Privacy Policy for Haypp.co.uk

Privacy Policy

 

Updated: 24 June 2026

 

In this privacy notice (the 'Notice') we describe how we collect, use, and share your personal data when using our websites, digital channels, making a purchase, when you communicate with us, for example when contacting customers service, and when you participate in contests, surveys and other activities that we arrange.

 

Personal data means any information that, directly or indirectly, identify you, for example your name or your IP address.

 

It is important to us that you feel comfortable with how we process your personal data. We take measures to ensure that your personal data is protected and that our use of personal data complies with applicable regulations and laws and our internal procedures and routines.

 

We never sell your personal data to any third party without your consent.

To make it easy for you to find the information you are looking for we have divided the information in this Notice into the following sections. You can click on the relevant section in the list below to jump directly to the section in question.

1. Who is responsible for the use of your personal data?

2. Which personal data do we collect?

3. From where do we collect personal data?

4. Why do we use your personal data?

5. Based on which legal bases do we use your personal data?

6. Which recipients do we share personal data with?

7. Which rights do you have?

8. Cookies and other technologies

9. Where we process personal data

10. Updates to this Notice

11. Any questions?

12. Detailed information on our use of personal data

 

1. WHO IS RESPONSIBLE FOR THE USE OF YOUR PERSONAL DATA?

 

The company that you interact with is, as a starting point, responsible for its own use of your personal data. In this Notice 'we', ' our' and 'us' refer to the relevant company that is responsible for the use of your personal data.

 

Snusbolaget Norden AB is, however, responsible together (joint controller) with the relevant company for the use of your personal data for certain purposes, including to communicate and send offers to you in various channels and to carry out analysis for customer insights. In section 4 below, we have, in relation to each relevant purpose, stated when Snusbolaget Norden AB is jointly responsible for the processing of personal data.

 

To ensure that your personal data is covered is safeguarded the relevant group companies have entered into an agreement which includes an arrangement which governs the use of personal data. This information reflects the essence of the arrangement. For further information about our joint arrangement, please contact us. Contact details can be found in section 11 below.

 

In the table below, we have outlined the companies that are covered by this Notice and their respective websites. For the sake of clarity, we have also included information regarding to which counties each company delivers its products. Please see section 11 for contact information to each company.

 

Company

Website

Delivery countries

Haypp Limited

(reg. no. 13876184)

haypp.com/uk

northerner.com/uk

The United Kingdom of Great Britain and

Northern Ireland

Snusbolaget Europa AB
(reg. no. 559466-7122)

snusbolaget.se
snusbrev.se

nettotobak.com

 

haypp.com/de

haypp.com/se

haypp.com/at

northerner.com/de

northerner.com/at

Sweden, Germany and Austria

Snusbolaget Norden AB

(reg. no. 556801-3683)

 

Haypp GmbH

(HRB 729097)

 

Snushjem.no AS
(reg. no. 919 649 585)

Snusnetto.com

 

 

Vapeglobe.de

 

 

snus.com

snushjem.no

snuslageret.no

Sweden

 

 

Germany

 

 

Norway

Haypp CH GmbH

Snsumarkt.ch

Switzerland

Contact details to the companies can be found in section 11 below.

 

2. WHICH PERSONAL DATA DO WE COLLECT?

 

We only collect the personal data that we need.

 

We collect and process the following categories of personal data, but which personal data that we collect about you in particular depends on how you interact with us:

 

· Identity information. Information that makes it possible to identify you, for example your name.

· Contact information. Information that makes it possible to contact you, for example your address, e-mail address and telephone number.

· Order and delivery information. Information about your order and chosen shipping method, for example the product, purchase price, order date and shipping method.

· Activity information. Information regarding your activity when using our websites, digital channels, and services, for example clicks and visits and your behaviour when using the websites and our digital channels, and when you contact or otherwise interact with us, for example when you contact customer service or participates in a market survey.

· Profile information. Information regarding your profile, for example your gender, age and life style.

· Communication. Contents of communication with us, for example contents in e-mail communication with customer service or the responses you provide when participating in a market survey.

· Technical information. Technical information about the device that you use when visiting our websites and digital channels, for example type of device, version of browser and operating system.

 

3. FROM WHERE DO WE COLLECT PERSONAL DATA?

 

We collect personal data from the following sources:

 

· Yourself. When you make a purchase on the website, use our websites and other digital channels, contact customer service or participate in a market survey we collect personal data about you.

· Payment service providers. When you make a purchase on the website, we collect for example identity information, contact information and order and delivery information that the payment service provider shares with us.

· Couriers and shipping companies. To ensure that your delivery has arrived or to track your shipment we collect order and delivery information that the couriers and shipping companies that we collaborate with share with us.

· Group companies. The companies within the group collaborate with each other and therefore shares information for example in order to communicate and send offers in various channels.

