1. Privacy Policy

1.1 Your personal data and how we process it

When you entrust Skinome Research AB with your personal data, it is important to us that you feel confident and secure. We are committed to protecting your privacy. Your personal data is processed with the utmost care and in accordance with applicable legislation. This Privacy Policy describes how we collect and process your personal data when you visit our website and use the services offered through it.

All processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR). The data controller is Skinome Research AB (company registration number 559164–0189), with its registered address at Hornsgatan 172, 117 28 Stockholm, Sweden.

When you place an order, you agree that we may store and use your information in order to fulfil your order and provide the services you can expect from us.

1.2 What is personal data?

Personal data means any information or data that can be directly or indirectly linked to a living individual. Examples of personal data include your name, personal identity number, address, email address and telephone number. It may also include customer numbers, encrypted information and various types of electronic identifiers, such as IP addresses.

Any operation performed on personal data constitutes processing, regardless of whether it is carried out by automated means. Common examples of processing include collection, recording, organisation, structuring, storage, modification, transfer and deletion.

1.3 What information do we collect and why?

Information you provide when you become a customer of Skinome Research AB

When you become a customer of Skinome Research AB, we collect your contact details, including your name, email address, telephone number, address, delivery method, any applicable collection point and IP address.

The purchase agreement we have entered into with you constitutes the legal basis for processing your personal data. The processing is necessary in order for us to fulfil our legal obligations and perform the agreement with you, for example in relation to delivery and payment.

Information collected when you contact us

When you contact us, for example by email, contact form or chat, we collect the personal data you provide to us. We do this so that we can answer your questions and handle your enquiry. This may include information such as your name, email address and order number. We may also collect information that you choose to provide to us concerning, for example, your health or medication.

If your enquiry concerns a complaint about a product, we process your information in order to fulfil our obligations under applicable consumer protection legislation. The legal basis for this processing is the purchase agreement entered into with you.

1.4 How do we use your information?

Performance of the agreement

We process your information to identify you as a customer, process and deliver your order, and manage invoicing and payment. We also process your personal data so that we can assist you if you contact us with questions, feedback or, for example, a complaint.

Information about products and services

We use your personal data to send information by SMS and email about our products and services, as well as inspiration and educational content relating to skin and skincare. You may withdraw your consent to receive newsletters, SMS messages, campaigns and offers at any time by contacting us or by using the unsubscribe link provided in each newsletter and SMS.

If you choose to register on skinome.com or provide personal information on other occasions, the information you provide may be used to create and send direct marketing to you.

Direct marketing includes all forms of marketing, such as our regular email communications, SMS messages and postal communications, which may include campaigns, special discounts, new product launches, upcoming updates, skincare advice, product recommendations and other relevant information (“Opt-In Communications”).

We will never disclose your information to unauthorised parties or sell your information to third parties.

1.5 Who do we share your personal data with?

Payment solutions

Legal basis: Performance of the purchase agreement.

In order to receive payments and manage invoices and payments, we share information with Shopify and Klarna. Shopify and Klarna collect personal data about you in connection with payment. Shopify and Klarna are therefore data controllers for this information in accordance with their respective terms. See Klarna’s privacy information or Shopify’s information.

Carriers/shipping providers/Unifaun

Legal basis: Performance of the purchase agreement.

Our shipping providers receive the personal data necessary to process and deliver your order.

Google/Facebook

Legal basis: Legitimate interests.

We share analytics data through third-party cookies for marketing and web analytics purposes in order to improve our services. We do not record information about visitors’ IP addresses; therefore, information about you cannot be linked to your identity.

We use Google Analytics to improve the content, navigation and structure of our website. The analytics tool uses JavaScript and cookies, and information about your use of the website is anonymised.

To prevent information from being stored, you can choose not to accept cookies in your browser settings.

Direct marketing

Legal basis: Consent.

To send you information about our products and services, we use an external CRM system in which we store your email address. You can unsubscribe at any time, either by using the link provided in the newsletter or by contacting us directly at info@skinome.se.

Public authorities

Legal basis: Exercise of official authority and performance of a task carried out in the public interest.

Upon request, we may be required by law or by a decision of a public authority to disclose certain personal data, for example to the police in connection with a criminal investigation.

Other recipients

Legal basis: Legitimate interests.

Where appropriate, we may transfer your personal data to recipients other than those specified above if this is necessary for our business operations. A high level of security and confidentiality is maintained whenever personal data is processed. We may also share information with prospective purchasers if we sell all or part of our business or in connection with a merger.

