Privacy policy

Privacy Policy

Last updated: March 21, 2026

Hemlund operates this website and provides services to customers in the United States and the United Kingdom. This privacy policy describes how personal information is collected, used and disclosed when you use the Services.

1. Personal information we collect: Personal information is collected directly from users, automatically through the Services, and through third-party service providers.

  • Contact and account details: Name, shipping/billing address, phone number, email address and login credentials.

  • Financial information: Payment card details, billing address and transaction history (processed securely).

  • Device and usage data: IP address, browser type, device information and site browsing statistics collected through cookies and similar technologies.

2. How the information is used

  • Service delivery: To fulfill orders, process payments, arrange shipping, administer accounts and handle returns.

  • Marketing and advertising: To send marketing messages and show relevant ads online. Users can stop receiving marketing messages at any time.

  • Security and compliance: To verify accounts, prevent fraudulent activity, secure the platform and meet applicable legal requirements.

3. Disclosure of information Information is disclosed to third parties only in connection with legitimate business operations:

  • Service providers: Partners such as Shopify (hosting and data processing) and providers of logistics and shipping services.

  • Business partners: For marketing and targeted advertising, provided the user has given consent and keeps the right to opt out.

  • Legal and regulatory compliance: To respond to lawful requests, enforce our terms, or in connection with corporate transactions (for example, mergers).

4. User rights and choices Depending on your jurisdiction (Swedish GDPR), users have the following rights over their information:

  • Access, correction and deletion: The right to request a copy of, correct or delete personal information.

  • Opting out of targeted advertising: The right to opt out of the “sale” or “sharing” of information for targeted advertising. Global Privacy Control (GPC) signals are recognized and honored. If you are a California resident (or live in another US state with comparable privacy laws), you can exercise this right on our “Your Privacy Choices” page.

  • Rights specific to Sweden The right to object to processing, to restrict processing and to withdraw consent, without affecting the lawfulness of processing carried out beforehand.

5. Data security and retention Personal information is kept for as long as it is needed for the purposes described, to maintain accounts and to meet legal obligations. Although reasonable security measures are in place, no system for transmitting data can guarantee absolute security.

6. International transfers Information may be transferred, stored and processed outside the user's country of residence. Transfers out of the United States, the United Kingdom or the European Economic Area rely on legally recognized mechanisms, such as standard contractual clauses, to ensure an adequate level of data protection.

7. Contact information For privacy questions, complaints or to exercise data rights, contact the data controller: