Privacy Policy

Last updated: January 1, 2026

1. Data controller

Nettobrand AB (org. no. 556864-7969) is the data controller for the processing of your personal data in connection with your account and purchases on nettobrand.se. Contact us at support@nettobrand.se for questions about your data.

2. What data we collect

  • Name, email address and phone number
  • Delivery address and billing address
  • Payment information (handled by Klarna — we do not store card details)
  • Order history and purchase behaviour
  • IP address and technical information about your device
  • Cookies and similar tracking technologies (see our Cookie Policy)

3. How we use your data

We process your personal data for the following purposes:

  • Processing your order and delivery (legal basis: contract)
  • Customer service and complaint handling (legal basis: contract)
  • Accounting and invoicing (legal basis: legal obligation)
  • Marketing via email if you have consented (legal basis: consent)
  • Improvement of our website and services (legal basis: legitimate interest)

4. How long we store your data

Order information and accounting records are stored for 7 years in accordance with the Bookkeeping Act. Account information is stored until you request deletion of your account. Marketing preferences are stored until you withdraw your consent.

5. Your rights

Under GDPR, you have the right to:

  • Access the data we hold about you (data access request)
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to processing for marketing purposes
  • Request data portability
  • File a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se

Contact us at info@nettobrand.se to exercise your rights.

6. Third-party providers

We share your data with necessary providers: Klarna (payment), Postnord/DHL (delivery), and our hosting provider. All providers are bound by data processing agreements and process your data only on our behalf. We never sell your data to third parties.