Privacy Policy
Privacy Policy
Effective from: 31 July 2026
At Cecilia Nordström Chocolates AB, we value your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, shop in our online store or otherwise interact with us.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection legislation.
1. Data Controller
The data controller responsible for processing your personal data is:
Cecilia Nordström Chocolates AB
Company registration number: 559256-0956
Registered office: Solna Municipality, Sweden
Email: kontakt@nordstroems.com
Website: www.nordstroems.com
2. What Personal Data Do We Collect?
Depending on how you use our website, we may collect the following information.
When you place an order
- Name
- Personal identity number (only where required by the payment provider)
- Delivery address
- Billing address
- Telephone number
- Email address
- Order history
- Payment information (processed by our payment provider)
When you contact us
- Name
- Email address
- Telephone number
- Messages and correspondence
When subscribing to our newsletter
- Name (if provided)
- Email address
Automatically collected information
When visiting our website we may automatically collect:
- IP address
- Device type
- Operating system
- Browser
- Language settings
- Pages visited
- Time spent on the website
- Clicks and navigation
- Referring website
- Cookies and similar technologies
3. Why Do We Process Your Personal Data?
We only process personal data where we have a lawful basis.
To fulfil a contract
We process your information in order to:
- receive orders
- process payments
- deliver products
- manage returns and complaints
- provide customer support
Legal basis: Performance of a contract.
To comply with legal obligations
Certain information must be retained in accordance with Swedish law, including:
- Accounting legislation
- Consumer protection legislation
- Tax legislation
Legal basis: Legal obligation.
Marketing
If you subscribe to our newsletter, we use your email address to send:
- special offers
- inspiration
- news
- product launches
- event invitations
You may unsubscribe at any time using the link included in every newsletter.
Legal basis: Consent.
Website improvement
We use statistics and analytics to understand how our website is used and to improve the customer experience.
Legal basis: Legitimate interest or consent, depending on the type of cookies used.
4. How Long Do We Store Your Data?
We never keep personal data longer than necessary.
Typical retention periods are:
| Data | Retention period |
|---|---|
| Customer orders | 7 years (Accounting Act) |
| Customer service enquiries | Up to 24 months |
| Newsletter subscriptions | Until consent is withdrawn |
| Analytics data | According to each service provider |
| Cookies | According to our Cookie Policy |
When personal data is no longer required, it is deleted or anonymised.
5. Who Do We Share Personal Data With?
We never sell your personal data.
We only share information with companies that require it in order to provide our services.
These include:
- Shopify (our online store)
- Klarna (payments)
- PayPal (payments)
- PostNord (shipping)
- Fortnox (accounting and invoicing)
- IT providers (hosting, security and technical services)
Analytics providers, including:
- Google Analytics
- Google Tag Manager
Marketing platforms (where consent has been provided):
- Meta (Facebook & Instagram)
- Google Ads
All providers process personal data under data processing agreements.
6. Transfers Outside the EU/EEA
Some of our service providers may process personal data outside the EU/EEA.
Where this occurs, appropriate safeguards are implemented, including:
- EU Standard Contractual Clauses (SCCs)
- The EU–US Data Privacy Framework (where applicable)
- Other approved GDPR safeguards
7. Your Rights
Under the GDPR you have the right to:
Access
Request a copy of the personal data we hold about you.
Rectification
Request correction of inaccurate or incomplete information.
Erasure
Request deletion of your personal data where we are no longer legally required to retain it.
Restriction
Request that processing be restricted under certain circumstances.
Object
Object to processing based on legitimate interests.
Data Portability
Receive your personal data in a structured, commonly used format.
Withdraw Consent
Withdraw your consent at any time.
Withdrawal of consent does not affect processing carried out before consent was withdrawn.
8. Cookies
We use cookies to:
- ensure the website functions correctly
- remember your preferences
- analyse website usage
- improve the user experience
- measure marketing performance
More information can be found in our Cookie Policy.
9. Security
We continuously work to protect your personal data.
Measures include:
- encrypted communication (SSL)
- access controls
- secure payment solutions
- backups
- technical and organisational security measures
Despite these measures, no transmission over the internet can ever be guaranteed to be completely secure.
10. Children
Our website is not intended for individuals under the age of 18.
We do not knowingly collect personal data from children without parental consent.
11. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website.
Where significant changes are made, we will notify customers where appropriate.
12. Complaints
If you believe we have processed your personal data incorrectly, please contact us.
You also have the right to lodge a complaint with:
Swedish Authority for Privacy Protection (IMY)
13. Contact
If you have any questions regarding this Privacy Policy or our processing of personal data, please contact us.
Cecilia Nordström Chocolates AB
Company registration number: 559256-0956
Email: kontakt@nordstroems.com
Website: www.nordstroems.com
Cookie Policy
Effective from: 31 July 2026
This Cookie Policy explains how Cecilia Nordström Chocolates AB uses cookies and similar technologies when you visit www.nordstroems.com.
By using our website, you consent to our use of cookies in accordance with this policy unless you choose to reject or modify your preferences through our cookie banner or your browser settings.
1. What Are Cookies?
Cookies are small text files stored on your computer, mobile phone or tablet when you visit a website.
Cookies help websites function properly, remember your preferences, improve your browsing experience and provide information about how the website is used.
A cookie does not normally identify you directly, although some cookies may be linked to personal data when combined with other information.
2. Why Do We Use Cookies?
We use cookies to:
- ensure the website functions properly
- provide a secure shopping experience
- remember your preferences
- save items in your shopping basket
- improve website performance
- analyse website usage
- measure marketing effectiveness
- display relevant content and advertising
3. Types of Cookies We Use
Strictly Necessary Cookies
These cookies are essential for the website to function and cannot be disabled through our cookie banner.
They are used to:
- manage secure sessions
- enable purchases
- remember shopping baskets
- prevent fraud
- save essential settings
Without these cookies the website cannot function correctly.
Legal basis: Legitimate interest.
Functional Cookies
These cookies improve your experience by remembering your choices, including:
- language
- country or region
- previously entered information
- personal preferences
Legal basis: Consent where required.
Analytics Cookies
Analytics cookies help us understand how visitors use our website.
Information is primarily collected in anonymised or aggregated form.
We may use:
- Google Analytics 4
- Google Tag Manager
- Shopify Analytics
The information helps improve:
- website performance
- navigation
- product range
- customer experience
Legal basis: Consent.
Marketing Cookies
Marketing cookies are used to measure advertising performance and show more relevant advertisements.
Where consent has been given, cookies may be placed by:
- Meta (Facebook & Instagram)
- Google Ads
- Other advertising partners
These cookies help us:
- measure campaign performance
- display personalised advertising
- avoid showing the same advertisement repeatedly
- better understand customer interests
Legal basis: Consent.
4. Shopify Cookies
Our online store is powered by Shopify.
Shopify automatically places certain cookies that are essential for the operation of the store.
These cookies are used to:
- manage the shopping cart
- complete purchases
- detect fraud
- process secure payments
- maintain your browsing session
Further information is available in Shopify's own Privacy Policy.
5. Third-Party Cookies
Some cookies are placed by third-party providers, including:
- Shopify
- Klarna
- PayPal
- PostNord (where applicable)
- Meta
- Other integrated services
Each provider is responsible for its own processing of personal data in accordance with its privacy policy.
6. How Long Are Cookies Stored?
Some cookies are deleted when you close your browser.
Others remain for a limited period, for example:
- Session only
- 24 hours
- 30 days
- 12 months
- Up to 24 months
The exact retention period depends on the individual cookie.
7. Managing Cookies
You may choose at any time to:
- Accept all cookies
- Reject non-essential cookies
- Change your cookie preferences
You may also configure your browser to:
- delete stored cookies
- block future cookies
- notify you before cookies are stored
Please note that blocking essential cookies may affect website functionality.
8. Your Consent
When you first visit our website, a cookie banner allows you to choose which categories of cookies you wish to accept.
You may change or withdraw your consent at any time through the cookie settings available on our website.
Your preferences remain in effect until changed or until you clear your browser cookies.
9. Changes to This Cookie Policy
We may update this Cookie Policy when necessary.
The latest version will always be available on our website.
Where significant changes are made, the effective date will also be updated.
10. Contact
If you have any questions about our use of cookies, please contact us.
Cecilia Nordström Chocolates AB
Company registration number: 559256-0956
Email: kontakt@nordstroems.com
Website: www.nordstroems.com
