw at any time by unsubscribing. We value the information you give us based on the reasonably expected value of the sales and marketing it allows, which we estimate is about equal to the value of the offer. Joining is always optional.
California "Shine the Light". California residents may ask once a year whether we disclosed personal information to third parties for their direct marketing purposes in the previous year. We do not do this. You can email us with the subject "Shine the Light".
Nevada. We do not sell covered information as defined by Nevada law. Nevada residents can still email us to opt out of any future sale.
20. Additional information for Canada, Australia and New Zealand
- Canada: you can access and correct your information and withdraw consent, subject to legal and contractual limits. Our person responsible for privacy is named in section 1. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, to the Commission d'accรจs ร l'information (cai.gouv.qc.ca).
- Australia: you can access and correct your information. If you are not satisfied with how we handle a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
- New Zealand: you can access and correct your information and complain to the Office of the Privacy Commissioner (privacy.org.nz).
21. Children
Our store is meant for adults. We do not knowingly collect personal information from children under 16 (under 13 in the US). Some products, such as our Kids Shoehorn, are designed for children to use, but they must be bought by an adult. If you believe a child has given us personal information, contact us and we will delete it.
22. Third-party websites and their privacy policies
Our site links to other websites and uses services from companies that have their own privacy policies. We are not responsible for their practices. Key policies:
- Shopify: shopify.com/legal/privacy and, for Shop Pay and the Shop app, shopify.com/legal/privacy/consumers
- Stripe (Shopify Payments): stripe.com/privacy
- PayPal: paypal.com privacy statement
- Apple Pay: support.apple.com/en-us/101554
- Google Pay: Google Payments Privacy Notice
- Google: policies.google.com/privacy
- Meta (Facebook, Instagram): facebook.com/privacy/policy
- TikTok: tiktok.com/legal/privacy-policy
- Microsoft (Clarity and Microsoft Advertising): privacy.microsoft.com/privacystatement
- TxtCart: txtcart.com
- Klaviyo: klaviyo.com/legal/privacy-notice
- Judge.me: judge.me/privacy
- Re:amaze: reamaze.com/privacy
- Other providers listed in section 12 publish their privacy policies on their own websites.
23. Changes to this policy
We update this policy when our services, tools or the law change. The date at the top shows the latest version, and earlier versions are available on request. If a change materially affects how we use information you already gave us, we will tell you in advance by email or with a notice on our website and, where required, ask for your consent.
24. SMS/MMS text message marketing program privacy
This section applies to our SMS/MMS text message marketing program (the "Program") described in section 17 of our Terms of Service. It adds to the rest of this Privacy Policy.
How we use Program information. We use the information you give us through the Program (your mobile number, opt-in and opt-out records, and your messages and replies) to send you messages, respond to you and personalise the Program as described in section 7, together with our purchase and browsing information about you. To do this, we share it with the platform providers, mobile carriers, aggregators and other vendors who help us deliver text messages, only as needed to run the Program.
Opt-in data is not shared. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.
No sale of mobile information. We do not sell, rent, loan, trade, lease or otherwise transfer for profit any phone numbers or customer information collected through the Program to any third party. Your mobile information and SMS opt-in data will not be shared with or sold to third parties or affiliates for their own marketing or promotional purposes.
How we protect Program information. We maintain administrative, technical and physical safeguards designed to protect information collected through the Program against unauthorised access, disclosure, alteration and destruction. Information is transmitted over encrypted connections, and access is limited to the people and service providers who need it to run the Program. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
Legal disclosures. We may disclose Program information when the law, a regulation or a valid request from a public authority requires it, or where necessary to establish, exercise or defend legal claims or to protect our rights, property or safety.
Accurate information. When you join the Program, you agree to give accurate, complete and true information and not to use a false name or a mobile number you are not authorised to use. If we reasonably believe the information is untrue, or that someone has signed up a number that is not theirs, we may remove the number from the Program.
Your rights. California residents may request information about our disclosure of Program information to third parties for their direct marketing purposes under California Civil Code section 1798.83 (we do not make such disclosures), and may exercise their rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. Residents of the EU/EEA, the UK and Switzerland may exercise their rights under the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection, including access, correction, deletion and objection. Sections 17 to 20 explain all rights and how we respond. You can leave the Program at any time by replying STOP.
Contact for Program privacy requests:
AOE Ecom AB (AESKA)
Snipvรคgen 18, 542 66 Sjรถtorp, Sweden
support@aeska.co (subject "SMS privacy")
