Privacy Policy

Last updated: 2026-02-27

1. Data Controller

The data controller responsible for processing your personal data is:

Louise Vilmar, DBA: SKANDINAVIOUS, Skandinavious By Louise Vilmar
Legal form, Sole Trader
Organisation number: 730825-1565
Nils Pers Vaeg 20
232 51, Aakarp
Sweden
Email: privacy@skandinavious.com

If you have any questions about this Privacy Policy or how we process your personal data, please contact us using the details above.

---

2. Personal Data We Collect

We collect personal data when you visit our website, place an order, create an account, submit a review, or contact us.

Information you provide

• Name

• Billing and shipping address

• Email address

• Phone number (if provided)

• Order details

• Account login details (if you create an account)

• Information included in customer reviews

Payment information

Payments are processed by secure third-party payment providers. We do not store full card details. We receive only limited transaction information such as payment confirmation and status.

Automatically collected information

When you visit our website, certain technical information may be collected, including:

• IP address

• Browser and device information

• Pages visited and interactions

• Referring website

This information is collected via cookies and similar technologies. Analytics cookies are only used where you have provided consent.

---

3. Purposes and Legal Bases

We process personal data for the following purposes:

To process and fulfil orders

Legal basis: Performance of a contract (Article 6(1)(b) GDPR) and, where applicable, our legitimate interest in requesting feedback about completed purchases (Article 6(1)(f) GDPR).

• Processing payments

• Delivering products

• Sending order confirmations

• Handling returns and customer service

• Providing account functionality

• Sending review requests related to completed purchases

To comply with legal obligations

Legal basis: Legal obligation (Article 6(1)(c) GDPR)

• Accounting and bookkeeping under Swedish law

• Retention of transaction records for 7 years

To improve our website

Legal basis: Consent (Article 6(1)(a) GDPR)

We use Google Analytics to understand how visitors use our website. Analytics tracking is activated only after consent via our cookie banner. You may withdraw consent at any time.

We do not conduct profiling or automated decision-making that produces legal or similarly significant effects.

We do not currently send marketing emails.

---

4. Sharing of Personal Data

We share personal data only where necessary to operate our business and provide our services.

Categories of recipients may include:

• Our ecommerce platform provider (Shopify), including Shopify-hosted services and native applications

• Payment service providers

• Fulfilment and shipping partners

• Order management and marketplace integration providers

• Customer review service providers

• IT and technical service providers

• Analytics providers

These providers process personal data either on our behalf as data processors or, where applicable, as independent controllers.

For orders shipped to the United States necessary delivery information (name, address and order details) is shared with our United States fulfilment partner solely for the purpose of fulfilling the order.

We do not sell personal data.

---

5. International Transfers

As a Swedish company, we primarily process and store personal data within the EU/EEA.

Our store is hosted by Shopify. For European merchants, Shopify stores merchant and customer personal data at rest within the EU/EEA, the UK and/or Switzerland. However, Shopify and certain service providers may access or process personal data outside the EU/EEA as part of their global infrastructure and support operations.

Where personal data is transferred outside the EU/EEA, appropriate safeguards are applied in accordance with GDPR, such as EU Standard Contractual Clauses or transfers to countries covered by an adequacy decision where applicable.

---

6. Data Retention

We retain personal data only for as long as necessary:

• Order and accounting data: 7 years (Swedish bookkeeping law)

• Customer account data: for as long as the account remains active. Accounts may be deleted or anonymised after a period of prolonged inactivity

• Customer service correspondence: generally retained for up to 12 months, unless longer retention is necessary to establish, exercise or defend legal claims

• Analytics data: according to our Google Analytics retention settings

When data is no longer required, it is deleted or anonymised.

---

7. Your Rights

If you are located in the EU/EEA, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of your data

• Request restriction of processing

• Receive your data in a portable format

• Object to certain types of processing

• Withdraw consent at any time where processing is based on consent

To exercise your rights, please contact us using the contact details provided under Section 1 (Data Controller).

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY) or your local supervisory authority.

---

8. Cookies

We use cookies that are necessary for the operation of our website. With your consent, we also use analytics cookies.

You can manage your cookie preferences via our cookie banner.

---

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. Payment transactions are processed through secure, PCI-compliant providers. Access to personal data is limited to those who require it for legitimate business purposes.

---

10. Additional Information for California Residents

If you are a California resident, you may have certain rights under California privacy laws, including the right to request access to or deletion of your personal information.

We do not sell personal information.

To submit a request, please contact us using the contact details provided under Section 1 (Data Controller).

---

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our processing activities. The latest version will always be published on this page.