Privacy Policy

1. Personuppgiftsansvarig

The Velvet Mask is operated by Nordlume Group AB. We are the data controller for the processing of personal data in connection with your use of our website and your purchases from us.


Contact: info@thevelvetmask.se

2. Vilka uppgifter vi samlar in

When you shop with us or contact us, we may process: name, address, telephone number, e-mail address, order information, payment information (handled by payment providers), IP address, device and browser information, and any communication with our customer service.

3. Varför vi behandlar dina uppgifter

We process personal data to:

  • manage your order, delivery, and payment
  • send order and delivery information
  • provide customer service and handle complaints/returns
  • fulfill legal obligations (e.g., accounting)
  • prevent fraud and misuse
  • improve our website and experience (e.g., analytics)

4. Rättslig grund

Processing is carried out on the basis of:

  • agreement (to be able to complete your purchase)
  • legal obligation (e.g., the Swedish Accounting Act)
  • legitimate interest (e.g., fraud protection and service improvement)
  • consent where required (e.g., certain cookies/marketing)

5. Betalningar och leveranser

Payments are handled by our payment providers (e.g. Klarna/Shopify Payments). We do not store full card details. For delivery, we share necessary information with shipping companies.

6. Mottagare och personuppgiftsbiträden

We may share data with suppliers who provide operations, checkout, payment, shipping, analytics, and customer service. We never share personal data with third parties for their own marketing purposes.

7. Lagringstid

We store data for as long as necessary for the purpose. Order and supporting documentation information is stored in accordance with accounting legislation (usually up to 7 years).

8. Dina rättigheter

You have the right to request access, rectification, erasure, restriction, objection, and data portability. Contact us at info@thevelvetmask.se. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

9. Cookies

We use cookies for functionality, security and statistics. You can manage cookies via your browser and any cookie tools on the website.

10. Ändringar

We may update the policy as needed. The latest version will always be published on the website.