Privacy policy

Last updated: 30 June 2026

This privacy policy describes how Nordwells (the website, we, us or our) collects, uses and shares your personal data when you visit our website, when you use our services or make purchases from https://nordwells.no (the website) or otherwise communicate with us about the website (collectively referred to as the services). The use of you/your (etc.) in this privacy policy refers to you as a user of the services, whether you are a customer, a visitor to the website or another person about whom we have collected information in accordance with this privacy policy.

We recommend that you read this privacy policy carefully.

Changes to this privacy policy

We may update this privacy policy from time to time, for example to reflect new practices or for other operational, legal or regulatory reasons. The revised privacy policy will be published on the website, as indicated by the date stated under “Last updated”, and we will also take any other measures required under applicable law.

How we collect and use personal data

In order to provide the services, we collect your personal data from a number of different sources, as described below. The information we collect and use varies depending on how you interact with us.

In addition to the specific purposes described below, we may use the information we have collected about you to communicate with you, provide or improve the services, comply with applicable legal obligations, enforce the applicable terms of use for the services, and protect the services, our rights and the rights of our users and others.

What personal data we collect

The types of personal data we collect about you depend on how you interact with our website and use our services. When we use the term personal data, we mean information that identifies you, relates to you, describes you or can otherwise be linked to you. The sections below describe the categories and the specific types of personal data we collect.

Information we collect directly from you

Information that you yourself send to us through our services may include, among other things:

  • Contact details such as name, address, phone number and email address.
  • Order information such as name, billing address, shipping address, payment confirmation, email address and phone number.
  • Account information such as username, password, security questions and other information used to secure your account.
  • Purchase information such as the products you view, add to your shopping cart, information stored in your account, such as loyalty points, referrals, gift cards or purchases.
    • Saved loyalty points, product reviews, referrals and gift cards
  • Customer support information such as information you choose to share when communicating with us, for example when you send a message through the services.

Certain features of the services may require you to provide us with specific information directly. You may choose not to provide such information, but this may mean that you cannot use or access those features.

Information we collect about your usage

We may also automatically collect certain information about your interaction with the services ("Usage Data"). For this purpose, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our website and your account, including information about your device, your browser, your network connection, your IP address and other information about your interaction with the services.

Information we receive from third parties

We may also receive information about you from third parties, including suppliers and service providers that collect information on our behalf, for example:

  • Companies that support our website and our services, such as Shopify.
  • Our payment providers, which collect payment information (for example bank account details, credit or debit card details, billing address) in order to process your payment, so that we can complete your orders and deliver the products or services you have requested, in order to fulfil our agreement with you.
  • When you visit our website, open or click on emails we send you, or interact with our services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, SDKs, third-party libraries and cookies.

All information we receive from third parties will be processed in accordance with this privacy policy. Please also read the section below, Third-party websites and links.

How we use your personal data

  • Providing products and services. We use your personal data to provide the services and fulfil our agreement with you, including to process your payments, complete your orders, send notifications relating to your account, your purchases, returns, exchanges or other transactions, create, maintain and otherwise manage your account, arrange shipping, and facilitate any returns and exchanges and other features related to your account.
  • Marketing and advertising. We may use your personal data for marketing and advertising purposes, for example to send marketing, advertisements and promotional communications by email, SMS or regular mail, and to show you advertisements for products or services. This may include using your personal data to better tailor the services and the advertising on our website and other websites. If you are resident in the EEA, the legal basis for this processing of personal data is our legitimate interest in selling our products, pursuant to Article 6 (1) (f) of the GDPR.
  • Security and fraud prevention. We use your personal data to identify, investigate or take action in connection with possible fraud, illegal or harmful activity. If you choose to use the services and register an account, you are responsible for keeping your login details secure. We strongly recommend that you do not share your username, password or other access information with anyone else. If you believe that your account has been compromised, contact us immediately. If you are resident in the EEA, the legal basis for this processing of personal data is our legitimate interest in keeping our website secure for both you and other customers, pursuant to Article 6 (1) (f) of the GDPR.
  • Communicating with you and improving the service. We use your personal data to provide customer support and improve our services. This is a legitimate interest for us in order to be responsive to you, provide effective services and maintain our business relationship with you, pursuant to Article 6 (1) (f) of the GDPR.

Cookies

Like many others, we use cookies on our website. For more information about which cookies we use to run our store with Shopify, go to https://www.shopify.com/legal/cookies. We use cookies to operate and improve our website and our services (including to store information about your activity and your settings), to carry out analytics and gain a better understanding of how users interact with the services (which relates to our legitimate interest in managing, improving and optimising the services). We may also allow third parties and service providers to use cookies on our website to better tailor the services, products and advertising on our website and other websites.

Automatic acceptance of cookies is the default setting in most browsers, but you can change the settings in your browser so that cookies are deleted or rejected. Please note that your experience may be negatively affected if you delete or block cookies, and that some services, such as certain features and general functionality, may stop working in whole or in part. It may also be the case that blocking cookies does not completely prevent us from sharing information with third parties, such as our advertising partners.

How we disclose personal data

In certain circumstances, we may disclose your personal data to third parties in order to fulfil agreements, for legitimate purposes and for other reasons described in this privacy policy. Examples of such circumstances are:

  • Information may be shared with suppliers or other third parties that perform services on our behalf (for example IT management, payment processing, data analytics, customer support, cloud storage, distribution and delivery).
  • Information may be shared with business and marketing partners in order to provide services and advertising to you. Our business and marketing partners will use your information in accordance with their privacy policies.
  • When you yourself request or otherwise consent to us disclosing certain information to third parties, for example to deliver products to you or when you use social media widgets or login-based integrations, we may also share your information.
  • Information may be shared with our affiliated companies or within the group as part of our legitimate interests in running a successful business.
  • Information may be shared in connection with a business transaction, such as a merger or bankruptcy, in order to comply with applicable legal obligations (for example in response to orders or search warrants), enforce the applicable terms of use and protect and safeguard the services, our rights and the rights of our users and other persons.

