Privacy policy

Last updated 25 September 2026.

Your privacy matters to us. Here we explain what personal data DYGN collects, why, how long we keep it and what rights you have. We process data in accordance with the General Data Protection Regulation (GDPR).

Data controller

DYGN AB is the controller responsible for processing your personal data. If you have questions about how we handle your data, reach us at hej@usedygn.se.

What data we collect

Depending on how you use the site, we may collect:

Your email address, when you join the waitlist or sign up for the newsletter.
Your personal referral code, who invited you, how many people you have invited and where you signed up (for example a QR code or which ad you came through), when you take part in the waitlist referrals.
Your name, delivery and billing address and contact details, when you make a purchase.
Order history and communication with us.
Technical and usage data via cookies, such as device, browser and how you interact with the site.
Visit statistics without cookies: which pages are viewed, where the visit came from (for example an ad link or another site), approximate country and type of device and browser.

Why we process your data, and on what legal basis

We process your data for the following purposes:

To complete purchases and deliver your order. Legal basis: performance of the contract with you.
To send newsletters and information about the launch and offers. Legal basis: your consent.
To give the right reward in the waitlist referrals (discount, free box and the surprise in it). Legal basis: fulfilling the referral terms, which you accept when you sign up.
To prevent cheating in the referrals: when you sign up and confirm, we store a scrambled short form of the network you came from (part of the IP address, which can't be read back) and when you confirmed. Legal basis: our legitimate interest in rewards going to real people.
To measure and improve marketing and ads. Legal basis: your consent.
To understand how the site is used and which channels work, with our own visit statistics without cookies. Legal basis: our legitimate interest in following up the site and our marketing.
To meet requirements in accounting and tax law. Legal basis: legal obligation.

Cookies and tracking

The site uses cookies. Necessary cookies are required for the site to work and are always set. Cookies for statistics and marketing are only set once you accept them in our cookie banner, and you can change your choice at any time.

To measure our ads we use Meta's pixel and Conversions API. They are only activated after your consent. You can also control how Meta uses off-Facebook activity in your Meta settings.

Our own visit statistics use neither cookies nor any script in your browser. Our server notes the page view, and your IP address is mixed with a random value that changes every day into an id that can't be traced back. The IP address is never stored, and the same visitor can't be recognised from one day to the next.

Who we share data with

We never sell your data. We share it with providers that help us run the business and that process the data on our behalf:

Shopify, for the store, checkout and order handling.
Meta (Facebook and Instagram), for ad measurement when you have consented.
Payment providers, such as Klarna, to handle payments.
Logistics and shipping partners, to deliver your order.
Email and analytics tools, such as Resend for our emails, for sending messages and statistics.

Transfers outside the EU and EEA

Some of our providers, such as Meta, Shopify and Resend, may process data in the US. When data is transferred outside the EU and EEA it is done with appropriate safeguards, such as the European Commission's standard contractual clauses.

How long we keep your data

We keep your data for as long as it is needed for the purpose. Order data is kept for as long as accounting law requires. Data linked to the newsletter is kept until you unsubscribe or withdraw your consent. The anti-cheating data for the referrals is deleted once the rewards have been handed out, by 31 December 2026 at the latest. Visit statistics are kept for at most 13 months.

Your rights

Under the GDPR you have the right to:

Know what data we hold about you and get a copy of it.
Have inaccurate data corrected.
Have your data deleted in certain cases.
Request that processing be restricted, or object to it.
Receive your data in a machine-readable format and move it.
Withdraw a consent at any time, without affecting processing before then.

Complaints

If you believe we process your data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Changes to this policy

We may update this policy. The latest version is always on this page, with the date it was last changed.