1.6 Recruitment and personnel administration

This applies to the processing of job applications and potential employment, termination of employment, and the administration of any rehabilitation or discrimination-related matters.

• CV
• Name
• Telephone number
• Email address
• Postal address
• Photograph uploaded voluntarily by the candidate
• Personal identity number
• Cover letter, which may contain information about medical history or similar matters
• Email correspondence between the person responsible for recruitment and the candidate
• Notes made by the person responsible for recruitment in connection with interviews
• Results from work-related tests associated with the position
• Contact details for references

Legal basis: Legitimate interest in carrying out or concluding recruitment processes and, where applicable, retaining information to protect our interests in discrimination-related matters or similar cases. Explicit consent where special categories of personal data may be involved.

Retention period: 60 months from the date of collection or completion of the recruitment process.

Following up references during recruitment

If a candidate provides contact details for references during the recruitment process, we only retain the reference’s name, telephone number and email address. We retain this information until the recruitment process has been completed.

2. Cookies

2.1 What are cookies?

Cookies are small text files consisting of letters and numbers that are sent from our web server and stored in your browser or on your device. At skinome.com, we use the following types of cookies:

1. Session cookies (temporary cookies that expire when you close your browser or device)
2. Persistent cookies (cookies that remain on your device until you delete them or they expire)
3. First-party cookies (cookies set by the website you are visiting)
4. Third-party cookies (cookies set by a third-party website. We primarily use these for analytics purposes, for example Google Analytics)
5. Similar technologies (technologies that store information in your browser or on your device in a manner similar to cookies)

The cookies we use generally help improve the services we provide. Some of our services require cookies to function correctly, while others improve the services we provide to you. We use cookies to obtain general analytical information about how you use our services and to save functional preferences, such as language and other settings. We also use cookies to provide you with relevant marketing.

2.2 Managing the use of cookies

Your browser or device allows you to change the settings relating to the use and scope of cookies. Go to your browser or device settings to learn more about how to adjust your cookie preferences. For example, you may choose to block all cookies, accept only first-party cookies or delete cookies when you close your browser.

Please note that some of our services may not function properly if you block or delete cookies. You can find more general information about cookies on the website of the Swedish Post and Telecom Authority (Post- och telestyrelsen), pts.se.

2.3 How long do we retain your personal data?

We retain personal data for as long as there is a legal basis, a documented purpose for the processing or an ongoing customer relationship. We have ongoing procedures in place to ensure that we do not retain unnecessary personal data and we minimise retention periods as far as possible.

As a general rule, we retain your customer information for a maximum of three years following your most recent contact with us. However, information that must be retained under applicable accounting legislation is stored for up to eight years.

2.4 How do we protect your personal data?

We have implemented appropriate security measures to protect your personal data against loss, misuse and unauthorised access. The number of people who have access to your personal data is limited. Only individuals within our organisation who need to process your personal data have access to it.

Service providers with whom we share personal data will only process it on our behalf and in accordance with our instructions.

2.5 Your rights regarding your personal data

You have the right to request information about the personal data that Skinome Research AB holds about you and to request that such data be deleted.

To access this information or request deletion of your personal data, your request must be made in writing, include your full name and personal identity number, and be signed by you.

Send your request to Skinome Research AB, Hornsgatan 172, 117 28 Stockholm, Sweden. The information, or confirmation that your personal data has been deleted, will be sent without undue delay to your registered address.

You can always use the unsubscribe link included in all campaigns, offers and newsletters that we send to you.

If your information is incomplete, inaccurate or irrelevant, you have the right to request that it be corrected or deleted. You also have the right to claim compensation if your personal data has not been processed in accordance with applicable law.

Information that cannot be deleted includes, among other things, data that must be retained under applicable accounting legislation and data required for Skinome Research AB to fulfil its obligations, for example in connection with complaints.

It is important to us that you feel confident in how we process your personal data. We are committed to protecting your privacy and always strive to process your personal data with the utmost care. If you believe that we are processing your personal data incorrectly, you are welcome to contact us. You may also submit a complaint to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), which is the supervisory authority responsible for monitoring the processing of personal data in Sweden.

Skinome Research AB reserves the right to amend this Privacy Policy at any time to the extent necessary to address issues or comply with new legal or technical requirements. Any changes to this Privacy Policy will be published on the website.

For further information about how we process personal data, please contact us at info@skinome.se.

Last updated: 27 August 2026