· Partners. We collaborate with different companies, for example advertising networks, marketing platforms, and websites that publish our advertisements, and collect the personal data that they share with us to for purposes including to manage the relationship with the partner, and to follow up and evaluate campaigns and our communication in digital channels.

· Social network platforms. If you visit our pages and channels on social network platforms, we collect the personal data that you provide to us when using these channels, or which the platforms share with us.

· Review platforms. If you have submitted a review or rating about us on an external review platform, such as Trustpilot, we collect, where relevant, your personal data in order to display your review on our website.

· External information services. We supplement the personal data that we collect about you with information from external information services. This in order to communicate and send offers in various channels, and to carry out analysis for customer insights.

 

4. WHY DO WE USE YOUR PERSONAL DATA?

 

We use your personal data for various purposes, including to manage your orders, provide our services, communicate with you, to make evaluations, follow-ups and analyses, to manage and defend legal claims and to fulfil legal obligations.

 

Below we further explain the purposes with our use of personal data and provide examples of processing activities carried out for respective purpose. Please note that not all processing activities may apply to you. Which processing activities that you are covered by depend on how you interact with us.

 

To read more about which categories of personal data, which legal basis that we rely on for the use of your personal data for each purpose and for how long your personal data is stored, please see in section 12 below.

 

Manage your order or subscription

 

We use your personal data to manage your order on our website, for example to process your order, communicate with you regarding the order and to handle any complaints. We also use your personal data to manage a subscription that you have ordered, for example to process the subscription and communicate with you regarding the subscription. You need to provide the information that we have requested when you place your order, since the information that we request is necessary in order to process your order. If you do not provide the information that we have requested, we unfortunately cannot process your order.

 

Provide services on our websites

 

We also use your personal data to provide services on our websites, for example to register your user account and give you access to My Pages on the website.

 

Respond to questions and provide customer service

 

If you contact us for example by e-mail or phone, we use the personal data that share with us to respond to your questions or to provide customer service. For the same purpose, we may also contact you, for example by calling you.

 

Ensure the quality of our customer service, to improve our customer service and for traceability

 

We record telephone calls and save chat logs if you contact customer service. This material is reviewed as necessary to ensure the quality of our customer service and to improve our customer service.

 

We use tools to automatically summarise telephone calls and chats, which are stored in the customer matter. This provides us with a record and documentation of what we have agreed upon during our contact, for example, regarding changes to your order.

 

Carry out age verification

 

We use your personal data to verify your age in connection with your order. As outlined in our terms and conditions, you must be at least 18 years old in order to place an order.

 

We have implemented functionality on the website that allows you to verify your age in an easy way. If needed, your age will be verified by comparing a photograph of your face with an image of an ID document, in which case we will ask for your consent to carry out the age verification, since the check involves processing of biometric data. If you do not provide your consent, and we cannot verify your age, we will not be able to confirm your order.  

 

Communicate and send offers in various channels

 

We use your personal data to send offers and personalized communications to you from us and our partners in various digital channels, for example by e-mail, on social media platforms or on other websites.

 

You can at any time unsubscribe from communications by clicking on the unsubscribe link in the mailing or by contacting customer service. To communicate relevant information and offers, we may profile your personal data by analysing previous purchases and your use of our websites, digital channels and services.

 

We also share your personal data for this purpose with social network platforms and marketing platforms. Please see section 6 below for further information on which recipients that we share personal data with.

 

Snusbolaget Norden AB is jointly responsible for the processing of your personal data for this purpose.

 

Provide customized customer benefits

 

We use your personal data to provide you with customized customer benefits. In order to provide customized customer benefits, we perform profiling by analyzing purchasing behavior and history and we sort customers into different groups based on, among other things, how often and how much they shops. This means that different customers can receive different benefits and advantages depending on their purchasing behavior and history.

 

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

 

Carry out analysis for customer insights

 

We use your personal data to carry out analysis for customer insights on an aggregated level, for example for different customer groups. This in order to obtain a better understanding and insight into our customers' buying behaviour and buying patterns. For this purpose, we can also supplement your personal data with information collected from external information services. We do not profile your personal data for this purpose since the result of the analysis is on an aggregated (consolidated) level. We share anonymised customer insights which do not include any personal data about you with manufacturers and partners for their use in their businesses.

 

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

 

Follow up and evaluate campaigns, advertisements and our communications in digital channels

 

We process your personal data to follow up and evaluate campaigns, advertisements and our communications with which you have interacted in digital channels, for example, if you have clicked on a marketing message or an advertisement from us on an external website or on social media.

 

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

             

Follow-up and analyse the business and sales

 

We process your personal data to compile reports on an aggregated level and statistics to follow-up and analyse the business and sales. By way of example, we analyse sales statistics, and compile order and delivery information to ensure that we your products in stock and to understand which products that are more popular than other products. We do not profile your personal data for this purpose.

 

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

 

Carry out contests, events and other activities

 

If you participate in a contest, event or another activity that we arrange, we use your personal data to carry out the contest, event or activity, for example to register your participation, to communicate with you regarding the activity and, where applicable, publish information on winners on our websites and in our digital channels.

 

Carry out market surveys

 

If you choose to participate in a market survey that we carry out we collect the personal data that you provide in connection with the survey. We also use personal data that we already process about you, such as the purchases you have made, to determine the target group, scope and content of a specific market survey.

 

Market surveys help us better understand your shopping experience and your experience of our service. Your opinions about our business, products and services are important to us. You can unsubscribe from mailing at any time by clicking on the unsubscribe link in the mailing or by contacting customer service.

 

If you take part in a meeting with a supplier in connection with a market survey, we will share your name and contact details with the supplier for the same purpose. For more information, please see the section below on the recipients with whom personal data is shared.        

 

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

 

Develop and improve the business, our business methods and strategies

 

We use your personal data when we carry out analysis on an aggregated level to develop and improve the business, our business methods and business strategies. This in order to enable us to continuously provide an even better shopping experience and customer service. We do not profile your personal data for this purpose.

 

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

 

Develop and improve our services

 

We use your personal data to develop and improve our services. For example, we use personal data to develop and improve the functionality of the website and to develop and improve the tools we use in our services, including AI tools. For the same purpose, we use personal data, where applicable and where necessary, to train AI tools that we use in our services, for example to improve the transcription of phone calls to customer service. It is important to us to constantly develop and improve our services to meet your and other customers’ expectations and needs.

             

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

 

Follow-up and analyse the use of our websites and digital channels

 

It is important for us to understand and analyse how our websites and digital channels are used, so that we can improve and develop our websites and digital channels and thereby creating an even better user experience. We therefore use your personal data for this purpose, for example when we use cookies and similar technologies to collect and analyse visitor and user statistics on how our website, digital channels and our services are used.

 

If you are logged in to the website, we also link information about how you have interacted with the website to the customer data we process for this purpose. This enables us to better understand how our loyal customers use our websites and digital channels.

 

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

 

Enable functionality on our websites

 

To enable functionality on our website, for example to remember your settings, we use where necessary your personal data. This in order to provide you with a better user experience on the website.

 

Manage the relationship with partners

 

We use your personal data to manage our relationship with partners, for example marketing platforms. This, for example, to pay commission to the partners on purchases generated through marketing using the partner's platform. For the same purpose, we share personal data with our partners. Please see section 6 below for further information on which recipients that we share personal data with.

 

Manage customer reviews

 

You can leave product reviews on the website. If you leave a product review, we process your personal data to manage the review, for example to review and publish the review. 

 

For the same purpose, we process your personal data if you have left a review about us on an external review platform, such as Trustpilot, so that we on the website can display the reviews you have left. To verify your review, we also share personal data with these platforms. Please see the section on recipients with whom personal data is shared below for more information.

 

Carry out advocacy work

 

We continuously monitor political issues relating to our business and our products. We also carry out advocacy work to keep politicians and other decision-makers informed about issues relating to our business and our products. If you choose to participate in an advocacy initiative that we are running, we will also process your personal data for this purpose. We may also share your personal data with politicians and decision-makers for this purpose, for example if you have signed a petition for a specific initiative.

 

Snusbolaget Norden AB is jointly responsible with the relevant company for the processing of your personal data for this purpose.

 

Prevent, deter and investigate misuse of our services

 

We use your personal data where necessary to prevent, deter and investigate misuse of our services, such as potential fraud or other breaches of the law. Furthermore, we process your personal data to prevent the sending of spam, cyber-attacks and intrusions, attempts to log in to user accounts without authorisation, or other actions that are prohibited by law or our terms and policies.

             

Ensure technical functionality and security

 

We use your personal data to ensure necessary technical functionality and security of our websites and services, for example for security logging, error handling, and backups.

 

Manage and defend legal claims

 

If needed, we use your personal data to manage and defend legal claims for example in connection with a dispute or court proceeding. For this purpose, we share personal data, when needed, with other recipients, please see section 6 below.

 

Fulfill legal obligations

 

To fulfil our legal obligations, if necessary, we will use your personal data, for example, in order to fulfil accounting or data protection obligations, and for product liability and product safety. For this purpose, we may share certain information with other recipients. Please see section 6 below for more information.

 

5. BASED ON WHICH LEGAL BASES DO WE USE YOUR PERSONAL DATA?

 

In order for the use of your personal to be lawful there must be a legal basis for the processing. Below we describe the legal bases that we rely on when processing your personal data. To read more about the legal basis that we rely on for the use of your personal data for each purpose, please see our detailed information on our use of personal data in section 12 below.

 

· Legal obligation. When we need your personal data to comply with a legal obligation which we are subject to, for example to fulfill age checks or accounting requirements, the processing of your personal data is carried out based on this legal basis.

 

· Performance of a contract. When we need your personal data to perform a contract with you, e.g. our terms of purchase to process your order, the processing of your personal data is carried out based on this legal basis.

 

· Legitimate interest. In certain cases, we have made the assessment that we have a legitimate interest of processing your personal data and that this legitimate interest – under a balancing of interest test – outweighs your interest of not having your personal data processed, for example to communicate with you or to follow-up and analyse the business. In such a case our processing of your personal data is carried out to satisfy our legitimate interest. You have the right to object to processing of personal data carried out based on our legitimate interest, please see section 7 below.

 

· Consent. When you have given your consent to our processing of your personal data, for example if you accept our use of cookies and similar technologies on the website, the processing is carried out based on your consent. You have the right to withdraw your consent at any time, please see section 7 below.

 

6. WHICH RECIPIENTS DO WE SHARE PERSONAL DATA WITH?

 

Below we describe which recipients that we share your personal data with. Which recipients we share your personal data with depends on how you interact with us. Unless we have stated otherwise below the recipient is responsible for its own use of your personal data.

 

To read more about why and based on which legal basis we share your personal data with different recipients, please see our detailed information on our use of personal data in section 12 below.

 

We share personal data with:

 

Service providers

 

To process personal data for the proposes described in this Notice, we share personal data with service providers that we have engaged. These service providers provide, for example, IT services (e.g. storage and analytics tools), communication services (which enable us to send you communications) and warehousing services. When the service providers process personal data on our behalf, they act as data processors for us, and we are responsible for the processing of your personal data. They must not use your personal data for their own purposes and are contractually and legally obliged to protect your personal data.

 

Payment service providers

 

Vi use payment service providers to process your payment when you make an order on our websites and therefore share personal data with them for the same purpose.

 

Couriers and shipping companies

 

To process your order and deliver your ordered goods to you we share personal data with the couriers and shipping companies that we have engaged to carry out the transport of the goods.

 

Group companies

 

The companies with the group collaborate and therefore share personal data with each other, for example to communicate and send offers in various channels. Snusbolaget Norden AB is responsible together (joint controller) with the relevant group company the purposes outlined above.

 

Social network platforms

 

To communicate and provide personalised offers in our digital channels and on other websites and to follow up and evaluate campaigns, advertisements and our communications, we share personal data with social network platforms.

 

When we share personal data with these platforms we are, where applicable, jointly responsible together with the relevant social network or marketing platform for the collection and transfer of your personal data using cookies and similar technologies.

 

We and respective relevant platform are, however, independently responsible for the subsequent use of your personal data. We have entered into specific arrangements with the platforms which outline the roles and responsibility of us and the relevant platform in relation to the use of your personal data. You have the right to receive information on the essence of these arrangements. Please see section 11 below for contact details.

 

Please also see our detailed information on our use of personal data in section 12 below for more information about the recipients with whom we are jointly responsible for the use of your personal data.

 

Review platforms

 

To enable the review platforms we work with, such as Trustpilot, to verify your review, we share certain personal data with the platforms for this purpose.

             

Marketing platforms and partners

 

To manage the relationship with partners that we collaborate with, we share personal data with them for the same purpose.

 

Moreover, we use marketing platforms to display our advertisements on external websites (publishers) that use the same platform. As such, we share personal data with such platforms to pay correct commission on purchases generated through marketing carried out using the platform.

 

In relation to certain marketing platforms and partners using such platforms, we are jointly responsible for certain processing of personal data, for example for the sharing of personal data to manage the relationship with publishers and, in relation to publishers, for the collection of personal data about individuals who interact with our advertisements displayed on the publishers’ respective websites and in their digital channels.  

 

Suppliers

 

If you take part in a meeting with a supplier in connection with a market survey, we will share certain personal data about you with the supplier for the same purpose.

 

Politicians and other decision-makers

 

If you take part in a petition or initiative that we are running with the aim of influencing politicians or decision-makers on a particular issue that is important to us and to you, we will, where appropriate, share your personal data with these recipients for this purpose.

             

Other recipients

 

If needed, we share your personal data with other recipients for the following purposes:

  • to manage a merger or sale of the business,
  • to manage and defend legal claims and rights,
  • to fulfil legal obligations,
  • to respond to a request, and
  • to protect and ensure the safety of our staff.

Examples of recipients are external advisors, public authorities, courts, law enforcement, and potential buyers and sellers should we sell the business.

 

7. WHICH RIGHTS DO YOU HAVE?

 

You have certain right rights under applicable data protection laws in relation to the personal data that we have collected about you.

 

You have the right to:

 

  • Request access to and a copy of your personal data. You can view certain personal data that we have store about you by accessing my account.

 

  • Request rectification of your personal data that is incorrect or incomplete.

 

  • Withdraw your consent to our use of your personal data that is based on your consent.

 

  • Request erasure of your personal data in some circumstances, but not in cases where we, for example, are legally obligated to keep your personal data.

 

  • Unsubscribe from marketing communications which you for example can do by clicking on an unsubscribe link in the communication. Where applicable you can unsubscribe from communication in Your account.

