Privacy Policy

Updated October 9th, 2026.

Who we are

We only collect the personal data we need to ship books, send the newsletter you ask for, and run this website. We never sell your data.

The data controller is Kavalri Games AB (org. no. 559164-5089) which runs Equestrian Academy (Ryttarakademin) and publishes under the name Kavalri Publishing ("we", "us"). Address: Brännkyrkagatan 103b, 117 26 Stockholm, Sweden. Contact: contact@equestrian.academy.

This policy covers equestrian.academy and its webshop. It applies to visitors, customers and newsletter subscribers.

What we collect and why

We collect different data for different purposes, and each purpose has its own legal basis under the GDPR.

  • Process and ship your order: Name, delivery address, email, phone number (if you give one), order contents. Legal basis: Contract (Art. 6.1.b).

  • Accounting and tax records: Order and payment records, VAT information. Legal basis: Legal obligation (Art. 6.1.c, Swedish Bookkeeping Act).

  • Order confirmations and customer service: Email, order details, the messages you send us. Legal basis: Contract, or our legitimate interest in answering you (Art. 6.1.b / 6.1.f).

  • Newsletter (The Carwen Chronicle): Email address, first name, birthday (optional). Legal basis: Consent (Art. 6.1.a).

  • Run, secure and improve the website: IP address, device and browser type, pages viewed, language choice. Legal basis: Legitimate interest (Art. 6.1.f); consent where cookies require it (Art. 6.1.a).

We do not use your data for profiling or targeted advertising.

Orders, payments and shipping

When you order, your data goes to the companies that take payment and deliver your book, and nowhere else.

  • Website and webshop: Squarespace hosts the site, takes the order and stores order records.

  • Payment: Stripe processes card payments, Link (Stripe's saved-payment service) and Klarna payments. PayPal payments are handled by PayPal. We never see or store your full card number or your PayPal login. Klarna and PayPal also process the details you give them under their own terms.

  • Delivery: We share your name, address and, when needed for delivery notices, your email or phone number with the carrier (PostNord).

  • Order emails: Confirmations are sent from no-reply@squarespace.info or contact@equestrian.academy. If you do not see yours, check your spam folder.

Prices include VAT. We keep order and payment records for the period required by Swedish accounting law (see How long we keep data).

Newsletter and marketing

You only get newsletter (The Carwen Chronicle) if you choose to, and you can stop it at any time.

  • How you sign up: through the form on our homepage, or by ticking the box at checkout. The box is never pre-ticked. Buying a book does not subscribe you.

  • What we send: news about the books, releases and the world of Carwen Hall. We store your email address, first name and, optionally, birthday.

  • Who sends it: Mailchimp (Intuit), which also records whether you opened or clicked an email so that we can see what is useful.

  • Unsubscribe: every email has an unsubscribe link, or write to contact@equestrian.academy. Your consent can be withdrawn at any time.

Cookies and analytics

We use the cookies needed to make the site and checkout work, and we use others only if you accept them.

  • Necessary cookies (no consent needed): Squarespace sets cookies that keep your shopping cart (CART and hasCart, two weeks), keep checkout and order status pages working, protect against fraud (_ssid, up to four years) and forged requests (Crumb), log site errors (_dd_s, four hours), and remember your cookie choices (30 days).

  • Language: our translation service Weglot places a necessary cookie that remembers which language you chose.

  • Analytics cookies (only if you accept them): Squarespace Analytics uses the cookies ss_cid, ss_cpvisit and ss_cvr (two years) and ss_cvisit and ss_cvt (30 minutes) to count unique visitors and see which pages and sources bring people to the site. They are off until you accept them in the cookie banner.

  • Marketing and third parties: we do not use advertising cookies. Mailchimp's site tracking, which connects our webshop to our newsletter tool, may set cookies that recognise you as a visitor or customer and link your activity on the site to your subscriber profile. These cookies are only used if you accept them in the cookie banner.

You can change or withdraw your cookie choices at any time through the cookie banner or the link in the footer. You can also block cookies in your browser settings, but parts of the shop may stop working.

Who we share data with

We share data only with the companies that help us run the site and the shop, and with authorities when the law requires it.

  • Squarespace: Hosts the website and webshop, stores orders. Data involved: Visitor, order and customer data.

  • Stripe: Processes card, Link and Klarna payments. Data involved: Payment and billing details.

  • Klarna: Offers Klarna as a payment method. Data involved: Payment, billing and delivery details.

  • PayPal: Processes PayPal payments. Data involved: Payment, billing and delivery details.

  • Mailchimp (Intuit): Sends the newsletter. Data involved: Email address, first name, email activity, birthday (optional).

  • Weglot: Translates the website. Data involved: Page content, language choice.

  • PostNord / carrier: Delivers your book. Data involved: Name, address, contact details for delivery.

  • Google Workspace: Handles customer correspondence. Data involved: Emails you send us.

These companies act as our processors under data processing agreements, or as independent controllers for their own services. We do not sell your data.

Transfers outside the EU/EEA

Some of our providers, such as Squarespace, Stripe, PayPal and Mailchimp, are based in or use servers in the United States, so your data can leave the EU/EEA.

When that happens, the transfer is protected by an approved safeguard: the provider's certification under the EU-US Data Privacy Framework, or the European Commission's Standard Contractual Clauses. You can ask us for details at contact@equestrian.academy.

How long we keep data

We keep data only as long as we need it for the purpose it was collected for.

  • Order and payment records: 7 years after the end of the calendar year of the purchase (Swedish Bookkeeping Act).

  • Customer service messages: [12 months] after the matter is closed.

  • Newsletter subscription: Until you unsubscribe. We then keep a record of your opt-out so that you are not emailed again.

Your rights

You decide what happens to your data, and you can ask us about it at any time.

  • Access: ask for a copy of the data we hold about you.

  • Correction: ask us to fix data that is wrong or incomplete.

  • Erasure: ask us to delete your data, unless we must keep it by law (such as accounting records).

  • Restriction and objection: ask us to pause the use of your data, or object to uses based on our legitimate interest.

  • Portability: ask for your data in a common, machine-readable format.

  • Withdraw consent: at any time, for example by unsubscribing. This does not affect what we did before.

Write to contact@equestrian.academy.

If you believe we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm.

Children and teens

  • In Sweden, children aged 13 and older can consent to the use of their data themselves. If you are under 13, you need a parent or guardian's permission before you sign up for the newsletter.

  • We do not use your data for targeted advertising or profiling.

  • Orders are placed by the person who pays, and we ask young readers to buy with a parent or guardian.

  • If you think a child under 13 has given us data without permission, write to contact@equestrian.academy and we will delete it.

Security, changes and contact

We protect your data with encrypted connections (HTTPS) and by using providers that apply their own security measures. Access to customer data is limited to the people who need it.

We may update this policy. The date at the top shows when it was last changed. If a change matters for subscribers, we will tell you by email.

Questions about this policy or your data: contact@equestrian.academy