Privacy Policy

Privacy Policy (GDPR)

Last updated: 8 July 2026

BahaNordic AB (we, us) respects your privacy and processes your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law.

Data controller

BahaNordic AB, Torsgatan 7c, 111 75 Stockholm, Sweden. Contact: [email protected].

What data we collect

Name, billing/delivery address, email, phone number, order history and transaction data (we do not store full card numbers), account data if you register, and technical/usage data including IP address and cookies.

Why we process it and legal bases

To take and fulfil your order, deliver goods, handle returns and complaints — performance of a contract.
To take payment and prevent fraud — contract / legal obligation / legitimate interest.
To meet accounting, tax and consumer-law obligations — legal obligation.
To provide customer support — contract / legitimate interest.
To send marketing (e.g. newsletter) — consent (withdraw any time).
To improve and secure our website — legitimate interest.

Sharing your data

We share data only as needed with payment providers, shipping/courier partners (DHL, UPS, DPD, PostNord, Correos), IT/hosting providers and professional advisers, and where required by law.

International transfers

Where data is transferred outside the EU/EEA, we ensure appropriate safeguards (e.g. EU Standard Contractual Clauses).

Retention

We keep personal data only as long as necessary, including to meet legal, accounting and tax requirements.

Your rights

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. You may lodge a complaint with a supervisory authority — in Sweden, the Authority for Privacy Protection (IMY, imy.se). Contact [email protected] to exercise your rights.