 

  • Request restriction of your personal data in certain circumstances and you can then, at least for a certain period of time, prevent us from using your personal data for other purposes that for example to manage and defend a legal claim or to comply with legal obligations that we are subject to.

 

  • Object to the processing of your personal data that is based on our or another party's legitimate interest for reasons related to your specific situation and if we cannot show that we have a compelling reason for our use of personal data we will stop using your personal data for the relevant purpose.

 

  • Transfer your personal data (data portability) under certain circumstances by requesting a copy of your personal data that you have provided to us in a structured format that you can transfer to another recipient.

 

In order to exercise your rights, please contact customer service for the relevant company. Please see section 11 below for contact details.

 

8. COOKIES AND OTHER TECHNOLOGIES

 

We use cookies and other technologies on our website, including to enable functionality on the website. For more information on our use of cookies and other technologies and how you can adjust your cookie settings on the website, please see our cookie policy.

 

9. WHERE WE PROCESS PERSONAL DATA

 

We endeavour to store your personal data within the EU. We transfer personal data to, where relevant, recipients outside the EU/EEA, for example service providers engaged by us. The countries outside the EU/EEA that we transfer your personal data to include the U.S.

 

To ensure that the personal data is protected, we ensure that there are adequate safeguards in place with the service providers that process your personal data outside the EU/EEA area in light of the laws of the receiving country, for example the EU commission’s standard contractual clauses for transfers of personal data in addition to, if needed, supplementary measures.

 

For transfers to the U.S., we also rely on the EU-US Data Privacy Framework in relation to recipients certified under the framework, please see the framework’s website (www.dataprivacyframework.gov).

             

If you would like further information about the safeguards that we have put in place, please contact us, please see section 11 below for our contact details.

 

10. UPDATES TO THIS NOTICE

 

We regularly update this Notice. This in order to ensure that the Notice reflects our use of personal data. As an example, we will update this Notice if we decide to collect additional categories of personal data or if we intend to use collected personal data for additional purposes.

 

latest version of the Notice is always available on this page and the date the Notice was last updated is stated above.

 

11. ANY QUESTIONS?

 

If you have questions about this Notice, our use of your personal data or if you wish to exercise your rights, please contact our customer service, please see contact details below.

 

Company

Address

Contact details

Haypp Limited

 

Unit 2 Dunfermline Court, Kingston,

Milton Keynes MK10 0BY,

United Kingdom

Phone no: +44 8000 489 014

Email: privacy@hayppgroup.com

 

 

 

Snusbolaget Europa AB

Dammliden 1

137 69 Österhaninge

Sweden

Phone no.: +46 (0)8-525 157 60
Email: privacy@hayppgroup.com

Snusbolaget Norden AB

Östgötagatan 12
116 25 Stockholm
Sweden

Phone no.: +46 (0)8-525 157 60

Email: privacy@hayppgroup.com

Haypp GmbH

 

 

 

 

Snushjem.no AS

c/o Schmeding & Hoffman

Max-Brauer-Allee 52

22765 Hamburg

Germany


Kabelgata 39C
0581 Oslo, Norway

Phone no: +49 800 1800 890

Email: privacy@hayppgroup.com

 

 

 

Phone no.: +47 80025175

Email: privacy@hayppgroup.com

Haypp CH GmbH

c/o Centralis Switzerland GmbH Bahnhofstrasse 10, 6300 Zug, Switzerland

Phone no: +410800561053

Email: privacy@hayppgroup.com

 

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country. Below we have outlined the data protection authority that is responsible for supervising our use of personal data in the countries to which we deliver our products. Contact details for each data protection authority can be found on the data protection authorities' websites.

Country

Data protection authority

Website

Norway

Datatilsynet

datatilsynet.no/

Switzerland

Eidgenössische Datenschutz- und Öffentlichkeitsbeauftragte (EDÖB)

edoeb.admin.ch/

Sweden

Swedish Authority for Privacy Protection (IMY)

imy.se

Germany

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BFDI)

bfdi.bund.de/

Austria

Österreichische Datenschutzbehörde

dsb.gv.at/

United Kingdom

Information Commissioner's Office (ICO)

ico.org.uk/

 

 

12. DETAILED INFORMATION ON OUR USE OF PERSONAL DATA

Why and how we use personal data

Please find below detailed information regarding our use of personal data, including the categories of personal data used, the legal basis for the use and for how long the personal data is stored.

 

Purpose

Personal data

Legal basis

Storage period

Manage your order or subscription

• Communication

• Contact information

• Identity information

• Order and delivery information

Performance of a contract. The processing is necessary in order to fulfill the contract with you pursuant to our terms and conditions.

Personal data is stored until the order has been processed, including delivery and payment, and for a period of 36 months thereafter to manage complaints and warranty matters or the longer period thereafter that is necessary to handle the complaint or the warranty matter.

Provide services on our websites

• Contact information

• Identity information

• Order and delivery information

• Activity information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of providing services on our websites.

