Privacy Policy
Last updated: 15 September 2026
RWA Lifestyle respects your privacy. This Privacy Policy explains how we process personal data when you visit rwalifestyle.com, contact us, or join RWA Club.
1. Data Controller
The data controller is:
Aktiebolaget Ekstrand och Bardh
Company registration number: 556858-2489
Simmenäsvägen 123
441 91 Alingsås
Sweden
RWA Lifestyle is the brand used on the website.
Privacy and personal data enquiries:
privacy@rwalifestyle.com
General customer support:
support@rwalifestyle.com
2. Personal Data We Process
The personal data we process depends on how you use the website.
We may process:
- your email address when you join RWA Club,
- information about your marketing consent,
- language preference and other website preferences,
- information you provide when contacting us,
- technical information required for website operation, security and abuse prevention,
- information about how the website is used where you have consented to optional analytics, onsite tracking or similar technologies.
We aim to process only personal data that is necessary for the relevant purpose.
3. RWA Club and Email Marketing
If you join RWA Club, we process your email address in order to send news, product launches, offers and other marketing communications from RWA Lifestyle.
The legal basis for such email marketing is your consent.
You may withdraw your consent and unsubscribe at any time using the unsubscribe link contained in our emails.
We use double opt-in. This means that you may be required to confirm your email address through a message sent to the address you registered before your subscription becomes active.
4. Contact and Support
If you contact us, we may process the contact details and information you provide in order to handle and respond to your enquiry.
Depending on the nature of the enquiry, processing may be necessary to take steps at your request, perform a contract, comply with a legal obligation, or be based on our legitimate interest in providing support and communicating with visitors and customers.
5. Klaviyo
We use Klaviyo to manage RWA Club, subscriptions and email communications.
When you join RWA Club, personal data may therefore be processed by Klaviyo on our behalf in order to administer the subscription, manage consent and unsubscribe requests, and deliver relevant email communications.
6. Cloudflare Turnstile
We use Cloudflare Turnstile to protect website forms against automated submissions, abuse and malicious traffic.
In connection with this service, Cloudflare may process technical information required to assess whether a request originates from a legitimate user or automated traffic.
This processing is used for security and abuse prevention purposes.
7. Cookies, Analytics and Onsite Tracking
The website may use cookies and similar technologies.
Technology that is necessary for the website's basic operation and security may be used without optional consent where permitted under applicable law.
Optional analytics, onsite tracking and marketing-related technologies are activated only where the required consent has been provided.
You can accept, reject or change your choices through the website's cookie settings.
More information about the technologies actually used is available in our Cookie Policy.
8. Why We Process Personal Data
We may process personal data in order to:
- administer RWA Club,
- manage and document consent,
- send communications you have requested,
- process marketing unsubscribe requests,
- respond to questions and support requests,
- remember certain website preferences,
- protect the website and our forms against fraud, automated submissions, abuse and security threats,
- understand and improve use of the website where you have consented to such analytics,
- comply with applicable legal obligations.
9. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required to comply with applicable legal obligations.
Data used for an active RWA Club subscription is processed while the subscription remains active.
If you unsubscribe from marketing, limited information regarding your opt-out may need to be retained in order to ensure that we continue to respect your request and do not resume marketing without a new valid basis.
Support requests and other communications are not retained for longer than justified by the nature of the matter and our applicable legal obligations.
10. Recipients and Service Providers
We may share personal data with service providers that process information on our behalf or otherwise require information in order to provide services to us.
These may include providers of:
- email and customer communications,
- hosting and technical operations,
- security and bot protection,
- analytics and website technology.
We do not disclose personal data to third parties for their own unrelated marketing purposes merely because you have joined RWA Club.
11. Transfers Outside the EU/EEA
Some of our service providers may process personal data outside the EU/EEA or use subprocessors that do so.
Where such processing constitutes an international transfer subject to applicable data protection rules, the transfer will be made using an applicable legal transfer mechanism and appropriate safeguards.
These may include an adequacy decision by the European Commission or the European Commission's Standard Contractual Clauses, together with additional safeguards where required.
12. Your Rights
Under applicable data protection law, and depending on the circumstances, you may have the right to:
- receive information about how your personal data is processed,
- request access to your personal data,
- have inaccurate personal data corrected,
- request deletion of personal data,
- request restriction of processing,
- object to certain processing,
- receive certain data in a structured and machine-readable format where the right to data portability applies,
- withdraw consent where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
To exercise your rights, contact:
We may need to verify your identity before processing a request where this is necessary to protect your personal data.
13. Complaints
If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.
In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
14. Security
We use technical and organisational measures intended to protect personal data against unauthorised access, loss, manipulation and other unlawful processing.
However, no technical service can be guaranteed to be completely free from security risks.
15. Changes to This Policy
We may update this Privacy Policy when our services, providers or processing activities change.
The current version will always be published on this page and the date of the latest update will be stated at the top.