Privacy Policy

Your privacy is important to us. This Privacy Policy explains how General Prepper collects, uses, stores and protects personal data when you shop with us, visit our website, contact our customer service or otherwise use our services.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.

1. Data controller

The data controller responsible for the processing described in this Privacy Policy is:

Jototoli AB / General Prepper
Company registration number: 559108-2572
Address: Box 231, 178 23 Ekerö, Sweden
Email: kundservice@generalprepper.com

2. What personal data do we process?

The personal data we process depends on how you use our services.

This may include:

• name
• address and delivery address
• email address
• telephone number
• order and purchase history
• information about products ordered
• payment-related information
• customer number and order number
• communications with customer service
• return and claim information
• company information when you purchase on behalf of a business or organisation
• technical information about how our website is used
• IP address and information from cookies and similar technologies
• information about which communications you open or interact with, where such measurement is used.

We always aim to limit processing to the personal data necessary for the relevant purpose.

3. When you make a purchase

When you shop with General Prepper, we process the personal data necessary to:

• receive and administer your order
• process payment
• pick and pack your order
• complete delivery
• send order and delivery information
• handle returns and claims
• provide customer service
• comply with our legal obligations.

The processing is primarily necessary for us to perform our contract with you.

Certain information is also processed so that we can comply with legal obligations, for example under applicable accounting and consumer protection legislation.

4. Payments

When you make a purchase, personal data may be shared with the payment provider handling the payment method you choose.

Depending on your country and the options available at checkout, we may offer payment solutions through Qliro as well as other payment methods such as card payments, Trustly and PayPal.

Payment providers may process personal data for purposes including payment processing, identity verification, fraud prevention and – where credit is offered – credit assessment.

In certain circumstances, the payment provider is an independent data controller for its own processing. Information about such processing can be found in the relevant provider's privacy policy and terms.

General Prepper does not store full card details where these are handled directly by the payment provider.

5. Delivery of your order

To deliver your order, we need to share relevant information with the carrier or logistics partner handling the shipment.

This may include:

• name
• delivery address
• telephone number
• email address
• information required to complete the delivery.

The information is used to complete the delivery and, for example, to send delivery notifications and shipping information.

6. Customer service

When you contact us, we process the information necessary to assist you.

This may include contact details, order number, previous communications, photographs, product information and information relating to a return or claim.

The processing takes place so that we can fulfil our obligations to you and handle your request.

In certain circumstances, the processing may also be based on our legitimate interest in providing good customer service and documenting how a matter has been handled.

7. Newsletters and marketing

If you subscribe to our newsletter or are otherwise eligible to receive marketing communications from us, we may process information such as:

• name
• email address
• previous purchases
• which communications you open
• which links you click
• which product areas you have shown an interest in.

The information may be used to send relevant information, offers, product news, guides and other content from General Prepper.

The legal basis depends on how the marketing is carried out and may, for example, be your consent or our legitimate interest where permitted by applicable law.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the communication or by contacting us.

8. Personalisation and marketing

If you have provided the necessary consent, we may use information about how you use our website to personalise marketing and measure the effectiveness of our campaigns.

This may involve information being shared with or processed through services for advertising, analytics and marketing.

Such processing may be used to:

• measure advertisements and campaigns
• understand how visitors use the website
• create audiences for advertising
• display more relevant advertisements
• limit how often the same advertisements are shown.

Where processing requires consent, it will not take place until you have provided that consent.

You can change or withdraw your choices through the website's cookie settings.

9. Cookies and similar technologies

Generalprepper.com uses cookies and similar technologies.

Some cookies are necessary for the website and checkout to function. Others may be used for purposes such as statistics, analytics, personalisation and marketing.

Cookies that require consent are only activated after you have made your choice.

More information about the cookies and services we use can be found in our Cookie Policy and in the website's cookie settings.

10. Fraud prevention and security

We may process certain information to prevent and detect fraud, misuse, security incidents and other unauthorised activities.