Consent. If you have given your consent to our use of cookies and similar technologies for this purpose, the use of your personal data is based on your consent.

Personal data is stored as long as you have an active customer relationship and for a period of six (6) months thereafter for this purpose. Your customer relationship is active if you have interacted with us, e.g. made a purchase or contacted customer service, during the last twelve-month period. This means that your personal data is stored for this purpose for a maximum period of 18 months without any activity.

 

Respond to questions and provide customer service

• Communication

• Contact information

• Identity information

• Order and delivery information

• Profile information

• Activity information

 

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of responding to questions and providing customer service.

Personal data is stored for this purpose as long as you have an active customer relationship, however, up to a maximum of 18 months from the date of the completion of the matter. Personal data published in digital channels, for example in our social media feeds is, as a starting point, retained until further notice.

Ensure the quality of our customer service, to improve our customer service and for traceability

 

• Identity information

• Communication

• Contact information

• Order and delivery information

• Activity information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of ensuring the quality of our customer service, to improve our customer service, and to ensure the traceability of customer matters.

             

Personal data is stored for this purpose as long as you have an active customer relationship, however, up to a maximum of 18 months from the date of the completion of the matter.

 

For quality and improvement purposes, personal data is processed for a period of three (3) months from the date the matter was created or, in the case of telephone calls or chats with customer service, three (3) months from the date of contact.

             

Carry out age verification

• Identity information

• Profile information, including biometric data where needed

• Activity information

• Photograph and images

• Technical information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of verifying your age in accordance with our terms and conditions.

 

Explicit consent. If we need to verify your age by comparing a photograph of you with an image of your face from an ID document, we will ask for your explicit consent for this processing, including the processing of your biometric data for the same purpose.

 

Personal data is stored during the age verification process.

Communicate and send offers in various channels

• Contact information

• Identity information

• Order and delivery information

• Profile information

• Technical information

• Activity information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of communicating and sending offers in various channels.

 

Consent. If you have given your consent to our use of cookies and similar technologies for this purpose, the processing of your personal data is based on your consent.

Personal data is stored for this purpose as long you have an active customer relationship and for a period of 12 months thereafter for this purpose. Your customer relationship is active if you have interacted with us, e.g. made a purchase or contacted customer service, during the last twelve-month period. This means that your personal data for this purpose is stored for a maximum period of 24 months without any activity.

 

Provide customized customer benefits

• Identity details

• Contact details

• Order and delivery information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of providing customized customer benefits and provide customers with an even better customer experience.

Personal data is stored for this purpose as long as you have an active customer relationship and for a period of 12 months thereafter for the same purpose. Your customer relationship is active if you have had contact with us in the last 12 months, e.g. made a purchase or contacted customer service. This means that your personal data is stored for this purpose for a maximum of 24 months without activity.

 

Carry out analysis for customer insights

• Contact information

• Identity information

• Order and delivery information

• Profile information

• Technical information

• Activity information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of carrying out analysis for customer insights.

 

Consent. If you have given your consent to our use of cookies and similar technologies for this purpose, the processing of your personal data is based on your consent.

 

Personal data is processed for this purpose for a period of 12 months to carry out the analysis and facilitate future analyses. Statistics and reports on an aggregated level which do not include any personal data are stored until further notice or until deleted.

Follow up and evaluate campaigns, advertisements and our communications in digital channels

 

• Activity information

• Identity information

• Technical information

• Order and delivery information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of following up and evaluating campaigns that we carry out and our communication in digital channels, so that we can better understand how our campaigns perform.

 

Consent. If you have given your consent to our use of cookies and similar technologies for this purpose, the processing of your personal data is based on your consent.

 

Personal data is stored for this purpose for the duration of the campaign and for up to 12 months thereafter in order to compile the responses in a report.

             

Follow-up and analyse the business and sales

• Identity information

• Order and delivery information

• Profile information

• Activity information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of follow-up on and analysing the business and sales.

Personal data is processed for this purpose for a period of 12 months to carry out the analysis and facilitate future analyses. Statistics and reports on an aggregated level which do not include any personal data are stored until further notice or until deleted.

Carry out contests, events and other activities

• Communication

• Contact information

• Identity information

• Profile information

• Activity information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of carrying out the contest, event, or the activity in question.

Personal data is stored for this purpose during the time the activity is carried out and for a period of 26 months calculated from the date of the activity to satisfy our legitimate interest of follow-up on the participation, evaluate the activity and for planning potential future activities. Thereafter the personal data will be anonymised. Statistics and reports on an aggregated level which do not include any personal data are stored until further notice or until deleted.

Carry out market surveys

• Communication

• Contact information

• Identity information

• Profile information

• Activity information

• Order and delivery information

• Technical information

 

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of carrying out market surveys for the purpose of collecting your opinions about our business, products, and services.

Personal data is stored for this purpose during the period the survey is carried out and for a period of three (3) months thereafter to compile the responses in a report. Thereafter the personal data will be anonymised. Statistics and reports on an aggregated level which do not include any personal data are stored until further notice or until deleted.

Develop and improve the business, our business methods and strategies

• Identity information

• Order and delivery information

• Profile information

• Activity information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of developing and improving the business.

 

Consent. If you have given your consent to our use of cookies and similar technologies for this purpose, the processing of your personal data is based on your consent.

Personal data is processed for this purpose for a period of 12 months to carry out the analysis and facilitate future analyses. Statistics and reports on an aggregated level which do not include any personal data are stored until further notice or until deleted.

Follow-up and analyse the use of our websites and digital channels

• Identity information

• Profile information

• Technical information

• Activity information

Consent. The processing is carried out based on the consent that you provide when accepting our use of cookies and similar technologies for the same purpose.

For information on how long your personal data is stored for this purpose, please see our cookie table. Statistics and reports on an aggregated level which do not include any personal data are stored until further notice or until deleted.

Enable functionality on our websites

• Identity information

• Technical information

Consent. The processing is carried out based on the consent that you provide when accepting our use of cookies and similar technologies for the same purpose.

 

To the extent that the use of cookies and similar technologies is strictly necessary for this purpose, your consent to the processing is not required; instead, the processing is carried out in accordance with the provisions of the Privacy and Electronic Communications Regulations 2003 (PECR).

             

For information on how long your personal data is stored for this purpose, please see our cookie table. Statistics and reports on an aggregated level which do not include any personal data are stored until further notice or until deleted.

Manage the relationship with partners

• Identity information

• Contact information

• Order and delivery information

• Technical information

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of managing the relationship with our partners, e.g. marketing platforms that we collaborate with.

Personal data is stored for this purpose as long as there is an active relationship and for a period of ten (10) years thereafter to satisfy our legitimate interest of managing and defending legal claims.

Manage customer reviews

 

• Identity information

• Contact information

• Communication

• Order and delivery information

• Activity information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of helping you make purchasing decisions and to promote our business by displaying customer reviews.

             

Published personal data is stored for this purpose until further notice.

             

Carry out advocacy work

 

• Identity information

• Contact information

• Communication

• Profile information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of influencing decision-makers on issues that are important to us and to you.

 

Explicit consent. Where a specific initiative involves the processing of data relating to political opinions, we will ensure that we first obtain your explicit consent to such processing.

             

Personal data is stored for this purpose for the duration of the specific initiative.

             

Prevent, deter and investigate misuse of our services

 

• Only the categories of personal data needed for preventing, deterring or investigating any misuse of our services in the individual case.

 

However, normally the following categories of persona data are processed for this purpose:

 

• Identity information

• Contact information

• Profile information

• Activity information

• Technical information

• Order and delivery information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of ensuring that our services are not misused.

Personal data is stored for this purpose for as long as you interact with our website and our services, as well as for the period necessary in individual cases to investigate any misuse and, where applicable, for the subsequent period necessary to take appropriate action.

             

Ensure technical functionality and security

• Relevant categories of personal data

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of ensuring that our websites and services are secure and work properly to ensure you have a good user experience.

Personal data is stored for the same period as stated in relation to each relevant purpose of the processing. Personal data in logs is retained in order to satisfy our legitimate interest of troubleshooting and incident management for a period of 13 months from the date and time of the log entry. Personal data in backups are stored for a period of 13 months from the date of the backup.

Manage and defend legal claims

• Only the categories of personal data needed for managing and defending a legal claim in the individual case

 

However, normally the following categories of persona data are processed for this purpose:

 

• Identity information

• Contact information

• Profile information

• Communication

• Order and delivery information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of managing and defending legal claims.

Personal data is stored for the period required in order for us to manage and defend the legal claim in the individual case.

Fulfill legal obligations

• Only the categories of personal data are necessary for fulfilling the relevant legal obligation.

Fulfill legal obligation. The processing is necessary in order to fulfill legal obligations that we are subject to.

Personal data is stored for such period that is necessary in order for us to fulfill each legal obligation that we are subject to and for a period of ten (10) years thereafter to satisfy our legitimate interest of managing and defending legal claims and for the period necessary to manage such a claim. As an example, personal data in accounting material is stored for 7 years calculated from the end of the calendar year in which the relevant financial year ended in order for us to fulfil our legal obligations (bookkeeping and accounting requirements in the Swedish Accounting Act (1999:1078)).

 

 

Why and with whom we share personal data

Please find below detailed information regarding which categories of personal data we share with other recipients and the legal basis for the transfer.

Recipient

Purpose

Personal data

Legal basis

Payment service providers

Manage your order or subscription

• Contact information

• Identity information

• Order and delivery information

Performance of a contract. The processing is necessary in order to fulfill the contract with you pursuant to our terms and conditions.

Couriers and shipping companies

Manage your order or subscription

• Contact information

• Identity information

• Order and delivery information

Performance of a contract. The processing is necessary in order to fulfill the contract with you pursuant to our terms and conditions.

