Privacy Policy

Last updated: November 11, 2025

Pine Enterprises AB ("we," "us," or "our") operates the Pine Defence website at pinedefence.com and the Heimdall mobile application (collectively, the "Services"). This Privacy Policy explains how we collect, use, and protect your personal information.

Important: Our Services are intended for adults only. Persons under 18 years of age are not permitted to use our Services or purchase our products.

1. Introduction & Scope

This Privacy Policy applies to:

  • The Pine Defence website (pinedefence.com)
  • The Heimdall mobile application (available on App Store and Google Play)
  • Communications related to purchasing our Heimdall 1 ground sensor device
  • Customer support interactions

2. Information We Collect

Website

Our website collects minimal technical information through our hosting infrastructure:

  • Basic server logs (IP addresses, browser information, pages visited)
  • Technical data processed by Cloudflare (our content delivery network) for security and performance

Mobile App

The Heimdall app:

  • Stores device settings and user preferences locally on your device only
  • Processes sensor data from the Heimdall 1 device entirely locally on your device
  • Does not transmit any sensor data or personal information to our servers

Sales Inquiries

When you contact us to purchase a Heimdall 1 device, we collect:

  • Your name
  • Email address
  • Shipping address
  • Payment information (processed through third-party payment processors)

3. How & Why We Use Your Information

Legal Bases (for EU/EEA users)

  • Legitimate interests: Website operation, security, and technical maintenance
  • Contract performance: Processing sales, shipping products, customer support
  • Legal compliance: Tax obligations, record-keeping requirements

Purposes

We use your information to:

  • Operate and maintain our website and app
  • Process and fulfill device orders
  • Provide customer support
  • Comply with legal and tax obligations
  • Protect against fraud and security threats

4. Cookies & Similar Technologies

Our website does not use cookies or tracking technologies. However, Cloudflare (our CDN provider) may use necessary technical cookies for security and performance purposes.

5. Sharing & Disclosure

We share personal information only when necessary:

Service Providers:

  • Cloudflare (website hosting and security)
  • Shipping companies (for product delivery)
  • Payment processors (for transaction processing)

Legal Requirements:

We may disclose information if required by law, court order, or to protect our legal rights.

6. International Data Transfers

As a Swedish company, we operate primarily within the EU. Some service providers (like Cloudflare) may process data internationally using appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Data Retention

We retain personal information:

  • Customer data: As long as permitted by applicable law, typically 7 years for accounting and tax purposes
  • Technical logs: For a limited period necessary for security and operational purposes
  • App data: Settings and preferences are stored locally on your device and can be deleted by uninstalling the app

8. Security

We implement appropriate security measures including:

  • HTTPS encryption for website communications
  • Encrypted email communications
  • Encrypted storage of customer data
  • Regular security assessments of our systems

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. Your Rights & Choices

For EU/EEA Residents (GDPR Rights)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate information
  • Erasure: Request deletion of your data (subject to legal obligations)
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a structured format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent

For US Residents

California (CCPA/CPRA): You may have rights to know, delete, correct, and opt-out of the sale of personal information. We do not sell personal information.

Virginia/Colorado: Similar rights to access, delete, correct, and opt-out may apply.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.

10. Children's Privacy

Our Services are intended for adults only. We do not knowingly collect information from persons under 18 years of age. If we become aware that we have collected information from someone under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website. Your continued use of our Services after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us:

Pine Enterprises AB
Email: [email protected]

For EU residents: You also have the right to lodge a complaint with your local data protection authority.