Buzzin' Bees ("we", "us", "our") operates the website buzzin-bees.com. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish law.
1. Data Controller
Buzzin' Bees
Svinninge, Sweden
Email: hello@buzzin-bees.com
2. What Data We Collect
When you contact us
Name and email address, the content of your message. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
When you place an order
Name, delivery address, email address, payment reference (via Swish or Klarna — we do not store full card details). Legal basis: contract performance (Art. 6(1)(b) GDPR).
When you use Ask Bee (AI chatbot)
Your questions are processed by the Claude API (Anthropic, USA). Questions are not stored beyond the active session. Legal basis: legitimate interest. See our AI Disclosure for details.
Website analytics
We use privacy-friendly analytics that do not use cookies or collect personal identifiers. No consent is required.
3. How We Use Your Data
- To fulfil and deliver orders
- To respond to enquiries
- To comply with Swedish food safety and tax obligations
- To improve our website (aggregated analytics only)
We do not sell, rent or share your personal data with third parties for marketing purposes.
4. Data Retention
- Order data: 7 years (Swedish Bookkeeping Act, Bokföringslagen)
- Contact messages: 2 years or until resolved
- Chatbot sessions: Not retained after session ends
5. Third-Party Processors
- Supabase (database hosting, EU region) — Privacy policy
- Vercel (web hosting, EU edge) — Privacy policy
- Anthropic / Claude API (AI chatbot, USA) — subject to Anthropic's data processing terms
- Swish / SEB (payments) — subject to SEB's privacy policy
All processors are bound by GDPR-compliant Data Processing Agreements.
6. Your Rights
Under GDPR you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion ("right to be forgotten")
- Restriction — limit how we process your data
- Portability — receive your data in a portable format
- Object — object to processing based on legitimate interest
To exercise any right, email hello@buzzin-bees.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Swedish Data Protection Authority (IMY — Integritetsskyddsmyndigheten).
7. Cookies
We use only strictly necessary cookies (session management). For full details see our Cookie Policy.
8. Changes to This Policy
We may update this policy. Material changes will be notified on the website. Continued use of the site after changes constitutes acceptance.