Privacy Policy

1. WHO WE ARE

Merch Nordic ("we", "us", "our") operates the website merchnordic.com. We are committed to protecting your privacy and handling your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish data protection law.

Contact: privacy@merchnordic.com

2. WHAT DATA WE COLLECT

We collect and process the following personal data:

• Contact form / chat messages: Your email address and message content when you reach out to us through our support chat.
• Newsletter subscriptions: Your email address when you sign up for our newsletter.
• Technical data: We use privacy-friendly analytics that do not use cookies or track individuals. Basic page view data is collected anonymously.

3. WHY WE COLLECT DATA (LEGAL BASIS)

• Support messages: Legitimate interest (GDPR Art. 6(1)(f)) — to respond to your inquiries.
• Newsletter: Consent (GDPR Art. 6(1)(a)) — you actively subscribe by entering your email.

4. HOW WE USE YOUR DATA

• To respond to your support messages and inquiries
• To send you newsletter updates about product launches and brand news (if subscribed)
• To improve our services and website experience

We will never sell your personal data to third parties.

5. DATA STORAGE & SECURITY

Your data is stored securely using industry-standard encryption and security practices. We use the following service providers:

• Supabase (database) — EU/US, SOC2 compliant
• Netlify (hosting) — US-based with GDPR data processing agreements
• Resend (email delivery) — for transactional emails only

6. DATA RETENTION

• Support messages: Retained for up to 12 months after last communication, then deleted.
• Newsletter emails: Retained until you unsubscribe.

7. YOUR RIGHTS (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Ask us to correct inaccurate data
• Erasure: Ask us to delete your data ("right to be forgotten")
• Restriction: Ask us to limit processing of your data
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interest
• Withdraw consent: Withdraw newsletter consent at any time

To exercise any of these rights, email privacy@merchnordic.com.

8. COOKIES

Our website does not use tracking cookies. We use Google Fonts for typography, which may collect anonymized usage data — no personal identification occurs. No cookie consent banner is needed as no personal tracking cookies are set.

9. THIRD-PARTY LINKS

Our site may contain links to external websites. We are not responsible for the privacy practices of other sites. We encourage you to read their privacy policies.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Significant changes will be communicated via email to affected users.

11. COMPLAINTS

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se.