We disclose We disclose personal data from the following categories and sensitive information about users for the purposes described above in How we collect and use your personal information and How we disclose personal information:

Category Categories of recipients
  • Identifiers, such as basic contact details and certain order and account information
  • Commercial information, such as order, purchase and customer support information
  • Internet or other similar network activity, such as usage data
  • Geolocation data, such as locations determined via an IP address or other technical methods
  • Suppliers and third parties that perform services on our behalf (for example internet service providers, payment processors, distribution partners, customer support partners and data analytics providers)
  • Business and marketing partners
  • Affiliate partners

We neither use nor disclose sensitive personal data without your consent or for the purpose of drawing inferences about you.

With your consent, we share personal data in order to carry out advertising and marketing activities as described below.

Third-party websites and links

Our website may contain links to websites or other online platforms operated by third parties. If you follow links to websites that do not belong to our affiliated companies or are not controlled by us, you should read their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of such websites, including whether the information on these websites is accurate, complete or reliable. Information you yourself provide in fully or partially publicly accessible areas, including information you share on third-party social networking platforms, may also be seen by others who use the services and/or by those who use these third-party platforms, without restrictions on how it may be used by us or by third parties. Our inclusion of such links does not imply that we endorse the content on such platforms, or their owners or operations, beyond what is expressly stated in the services.

Information about children

The services are not intended for use by children, and we do not knowingly collect personal data about children. If a child for whom you are the guardian has provided us with personal data, you can contact us using the contact details below to request that the information be deleted.

As of the date on which this privacy policy took effect, we are not aware that we have “shared” or “sold” (as these terms are defined in applicable law) personal data about persons under the age of 16.

Security and storage of your information

Please note that no security measures are perfect or impossible to circumvent, and we cannot guarantee complete security. In addition, information you send to us may be unprotected during transmission. We recommend that you do not use insecure methods to send sensitive or confidential information to us.

How long we retain your personal data depends on various factors, for example whether we need it to manage your account, provide the services, comply with legal obligations, resolve disputes or enforce other applicable agreements and policies.

Your rights

Depending on where you live, you may have some or all of the rights below in relation to your personal data. However, these rights are not absolute, they may only apply in certain circumstances, and the law may allow us to refuse your request.

  • Right of access/to know: You may have the right to request access to the personal data we hold about you, including information about how we use and share your information.
  • Right to erasure: You may have the right to request that we delete personal data we hold about you.
  • Right to rectification: You may have the right to request that we correct personal data we hold about you if it is inaccurate.
  • Right to data portability: You may, in certain circumstances and subject to certain exceptions, have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party.
  • Right to opt out of sale, sharing or targeted advertising: You may have the right to instruct us not to “sell” or “share” your personal data, or to specify that your personal data should not be used for purposes considered “targeted advertising” under applicable data protection law. If you visit our website with the GPC signal enabled (depending on where you are located), we will automatically treat this as a request to opt out of the “sale” or “sharing” of information for the device and browser you use to visit the website.
  • Restrict processing: You may have the right to request that we stop processing your personal data, or restrict the processing of it.
  • Withdraw consent: Where we rely on consent to process your personal data, you may have the right to withdraw your consent.
  • Complaint/appeal: If we decline your request, you may have the right to appeal the decision. You can do this by replying to our refusal message.
  • Manage communication preferences: We may send you marketing emails, and you can choose to stop receiving such emails by using the unsubscribe function in the emails we send you. If you choose not to receive marketing emails, we may still send you non-marketing messages, for example information about your account or your orders.

You can exercise these rights where indicated on our website, or by contacting us using the contact details below.

Your status with us is not affected by your exercising your rights. We may need to collect information from you to verify your identity, such as your email address or account information, before we provide a reasoned response to your request. In accordance with applicable law, you may appoint a representative to make requests on your behalf to exercise your rights. Before we accept such a request from a representative, the representative must provide proof that you have authorised them to act on your behalf, and you may also need to verify your identity directly with us. We will respond to your request within the time limit set by applicable law.

Complaints

If you have complaints about how we process your personal data, you can contact us using the contact details below. If you are not satisfied with how we have handled your complaint, you may, depending on where you live, have the right to appeal our decision by contacting us using the contact details below. You may also choose to submit your complaint to Datatilsynet (the Norwegian Data Protection Authority). Within the EEA, you can find a list of the responsible data protection authorities here.

International users

Please note that we may transfer, store and process your personal data outside the country where you live. Your personal data is also processed by employees and external service providers (third parties) and partners in these countries.

If we transfer your personal data out of Europe, we will rely on recognised transfer mechanisms, such as the European Commission's standard contractual clauses, or equivalent agreements from the relevant competent authority in the United Kingdom (as relevant), unless the data transfer is to a country that has been deemed to provide an adequate level of protection.

Contact

If you have questions about our privacy practices or this privacy policy, or if you wish to exercise any of your rights, you can email us at kundeservice@nordwells.no, or alternatively write to us at NordWell Group AB, Blästergatan 21, 462 73 Vänersborg, Sweden.

For the purposes of applicable data protection law, and unless otherwise expressly stated, we are the controller of your personal data.