Privacy Policy

Your privacy matters. This policy explains how we collect and use your personal data when you visit our website or place an order, in line with the EU General Data Protection Regulation (GDPR).

1. Data controller

Nutraframe AB, organization number 559567-1503, Torsgatan 27, 113 21 Stockholm, Sweden. Contact: info@nutraframe.eu.

2. What we collect

• Order data: name, shipping address, email, phone, order details.
• Payment data: handled by our payment provider; we receive a confirmation token, not card numbers.
• Account data: if you create an account, your login email and preferences.
• Communication: messages you send us via email or contact form.
• Usage data: anonymized analytics (pages visited, device, country).

3. Why we use it (legal basis)

• To process orders — performance of a contract.
• To meet legal obligations (accounting, tax) — legal obligation.
• To improve the site and marketing — your consent, or our legitimate interest.
• To respond to your messages — legitimate interest.

4. Cookies and analytics

We use a small number of cookies to keep the site working (essential cookies) and, with your consent, to measure how it is used (analytics cookies). You can change your choice at any time — see our Cookie Policy.

5. Sharing your data

We share data only with providers that help us run the store, including:

• Shopify (e-commerce platform)
• Payment providers
• Shipping carriers
• Email and analytics providers

These providers act as data processors under written agreements. If data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

6. How long we keep your data

• Order and accounting records: 7 years (Swedish Accounting Act).
• Account data: until you delete your account.
• Marketing data: until you withdraw consent.
• Support messages: up to 24 months.

7. Your rights

You can at any time:

• Request access to your data
• Correct inaccurate data
• Request deletion (where applicable)
• Object to or restrict processing
• Request data portability
• Withdraw consent

Email info@nutraframe.eu to exercise these rights. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).