Social network platforms

Communicate and send offers in various channels

• Identity information

• Technical information

• Activity information

Consent. The processing is carried out based on the consent that you provide when accepting our use of cookies and similar technologies for the same purpose.

Review platforms

 

Manage customer reviews

• Contact information

• Identity information

• Order and delivery information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of ensuring that product reviews that are displayed in the website are verified by the relevant review platform.

 

Marketing platforms

 

Manage the relationship with the partner

 

 

 

 

 

 

 

 

 

Prevent, deter and investigate misuse of the platform’s services

 

• Identity information

• Order and delivery information

• Activity information

• Technical information

 

 

• Identity information

• Order and delivery information

• Technical information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of managing our relationship with our partners.

 

Consent. If you have given your consent to our use of cookies and similar technologies for marketing purposes, the processing of your personal data is based on your consent.

 

Legitimate interest. The processing is necessary in order to satisfy the platform’s legitimate interest of ensuring that their services are not misused.

 

Partners

Manage the relationship with the partner

• Identity information

• Order and delivery information

• Activity information

• Technical information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of managing our relationship with our partners.

 

Suppliers

 

Carry out market surveys

 

• Identity information

• Contact information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of carrying out market surveys for the purpose of collecting your opinions about our business, products, and services.

 

Politicians and other decision-makers

 

Carry out advocacy work

• Identity information

 

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of to influencing decision-makers on issues that are important to us and to you.

 

Explicit consent. Where a specific initiative involves the processing of data relating to political opinions, we will ensure that we first obtain your explicit consent to such processing.

 

 

 

Other recipients

Purpose

Personal data

Legal basis

Manage a merger or sale of the business

Only the personal data that is necessary for this purpose is shared with the recipient.

Legitimate interest. The processing is necessary in order for us to satisfy our and the buyer's legitimate interest of completing the sale or merger.

Manage and defend legal claims

Only the personal data that is necessary for this purpose is shared with the recipient.

Legitimate interest. The processing is necessary in order for us to satisfy our legitimate interest of managing and defending legal claims.

Fulfil legal obligations

Only the personal data that is necessary for this purpose is shared with the recipient.

Legitimate interest or to fulfil a legal obligation. The processing is necessary in order for us to comply with our legal obligations. Otherwise, the processing is based on a balance of interests where it is necessary to satisfy our obligation to comply with legal requirements.

Respond to a request

Only the personal data that is necessary for this purpose is shared with the recipient.

Legitimate interest or to fulfil a legal obligation. To the extent that we are obligated to respond to a request, personal data is used to fulfil this legal obligation. Otherwise, the processing is based on a balance of interests where it is necessary to satisfy our and the requester's legitimate interest in responding to the request.

Protect and ensure the safety of our staff

Only the personal data that is necessary for this purpose, for example to notify an incident to law enforcement.

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest of protecting and ensuring the security of our staff.

 

Recipients that We Are Jointly Responsible With

As noted in section 6 are we jointly responsible for the use of your personal data with certain recipients that we share your personal data with.

 

Recipient

Information

Meta Platforms Ireland Limited

Block J, Serpentine Avenue, Dublin 4, Ireland

 

Information regarding Meta's use of your personal data, including their legal basis and the ways that you can exercise your rights against Meta can be found in their Privacy Policy available at https://www.facebook.com/about/privacy .

 

We have entered into a joint controller addendum to determine the respective responsibilities in relation to the use of your personal data for which we and Meta is jointly responsible, please see https://www.facebook.com/legal/controller_addendum .

 

Webgains Ltd

 

Bond St, BS1 3AE, United Kingdom

 

Information regarding Webgain’s use of your personal data including their legal basis and the ways that you can exercise your rights against Meta can be found in their Privacy Policy available at https://www.webgains.com/public/en/privacy-2/

 

We have entered into a joint controller agreement with Webgains. This to determine our and Webgains’ respective responsibilities in relation to the processing of personal data for which we are jointly responsible with Webgains in connection with our use of Webgain’s marketing platform, for example transmission of relevant personal data for managing the relationship with publishers.

 

The joint controller agreement is available at: https://www.webgains.com/public/en/network-contracts/ (Agreement on Data Protection – ADP).

 

Relevant publishers that use Webgains’ platform

 

We are jointly responsible with relevant publishers that use Webgains’ marketing platform, and which display our advertisements on their websites and in their digital channels in relation to the processing carried out when the publisher forwards a user to our website when the user clicks on an advertisement on the publisher’s website.

 

Information regarding the publisher’s use of your personal data including their legal basis and the ways that you can exercise your rights against the publisher is available on the relevant publisher’s website that have published our advertisements.

 

We have entered into a joint controller agreement with the relevant publishers through the use of Webgains’ platform, which is available at: https://www.webgains.com/public/en/network-contracts/ (Agreement on Data Protection – ADP).