Privacy policy

Last updated: August 19, 2025

Swedishcandy4u (the “Store”, “we”, “us”, “our”) operates this website and provides the associated online shopping services (the “Services”). The Store is hosted by Shopify, which enables us to provide the Services. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal data when you visit, use, purchase from, or communicate with us via the Services. If anything in our Terms of Service conflicts with this Privacy Policy, this Privacy Policy governs for privacy matters.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

Who we are (Controller)

The controller for your personal data is:

Höglands Godis Grossist AB
Rosenborgsgatan 31, 561 31 Huskvarna, Sweden
Email: shopify@swedishcandy4u.com

We trade online as Swedishcandy4u. We have not appointed a Data Protection Officer. For privacy questions, contact us using the details above.

What data we collect

Depending on how you interact with the Services and subject to applicable law, we process:

Contact details (name, billing/shipping address, email, phone)
Order & transaction data (items viewed/purchased/returned, order numbers, totals, delivery method)
Account data (login, password, preferences)
Payment data (payment method, status, limited payment metadata). Card details are processed by our payment provider(s) and are not stored by us
Communications (messages you send to us, customer support interactions)
Device & usage data (IP address, browser/device type, identifiers, pages viewed, timestamps)
Cookies and similar technologies data

We may also receive information from service providers (fraud prevention, analytics, logistics), partners, and Shopify.

Why we use your data (legal bases)

We process personal data only when there is a lawful basis under the GDPR:

To provide and operate the Services (orders, payments, shipping, returns, support)
Legal bases: contract performance; legitimate interests
To personalize, improve, and secure the Services (analytics, troubleshooting, fraud prevention)
Legal basis: legitimate interests
Marketing and newsletters (emails or ads about our products/services). You can opt out at any time
Legal bases: consent where required; otherwise legitimate interests
Legal obligations (bookkeeping, tax, responding to lawful requests)
Legal basis: legal obligation

Where we rely on consent, you may withdraw it at any time; this does not affect processing already carried out.

How we disclose data

We may share personal data with:

Shopify (hosting, security, analytics)
Payment providers
Fulfilment and logistics partners
IT, analytics, and customer-support providers
Professional advisers (accountants, auditors, legal counsel)
Authorities where required by law or to protect rights and safety
As part of corporate transactions (e.g., merger or acquisition)

We do not sell your personal data.

Relationship with Shopify

Our Store is hosted on Shopify. Shopify processes certain personal data to operate and secure the platform and to provide features to us and to you. In some cases, Shopify acts as an independent controller (e.g., cross-merchant services and certain analytics/advertising); in other cases, Shopify acts as our processor. For details on Shopify’s processing and your rights in relation to Shopify’s processing, see Shopify’s privacy policy and privacy portal.

International transfers

We are based in Sweden (EEA). Some recipients (including Shopify and certain providers) may be located outside the EEA/UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or other mechanisms recognized under applicable law, unless the destination country benefits from an adequacy decision.

Retention

We retain personal data only as long as necessary for the purposes above, including to comply with legal obligations, resolve disputes, and enforce agreements. For example, accounting/transaction records are typically retained in line with Swedish bookkeeping requirements (generally up to seven years). Marketing preferences are kept until you opt out or withdraw consent.

Security

We implement appropriate technical and organizational measures to protect personal data. No method of transmission or storage is entirely secure; please use a strong, unique password and safeguard your account details.

Cookies and similar technologies

We and our providers (including Shopify) use cookies, pixels, and similar technologies to operate the Store, remember preferences, analyze traffic, and personalize content/ads. You can manage cookies via your browser settings and, where available, our cookie banner/preferences tools. Disabling certain cookies may affect site functionality.

Your rights (EEA/UK/GDPR)

Subject to legal conditions and exceptions, you may have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Erase data (“right to be forgotten”)
Restrict processing
Object to processing based on legitimate interests, including direct marketing
Data portability
Withdraw consent where processing is based on consent

To exercise your rights, contact shopify@swedishcandy4u.com. We may need to verify your identity. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

Children

The Services are not intended for individuals under the age of majority applicable in your country. We do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or legal requirements. We will post the updated version here with the revised “Last updated” date. Where required by law, we will notify you of material changes.