Privacy policy
Last updated: 27 May 2026
This privacy policy describes how NordWell Group AB (“Nordwells”, “we”, “us”) processes personal data when you visit our website, make a purchase or are otherwise in contact with us. The policy has been drawn up in accordance with the General Data Protection Regulation (GDPR) and Trygg E-handel’s guidelines.
1. Data controller
NordWell Group AB
Corporate identity number: 559318-8914
Address: Blästergatan 21, 462 73 Vänersborg, Sweden
Email: kontakt@nordwells.se
NordWell Group AB is the data controller for the processing of your personal data.
2. What personal data do we collect?
We may collect the following categories of personal data:
Contact details (name, address, email address, telephone number)
Order and purchase details (order information, delivery details)
Payment-related information (transaction ID, payment status – never full card details)
Customer communications (emails, case history)
Technical data (IP address, device information, browser type)
User behaviour on the website (via cookies)
3. How we use your personal data (purposes)
Below we describe our main purposes for processing personal data. For each purpose, we state what processing takes place, which personal data are processed, the legal basis, the recipients and the retention period.
3.1 Completing purchases, payment and delivery
| Item | Information |
|---|---|
| Processing | Order handling, payment processing, delivery |
| Personal data | Name, address, email, telephone number, order information, transaction ID |
| Legal basis | Contract, legal obligation (Swedish Bookkeeping Act) |
| Recipients | Payment service providers (Klarna, Walley, Shopify Payments – Visa, Mastercard, American Express), banks, carriers |
| Retention period | Up to 7 years in accordance with the Swedish Bookkeeping Act |
Please note that card payments are handled through Shopify Payments. We never store full card details.
3.2 Customer service, returns and complaints
| Item | Information |
|---|---|
| Processing | Case handling, communication |
| Personal data | Contact details, order number, case history |
| Legal basis | Contract, legal obligation |
| Recipients | Customer service system (Returnflows) |
| Retention period | For as long as the case is ongoing and thereafter for up to 36 months |
3.3 Marketing and communication
| Item | Information |
|---|---|
| Processing | Sending offers, marketing analysis |
| Personal data | Email address, user behaviour |
| Legal basis | Consent or legitimate interest |
| Recipients | Marketing and analytics providers |
| Retention period | Until consent is withdrawn or an objection is made |
You always have the right to object to marketing.
3.4 Website improvement and statistics
| Item | Information |
|---|---|
| Processing | Analysis of visitor patterns |
| Personal data | IP address, device information |
| Legal basis | Consent |
| Recipients | Analytics providers |
| Retention period | According to the cookie overview |
4. Cookies
We use cookies and similar technologies on the website. To manage consent and provide information about cookies, we use CookieInformation (Cookie Information A/S).
Cookies may be first-party cookies (issued by Nordwells) or third-party cookies (issued by external providers). Information about each cookie, its issuer, purpose and retention period can be found in our cookie overview, which is accessible via the cookie banner.
Some cookies may involve the transfer of personal data to countries outside the EU/EEA, for example the USA. In such cases, the European Commission’s Standard Contractual Clauses (SCC) are used as a safeguard.
You can change or withdraw your consent at any time via the cookie settings on the website.
5. Sharing of personal data
We only share personal data when it is necessary for the purpose, for example with:
Payment service providers (Klarna, Walley, Shopify Payments, Billie)
Shipping and logistics partners
IT and system providers
We never sell personal data on.
6. Transfers to third countries
If personal data are transferred to a country outside the EU/EEA, this takes place in accordance with the GDPR, for example through the use of the EU’s Standard Contractual Clauses (SCC).
7. How long do we keep personal data?
We keep personal data only for as long as is necessary for the purpose or for as long as required by law. Retention periods are stated for each purpose above.
8. Your rights
You have the right to:
access your personal data
have inaccurate data rectified
have data erased (in certain cases)
request restriction of processing
object to processing based on legitimate interest
object to direct marketing
receive your data (data portability)
lodge a complaint with Integritetsskyddsmyndigheten (IMY, the Swedish Authority for Privacy Protection)
To exercise your rights, contact us at kontakt@nordwells.se.
9. Security
We take technical and organisational measures to protect personal data against unauthorised access, loss or misuse.
10. Changes to the privacy policy
We may update this privacy policy. The latest version is always published on our website.
11. Contact
If you have any questions about our processing of personal data, you are welcome to contact us: