How we handle your data.

This is a draft. Review by legal counsel is required before public launch.

1. Data controller

Snusboden AB, company registration number xxxxxx-xxxx, is the data controller for all processing described here. Contact: dataskydd@snusboden.se.

2. What data we collect

• Contact details: name, email, phone number, shipping address
• Order data: order history, payment method (reference — not card numbers), selected products
• Age verification: year of birth and a transaction reference from Criipto/BankID — not personal identity number in clear text
• Technical data: IP address, browser type, time of visit

3. Why we process the data

To deliver your order, ensure you are 18, handle customer service, prevent fraud, and comply with the Swedish Bookkeeping Act.

4. How long we keep the data

• Customer account: as long as your account is active — you can delete it any time
• Orders and payments: 7 years (Swedish Bookkeeping Act)
• Age-verification log: 5 years (Swedish Tobacco Act)

5. Who we share data with

• PostNord — for delivery
• Stripe / Klarna / Swish / PayPal — for payments
• Criipto — for BankID verification
• Resend — for transactional emails
• Cloudinary — for image storage (no personal data)
• Swedish Tax Agency / Accounting Standards Board — on audit

No data is sold on. No data is used for targeted advertising to third parties.

6. Your rights

You have the right to request an extract of your data, correct errors, delete your account or object to processing. Email dataskydd@snusboden.se and we'll reply within 30 days. You may also turn to the Swedish Authority for Privacy Protection (IMY) with a complaint.

7. Cookies

We use strictly necessary cookies (cart, login, age gate). We currently use no analytics or marketing cookies. If that changes, this page is updated and we ask for consent.