KickrSports, a part of Brobox AB (org. no. 559438-3975), cares about your privacy. This policy describes how we collect, use and protect your personal data.
Data Controller
Brobox AB (org. no. 559438-3975) is the data controller for the processing of your personal data. Contact us at contact@kickrsports.com.
What data we collect
When you make a purchase, we collect: name, email address, phone number, delivery address and payment details. Payment card details are handled by Stripe and never stored by us.
How we use your data
- Process your order and delivery
- Send order confirmation and shipping info
- Handle returns and complaints
- Improve our website and service
- Send newsletters (with your consent)
Legal basis
We process your personal data based on: performance of contract (purchase), legitimate interest (customer service, web analytics, marketing to you as a customer of ours) and consent (newsletter if you have not purchased from us, cookies).
Marketing by e-mail
If you have purchased from us, we send offers and tips about our own similar products. This is done under the existing-customer exception in the Swedish Marketing Act (marknadsföringslagen), which governs our marketing. You can decline already at checkout, and every e-mail we send contains an unsubscribe link.
If you have not purchased from us, we only send e-mail if you have signed up for our newsletter yourself, and then only after you have confirmed your e-mail address.
Cookies
We use necessary cookies for website functionality (e.g. shopping cart, language selection). Analytics cookies are used with your consent to improve the experience. The cookie that measures which marketing brought you here is described in the next section.
Marketing measurement
If you arrive here from an ad, a newsletter or a link on another website, we store a first-party cookie called bx_attr for 180 days. It is set by our own server, not by any third party, and the cookie itself is never read by a third party — but the ad click id it carries is sent on to Google to connect your order to the ad you clicked, if you have accepted cookies. We use it to see which marketing actually leads to a purchase. The campaign labels in the link (utm_source, utm_medium, utm_campaign and others), the page you landed on and the site you came from are always stored. The ad click id itself — the only thing in the cookie that can be linked to you as a person — is passed on to our order system only if you have accepted cookies in the banner, and if you choose Essential only the value is removed from the cookie. The cookie is httpOnly: only our own server reads it, never scripts on the page.
Third-party providers
- Stripe — payment processing
- Google (Google Analytics and Google Ads) — web analytics and ad measurement
- Meta (Facebook and Instagram) — ad measurement
- Bring/UPS — shipping and pickup points
- Vercel — web hosting
- Shelfless/Dreamlogistics — warehousing and delivery
- Mailjet — sending order and customer e-mails
Google and Meta may process data in the USA; the transfer takes place under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. Stripe and Vercel process data within the EU/EEA or with equivalent safeguards.
Measurement and ad tracking
We measure both in your browser and from our server. The cookie banner only governs the first.
Meta's pixel does not load until you have consented. Google's measurement script loads immediately, but with consent denied — no cookies, only your IP address, your browser and which page you are viewing. If you accept cookies, Google also measures what you view, add to the cart and buy.
If you have accepted cookies, our server reports to Meta when you have viewed a product, added something to the cart, started a checkout or entered payment details — with your IP address, your browser and Meta's cookie ids in plain text, plus your contact details in hashed form if you have already filled them in, as well as an id we derive from Google's analytics cookie and which country your connection comes from. On a purchase we send the order number, amount, currency, items, the same hashed contact details and a customer number with us — then regardless of what you answered in the cookie banner. Refunds are never sent to Meta.
On a purchase, Google is sent the order number, amount, currency, time and items, regardless of what you answered in the cookie banner; on a refund, the order number, amount and currency. If Google's analytics cookie exists, its id goes along, otherwise a technical id we derive from the order. Your browser also passes your e-mail address and telephone number to Google in hashed form on a purchase, and — if you have accepted cookies — the click id from the ad.
A hash is one-way — the data is never sent in plain text. But it is stable, so the recipient can match it against its own register and recognise you.
The legal basis is our legitimate interest in knowing which marketing leads to sales. You can object to that — see the section on your rights.
Your rights
You have the right to request access to, correction or deletion of your data. You can also object to processing or request data portability. Contact contact@kickrsports.com.
Data retention
We retain your data for as long as necessary to fulfill its purpose, but at least the time required by the Swedish Bookkeeping Act (7 years).
Changes
We may update this policy. Material changes will be communicated via email or on the website.