Privacy policy

Privacy Policy

Last updated: August 6, 2026

This Privacy Policy describes how Scandi Sweets collects, uses, stores, and shares your personal information when you visit, use, or make a purchase from scandisweets.com, contact us, or otherwise interact with our services.

For the purposes of applicable data-protection laws, Scandi Sweets is responsible for deciding how and why your personal information is processed.

Questions about this Privacy Policy or requests concerning your personal information can be sent to:

Scandi Sweets
Sweden
contact@scandisweets.com

1. Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of personal information.

Information You Provide to Us

When you place an order, create an account, contact us, subscribe to marketing, or otherwise interact with our store, you may provide information including:

Your name
Billing and delivery address
Email address
Telephone number
Products ordered
Order history
Account information
Customer-support messages
Reviews, photographs, or other content you submit
Marketing preferences

Payment information is processed by Shopify and our authorized payment providers. Scandi Sweets does not directly store your complete payment-card details.

Information Collected Automatically

When you visit or use our website, certain information may be collected automatically, including:

IP address
Browser and device information
Operating system
Device identifiers
Pages viewed
Products viewed
Referring website
Search activity
Shopping-cart activity
Checkout activity
Approximate location derived from your IP address
Information about how you interact with the website and advertisements

This information may be collected through cookies, pixels, tags, software development kits, local storage, and similar technologies.

Information Received from Other Parties

We may receive personal information from companies that provide services to us, including:

Shopify
Payment processors
Shipping and fulfillment providers
Fraud-prevention providers
Analytics providers
Advertising and marketing platforms
Customer-support applications
Email and SMS providers
Social-media platforms

The information received depends on the service used and the permissions or settings enabled.

2. How We Use Personal Information

We may use personal information to:

Process and fulfill orders
Process payments
Deliver products
Provide tracking information
Handle returns, refunds, replacements, and complaints
Communicate about orders
Respond to customer-support requests
Verify customer and payment information
Detect and prevent fraud, abuse, and security threats
Maintain customer accounts
Improve our website, products, and customer experience
Understand how visitors use our website
Measure the effectiveness of marketing campaigns
Personalize content and advertising where permitted
Send promotional messages when you have subscribed or where otherwise permitted by law
Comply with tax, accounting, customs, food-safety, regulatory, and legal requirements
Establish, exercise, or defend legal claims

3. Legal Bases for Processing

Where the General Data Protection Regulation or similar laws apply, we process personal information using one or more of the following legal bases:

Performance of a Contract

We process information when it is necessary to:

Accept and process your order
Take payment
Deliver your products
Provide customer support
Handle order-related requests

Legal Obligations

We may process and retain information to comply with laws and regulations, including accounting, taxation, customs, fraud prevention, product safety, and legal-reporting requirements.

Legitimate Interests

We may process information where reasonably necessary for our legitimate business interests, including:

Preventing fraud
Protecting our website and business
Improving our services
Understanding store performance
Responding to customers
Maintaining records
Marketing our products where permitted

We consider the potential effect on your privacy before relying on legitimate interests.

Consent

We may rely on your consent for certain activities, including:

Non-essential cookies
Some forms of personalized advertising
Promotional email or SMS marketing where consent is required

You may withdraw your consent at any time. Withdrawing consent does not affect processing that occurred before the withdrawal.

4. Shopify

Our store is hosted by Shopify, which provides the e-commerce platform used to operate our website, display products, process orders, and provide related services.

Shopify processes personal information on our behalf and may also process certain information for its own purposes as described in Shopify’s applicable privacy notices.

Information may be processed through Shopify’s systems, databases, applications, security services, checkout services, and related infrastructure.

Shopify generally acts as a processor or service provider for information handled on behalf of its merchants, while merchants remain responsible for their own compliance with applicable privacy laws.

5. Payments

Payments are processed through Shopify and authorized payment providers.

Payment providers may collect information including:

Name
Billing address
Payment-card information
Bank or payment-account details
Transaction information
Device and fraud-prevention information

Payment information is processed according to the payment provider’s own privacy policy and security practices.

Scandi Sweets does not directly receive or store complete payment-card numbers.

6. How We Share Personal Information

We may share personal information with companies that help us operate our business, including:

Shopify
Payment processors
Shipping carriers
Customs and delivery providers
Fulfillment and packaging services
Email and communication providers
Customer-support platforms
Website-hosting and technical providers
Analytics providers
Fraud-prevention and security providers
Advertising and social-media platforms
Professional advisers, including accountants, insurers, and legal advisers
Government authorities where legally required

These providers may only use information as permitted by their agreements with us, their own legal obligations, and applicable data-protection laws.

We may also disclose information:

When required by law, court order, or government request
To investigate fraud, security threats, or illegal activity
To protect our rights, customers, business, or property
In connection with a merger, acquisition, financing, restructuring, sale, or transfer of the business

7. Advertising and Analytics

We may use advertising, analytics, and social-media services to understand website activity, measure advertising performance, and show relevant advertisements.

