GDPR – Nordic Fulfillment

GDPR & Data Protection (EU/EEA)

This page explains how NordicFulfillment Group AB (“we”, “us”, “our”) processes personal data under the EU General Data Protection Regulation (GDPR) when you visit nordicfulfillment.com or purchase our nicotine pouches.

1. Data Controller

NordicFulfillment Group AB
Email: contact@nordicfulfillment.com
Website: nordicfulfillment.com

NordicFulfillment Group AB is the data controller responsible for processing your personal data under the GDPR.

2. Personal Data We Collect

Depending on how you interact with our website, we may collect:

Identity & contact data (name, email, phone number)
Order & delivery data (billing/shipping address, order contents, order history)
Payment confirmation data (payment details are processed by payment providers, not stored in full by us)
Account data (if you create an account)
Customer support communications
Device & usage data (IP address, browser/device info, website interactions)
Cookie data (see our Cookie Policy for details)
Age verification status (for certain orders/markets where applicable)

We do not knowingly collect personal data from individuals under the legal age required to purchase nicotine products in their jurisdiction.

3. Why We Process Your Data

We process personal data to:

Process and deliver orders, handle returns/claims, and provide customer service
Prevent fraud and ensure platform/security integrity
Comply with legal obligations (e.g., accounting, tax, and regulatory requirements)
Operate, improve, and analyze our website and services
Send service messages about your order (e.g., dispatch and tracking)
Send marketing messages only where permitted and/or where you have consented (you can opt out at any time)

4. Legal Bases (GDPR Article 6)

We rely on one or more of the following legal bases:

Contract: to process your purchase and deliver products
Legal obligation: to comply with accounting, tax, and other mandatory laws
Legitimate interests: to prevent fraud, keep our services secure, and improve our operations
Consent: for certain cookies and, where applicable, marketing communications

5. Sharing & Recipients

We share personal data only when necessary to provide the services and run our store. Typical recipients include:

E-commerce platform providers (e.g., Shopify)
Payment service providers
Shipping and logistics partners/carriers
IT and security providers (hosting, analytics, fraud prevention)
Customer support tools (if used)

We do not sell your personal data.

6. International Transfers

Some of our service providers may process data outside the EU/EEA (for example in the United States). When personal data is transferred outside the EU/EEA, we use recognized safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms, where required.

7. Data Retention

We keep personal data only as long as needed for the purposes described above, including:

To fulfill and support your order
To meet legal obligations (e.g., bookkeeping and tax retention requirements)
To resolve disputes and enforce our agreements

Retention periods vary depending on the data type and legal requirements.

8. Your GDPR Rights

If you are located in the EU/EEA (and in some cases the UK/Switzerland), you may have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Delete your data (in certain cases)
Restrict processing (in certain cases)
Data portability (in certain cases)
Object to processing based on legitimate interests
Withdraw consent (where processing is based on consent)

9. How to Exercise Your Rights

To request access, deletion, correction, or other rights requests, contact us at:

Email: contact@nordicfulfillment.com

For security reasons, we may need to verify your identity before completing your request.

10. Complaints

If you believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with your local data protection authority. If you are in Sweden, this is Integritetsskyddsmyndigheten (IMY).