Privacy Policy
This Privacy Policy explains how NordLabs, as data controller, processes personal data under the EU General Data Protection Regulation (GDPR).
Controller
[Legal Company Name], Org.nr [Organisationsnummer], [Registered Business Address]. Contact: [Support Email].
Data we process
Account data (email, name), order data (billing/shipping address, order history), support communications, and technical data (IP, device, cookies) as described in our Cookie Policy.
Purposes and legal bases
Fulfilling your order and account (contract), complying with tax and accounting law (legal obligation), securing the service and preventing fraud (legitimate interest), and analytics/marketing where you consent.
Retention
Order and invoicing data is retained for the period required by Swedish bookkeeping law (currently 7 years). Account data is kept until you request deletion.
Recipients
Payment processors, shipping carriers, IT hosting and email providers acting as processors under GDPR.
International transfers
Where processors operate outside the EEA we rely on EU Standard Contractual Clauses and additional safeguards.
Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Contact
Send data-protection requests to [Support Email].
Last updated: 30/07/2026. This document is a first draft; replace bracketed placeholders and have it reviewed by qualified legal counsel before launch.