Depending on the services enabled, these providers may receive information such as:

IP address
Device identifiers
Browser information
Website activity
Products viewed
Shopping-cart activity
Purchase events
Hashed contact information
Advertisement interactions

This information may be used to measure advertisements, create audiences, limit repeated advertisements, and provide personalized advertising where permitted.

We do not sell personal information in exchange for money. However, certain transfers of information for targeted advertising may be treated as a “sale,” “sharing,” or “targeted advertising” under some US state privacy laws.

Where required, visitors can manage these activities through our cookie banner or the Your Privacy Choices page.

8. Marketing Communications

When you subscribe to marketing, we may send you information about:

New products
Special offers
Discounts
Restocks
Promotions
Scandi Sweets news

You may unsubscribe from email marketing at any time by selecting the unsubscribe link included in the message or by contacting contact@scandisweets.com.

Unsubscribing from marketing does not prevent us from sending necessary transactional messages about orders, payments, deliveries, or customer-support requests.

9. Cookies and Similar Technologies

We and our service providers use cookies and similar technologies to:

Keep the website functioning
Remember shopping-cart contents
Maintain secure sessions
Process checkout
Remember privacy preferences
Prevent fraud
Understand website traffic
Measure performance
Personalize content
Support advertising where permitted

Some cookies are strictly necessary for the website to operate. Other cookies, including analytics and advertising cookies, may require consent depending on your location.

You can manage your preferences through the cookie banner displayed on our website. You may also block or delete cookies through your browser settings, although doing so may prevent certain parts of the website from functioning properly.

We do not list individual cookie names in this policy because Shopify, installed applications, and other providers may update the cookies they use. Shopify maintains a current description of cookies used through its platform.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

The retention period may depend on:

Whether you have an active customer account
Whether an order or customer-service matter remains open
Accounting and tax requirements
Customs and shipping requirements
Fraud-prevention needs
Product-safety obligations
Legal limitation periods
Whether consent has been withdrawn
Whether the information is needed to establish, exercise, or defend legal claims

Some order and transaction records may need to be retained after you request deletion because of legal, tax, accounting, fraud-prevention, or regulatory requirements.

11. International Data Transfers

Scandi Sweets is based in Sweden, but Shopify and some of our service providers may process personal information in other countries, including countries outside the European Economic Area.

Where required, international transfers are made using legally recognized safeguards, such as adequacy decisions, standard contractual clauses, or other permitted transfer mechanisms.

Personal information processed in another country may be subject to the laws of that country. Transfers of personal information outside the EU and EEA remain subject to GDPR requirements when GDPR applies.

12. Data Security

We use reasonable administrative, organizational, and technical measures designed to protect personal information against:

Unauthorized access
Loss
Misuse
Alteration
Disclosure
Destruction

Our website and payment services use security measures provided by Shopify and authorized service providers.

However, no internet transmission, electronic storage system, or security measure can be guaranteed to be completely secure.

You are responsible for keeping any customer-account password confidential and should contact us if you believe your account or personal information has been compromised.

13. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

Request access to your personal information
Request a copy of your information
Correct inaccurate or incomplete information
Request deletion of your information
Restrict certain processing
Object to certain processing
Withdraw consent
Request transfer of your information in a portable format
Opt out of targeted advertising or certain data sharing
Appeal a decision concerning a privacy request
Lodge a complaint with a data-protection authority

These rights may be subject to legal exceptions. For example, we may need to retain certain transaction records to meet legal, tax, fraud-prevention, or regulatory obligations.

To submit a request, contact contact@scandisweets.com. We may need to verify your identity before completing the request.

Shopify merchants are responsible for handling customer access and deletion requests, and Shopify provides merchant tools to assist with these requests.

14. Complaints

Please contact us first at contact@scandisweets.com so that we can investigate and attempt to resolve your concern.

When GDPR applies, you also have the right to submit a complaint to the Swedish Authority for Privacy Protection, known as Integritetsskyddsmyndigheten or IMY, or to another competent data-protection authority.

IMY accepts complaints from individuals who believe their personal information has been processed contrary to GDPR.

15. Children’s Privacy

Our website and products are intended for a general audience and are not specifically directed toward children.

We do not knowingly collect personal information directly from children who are not legally permitted to provide it without parental or guardian authorization.

When you believe that a child has provided personal information without appropriate permission, contact contact@scandisweets.com so that we can review and, where appropriate, delete the information.

16. Third-Party Websites

Our website may contain links to websites, applications, or services operated by other companies.

We are not responsible for the privacy, security, content, or practices of third-party services. Their handling of personal information is governed by their own privacy policies.

We recommend reviewing the privacy policy of any external website or service you use.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

Our business
Our website
Our services
The applications and providers we use
Legal or regulatory requirements
How we collect or process personal information

The updated version will be published on this page with a revised “Last updated” date.

Where required by law, we will provide additional notice of material changes.

18. Contact Us

Questions, complaints, consent withdrawals, or requests regarding personal information should be sent to: