Privacy Policy

Your privacy is important to us. This policy describes how Nailéa ("we", "us") collects, uses and protects your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

Nailéa is the controller of the processing of your personal data. You can reach us at hej@nailea.se.

2. What data we collect

• Name, delivery and billing address
• Email address and phone number
• Order history and payment information (handled by our payment provider)
• IP address, device information and cookies when visiting the site
• Correspondence with our customer service

3. Why we process the data

• To fulfil the purchase agreement and deliver your products
• To handle payments, returns and complaints
• To send newsletters when you actively subscribe
• To comply with legal requirements (incl. the Swedish Accounting Act, 7 years)
• To improve our website and customer experience

4. Legal basis

We process your data on the basis of contract (the purchase), legal obligation (accounting), legitimate interest (security and improvement) and consent (newsletter and optional cookies).

5. How long we keep the data

Order data is stored for 7 years in accordance with the Swedish Accounting Act. Marketing data is stored until you unsubscribe. Accounts are kept as long as they are active, then deleted within 12 months.

6. Recipients of the data

We only share data with suppliers required to perform the service, such as shipping companies, payment providers and IT vendors. All are bound by data processing agreements. We never sell your data to third parties.

7. Transfers outside the EU/EEA

If data is transferred outside the EU/EEA, it is done with safeguards under the GDPR, such as the EU standard contractual clauses.

8. Your rights

• Right to information and access to your data
• Right to rectification and erasure ("right to be forgotten")
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

9. Security

We use technical and organisational security measures to protect your data from loss, misuse and unauthorised access.

10. Contact

For questions about this policy, contact us at hej@nailea.se.