Privacy policy
Last updated: 22 January 2026
This privacy policy describes how NordWell Group AB ("Nordwells", "we", "our") processes personal data when you visit our website, make purchases or otherwise interact with us. The policy has been drawn up in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
NordWell Group AB
VAT number: SE559318891401
Address: Blästergatan 21, 462 73 Vänersborg, Sweden
Email: support@nordwells.fi
NordWell Group AB is the data controller for the processing of your personal data.
2. What personal data do we collect?
We may collect the following personal data:
- Contact details (name, address, email address, phone number)
- Order and purchase information (order details, delivery instructions)
- Payment information (transaction ID, payment status – never complete card details)
- Customer communication (emails, case history)
- Technical data (IP address, device information, browser type)
- Behaviour on the website (via cookies)
3. How we use your personal data (purposes)
Below we describe the main purposes for which personal data is processed. For each purpose, the processing, personal data, legal basis, recipients and retention period are stated.
3.1 Carrying out the purchase, payment and delivery process
| Aspect | Details |
|---|---|
| Processing | Order management, payment processing, delivery |
| Personal data | Name, address, email, phone number, order details, transaction ID |
| Legal basis | Contract, legal obligation (Accounting Act) |
| Recipients | Payment providers (Klarna, Shopify Payments – Visa, Mastercard, American Express), banks, carriers |
| Retention period | Up to 7 years in accordance with the Accounting Act |
Please note that card payments are processed via Shopify Payments. We never store complete card details.
3.2 Customer service, returns and complaints
| Aspect | Details |
| Processing | Handling of cases, communication |
| Personal data | Contact details, order number, case history |
| Legal basis | Contract, legal obligation |
| Recipients | Customer service system |
| Retention period | For the duration of the case handling and thereafter for up to 36 months |
3.3 Marketing and communication
| Aspect | Details |
| Processing | Sending offers, marketing analysis |
| Personal data | Email address, behavioural data |
| Legal basis | Consent or legitimate interest |
| Recipients | Marketing and analytics providers |
| Retention period | Until consent is withdrawn or you object to the processing |
You always have the right to object to marketing.
3.4 Website development and statistics
| Aspect | Details |
| Processing | Analysis of visitor behaviour |
| Personal data | IP address, device information |
| Legal basis | Consent |
| Recipients | Analytics providers |
| Retention period | In accordance with the cookie overview |
4. Cookies
We use cookies and similar technologies on our website. To manage consent and provide information about cookies, we use the CookieInformation service (Cookie Information A/S).
Cookies may be first-party cookies (issued by Nordwells) or third-party cookies (issued by external providers). Information about each cookie, its issuer, purpose and retention period can be found in our cookie overview, which you can access via the cookie banner.
Some cookies may involve the transfer of personal data to countries outside the EU/EEA, such as the United States. In these cases, the European Commission's standard contractual clauses (SCC) are used as a safeguard.
You can change or withdraw your consent at any time in the website's cookie settings.
5. Sharing of personal data
We only share personal data when it is necessary for the purpose, for example with:
- Payment providers (Klarna, Shopify Payments, Billie)
- Transport and logistics partners
- IT and system providers
We never sell personal data on.
6. Transfers to third countries
If personal data is transferred to a country outside the EU/EEA, this takes place in accordance with the GDPR, for example by means of the EU standard contractual clauses (SCC).
7. How long do we keep personal data?
We only keep personal data for as long as is necessary for the purpose or required by law. The retention periods are stated for each purpose above.
8. Your rights
You have the right to:
- access your personal data
- have inaccurate data rectified
- have data erased (in certain cases)
- request restriction of processing
- object to processing based on legitimate interest
- object to direct marketing
- have your data transferred (data portability)
- lodge a complaint with the Data Protection Ombudsman (Tietosuojavaltuutettu)
To exercise your rights, contact us at support@nordwells.fi.
9. Data security
We implement technical and organisational measures to protect personal data against unauthorised access, loss or misuse.
10. Changes to the privacy policy
We may update this privacy policy. The latest version is always published on our website.
11. Contact
If you have any questions about the processing of your personal data, feel free to contact us: