Klarna Privacy Policy

This document is Klarna's consumer-facing privacy policy, governing the collection, use, storage, and sharing of personal data across Klarna's payment, buy-now-pay-later, shopping, and banking services, with legal bases including contractual necessity, legitimate interest, legal obligation, and consent depending on the processing activity. The policy states that Klarna collects a broad range of data categories including identity, financial, transactional, device, behavioral, location, and social media information, and the terms authorize sharing this data with merchants, credit bureaus, financial partners, marketing partners, and government authorities. Notably, the policy discloses that Klarna conducts automated decision-making including credit assessments that produce legal or similarly significant effects on users, a practice that under GDPR carries specific rights obligations including the right to human review, explanation, and to contest the decision. The policy engages GDPR as the primary framework for EU and UK users, CCPA and state privacy laws for California and US residents, and financial services regulations including those applicable to licensed payment institutions and credit providers across multiple jurisdictions. Material compliance considerations include the breadth of legitimate interest claims used to justify marketing and profiling activities, the adequacy of consent mechanisms for cookie-based and behavioral advertising, and the cross-border data transfer arrangements Klarna relies upon for transfers from the EU to third countries including the US.