The processing may be based on our legitimate interest in protecting General Prepper, our customers and our systems.

Payment providers may also carry out their own security and fraud prevention checks.

11. Accounting and legal obligations

Certain information must be retained so that we can comply with our legal obligations.

This includes, for example, information that must be retained under applicable accounting legislation.

Such information cannot therefore always be deleted immediately upon request, even if it is no longer used for other purposes.

12. Who do we share personal data with?

To operate our business, we use various suppliers and business partners.

Personal data may, for example, be shared with or processed by:

• e-commerce platform and IT providers
• warehouse and logistics partners
• carriers
• payment providers
• accounting and financial systems
• customer service tools
• email and communication services
• marketing platforms
• analytics and statistics tools
• technical operations and security providers.

Suppliers that process personal data on our behalf may only process the data in accordance with our instructions and applicable data processing agreements.

In other situations, the recipient may be an independent data controller for its own processing, for example certain payment providers and carriers.

13. Transfers outside the EU/EEA

Some of our suppliers or their subcontractors may process personal data outside the EU/EEA.

Where such a transfer takes place, we ensure that there is a valid legal basis for the transfer and that appropriate safeguards are used in accordance with the GDPR.

This may, for example, be based on an adequacy decision or the European Commission's Standard Contractual Clauses where applicable.

14. How long do we retain your data?

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless we are required by law to retain it for a longer period.

The retention period therefore depends on the type of information concerned.

For example:

• order information may be retained for as long as necessary to handle the purchase and any subsequent claims
• accounting records are retained for the period required by law
• customer service matters are retained for as long as necessary to handle and document the matter
• marketing information is processed until you unsubscribe or the processing is otherwise no longer justified
• cookie information is retained according to the retention periods stated in our cookie settings.

When information is no longer required, it is deleted or anonymised.

15. Your rights

Under the GDPR, you have a number of rights in relation to our processing of your personal data.

Depending on the circumstances, you may have the right to:

• obtain information about the personal data we process about you
• have inaccurate information corrected
• request deletion of personal data
• request restriction of processing
• object to certain processing
• receive certain data in a structured, commonly used and machine-readable format
• withdraw consent you have previously provided.

Certain rights only apply under specific circumstances.

For example, the right to erasure does not mean that we are required to delete information that we are legally obliged to retain.

16. Right to object to direct marketing

You always have the right to object to the processing of personal data for direct marketing purposes.

You can unsubscribe from our email communications using the unsubscribe link in the communication or by contacting us.

When you unsubscribe, we may need to retain limited information to ensure that you do not receive further marketing communications to which you have objected.

17. Withdrawal of consent

Where processing is based on your consent, you can withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.

Consent relating to cookies and similar technologies can be managed through the website's cookie settings.

18. Automated decisions and credit assessments

When you select certain payment options, such as invoice or instalment payments, the payment provider may carry out credit assessments or automated checks.

Such processing is carried out by the relevant payment provider in accordance with its own terms and privacy policy.

General Prepper does not decide whether Qliro or another credit provider grants you credit.

19. Security

We implement appropriate technical and organisational security measures to protect personal data against, among other things, unauthorised access, alteration, loss and unlawful processing.

The measures are adapted to the type of information processed and the risks associated with the processing.

20. Complaints

If you have questions or concerns about how we process your personal data, you are welcome to contact us.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

Depending on the circumstances, this may include the supervisory authority in the EU/EEA country where you live, work or where you believe an infringement has taken place.

21. Changes to this Privacy Policy

We may update this Privacy Policy when our services, systems or legal requirements change.

The latest version is always available at generalprepper.com.

For significant changes, we may also provide information on the website or through other appropriate channels.

Last updated: 2026-10-06

22. Contact us

If you have questions about our processing of personal data or wish to exercise any of your rights, you are welcome to contact us.

Jototoli AB / General Prepper
Company registration number: 559108-2572
Address: Box 231, 178 23 Ekerö, Sweden
Email: kundservice@generalprepper.com