Privacy Policy

Last updated: 22 October 2025

1. Introduction

At Nic And Mel AB (“we”, “us”, “our”), we are committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy explains what personal data we collect, how we use it, how long we store it, your rights under data protection laws, and how you can contact us.

2. Data Controller

Nic And Mel AB
Data Protection Officer: Johan
Email: johan@nicandmel.com
Address: (please insert full postal address)

3. What Personal Data We Collect

• Customer and order details: name, delivery and billing address, email address, telephone number, and order history.
• Payment information: handled via payment providers (e.g. Qliro). We do not store full card details.
• Communication data: information you provide when contacting us by form or email.
• Technical data and cookies: IP address, browser and device information, usage statistics, referrer URLs, and cookie identifiers.
• Marketing and newsletter data: email address and consent status, if you subscribe to our newsletters.

4. Purposes and Legal Bases

We process your personal data only when necessary and on the following legal bases:

• Performance of a contract: to process your orders, payments, deliveries, and customer service requests (Article 6 (1)(b) GDPR).
• Legal obligations: to comply with tax, accounting, and record-keeping requirements (Article 6 (1)(c) GDPR).
• Legitimate interests: to maintain website security, prevent fraud, perform analytics, and improve our services (Article 6 (1)(f) GDPR).
• Consent: where required, for newsletters, marketing communications, or the use of non-essential cookies (Article 6 (1)(a) GDPR).

5. Recipients and Data Sharing

We do not sell or share your personal data with independent third parties for their own marketing purposes. However, we may share your data with trusted service providers who process it on our behalf, such as:

• Payment service providers: e.g. Qliro, to handle transactions securely.
• Shipping and logistics partners: to deliver your orders.
• IT and hosting providers: for the operation, maintenance, and security of our systems (acting as data processors).
• Public authorities: where required by law or for the establishment, exercise, or defence of legal claims.

If data is transferred outside the EU/EEA, we ensure appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

6. Cookies and Similar Technologies

We use cookies and similar technologies to enable essential website functionality, analyse usage, and—where consent is given—provide personalised content and marketing. You can manage or withdraw your cookie consent at any time through your browser settings or our cookie banner. Please note that some features may not function properly without cookies.

7. Data Retention

We retain your personal data only for as long as necessary for the relevant purpose: order and transaction data are retained in accordance with legal record-keeping requirements, communication data are stored as long as necessary to handle your enquiry, and marketing data are retained until you withdraw your consent or unsubscribe.

8. Your Rights

Under data protection law, you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data (“right to be forgotten”);
• Request restriction of processing;
• Request data portability where processing is based on consent or contract;
• Object to processing carried out under legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at johan@nicandmel.com.

9. Complaints

If you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY): www.imy.se.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. Where significant changes are made, we will inform you appropriately (for example, via email or website notice).

11. Contact

If you have any questions about this Privacy Policy or how we process your personal data, please contact our Data Protection Officer:
Johan
Email: johan@nicandmel.com