Privacy policy

Last updated: March 27, 2025

This Privacy Policy explains how VIREA (“we”, “us”, “our”) collects, uses, stores, and shares your personal data when you visit, use our services, or make a purchase from virea.se (the “Website”), or otherwise communicate with us (collectively, the “Services”).

In this Privacy Policy, “you” refers to any user of the Services, including customers, website visitors, or individuals whose personal data we process.

We recommend that you read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational reasons. The updated version will be published on our Website and indicated by the “Last updated” date above.

How We Collect and Use Personal Data

We collect personal data from different sources depending on how you interact with us. We use this data to:

Provide and improve our Services

Process orders and payments

Communicate with you

Comply with legal obligations

Prevent fraud and ensure security

All processing is carried out in accordance with the General Data Protection Regulation (GDPR).

Personal Data We Collect

Information You Provide Directly

This may include:

Contact details: name, address, email address, phone number

Order information: billing and shipping address, payment confirmation, order history

Account information: login details and security information

Customer support information: messages and correspondence with us

Providing certain information may be necessary to use specific features of the Services.

Information Collected Automatically (Usage Data)

When you use our Website, we may automatically collect information such as:

Device type, browser, and operating system

IP address

Pages viewed and actions taken

Cookies and similar tracking technologies

Information from Third Parties

We may receive personal data from trusted third parties, such as:

E-commerce platform providers (e.g. Shopify)

Payment service providers (to process payments securely)

Shipping and logistics partners

Analytics and marketing partners

All third-party data is processed in accordance with this Privacy Policy.

How We Use Your Personal Data

1. To Provide Products and Services

Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

Process payments

Deliver orders

Manage returns and customer accounts

2. Marketing & Communication

Legal basis: Legitimate interest or consent (Article 6(1)(f) or (a) GDPR)

Send newsletters or offers (only if you have opted in)

Display relevant advertising

You can unsubscribe at any time.

3. Security & Fraud Prevention

Legal basis: Legitimate interest (Article 6(1)(f) GDPR)

Prevent misuse, fraud, or unauthorized access

4. Customer Support & Service Improvement

Legal basis: Legitimate interest (Article 6(1)(f) GDPR)

Respond to inquiries

Improve user experience

Cookies

We use cookies to operate and improve our Website. Cookies help us:

Remember user preferences

Analyze website traffic

Improve functionality

You can manage or disable cookies via your browser settings.

For more information, see Shopify’s cookie policy:

https://www.shopify.com/legal/cookies

How We Share Personal Data

We may share personal data with:

Service providers (payment, shipping, IT, analytics)

Marketing partners (only where permitted by law)

Authorities when required by law

We never sell personal data.

Third-Party Websites

Our Website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies separately.

Children’s Data

Our Services are not intended for children under 16. We do not knowingly collect personal data from children. If this occurs, please contact us and we will delete the data.

Data Retention

We retain personal data only as long as necessary to:

Fulfill contracts

Comply with legal obligations

Resolve disputes

Your Rights Under GDPR

If you are located in the EEA, you have the right to:

Access your personal data

Request correction or deletion

Restrict or object to processing

Data portability

Withdraw consent at any time

You can exercise your rights by contacting us at support@virea.se

Complaints

If you believe we process your data unlawfully, you have the right to lodge a complaint with your local data protection authority.

In Sweden, this is IMY (Integritetsskyddsmyndigheten).

International Transfers

If personal data is transferred outside the EU/EEA, we ensure adequate protection using approved safeguards such as Standard Contractual Clauses.

Mobile Messaging (SMS) Terms – EU

Last updated: March 27, 2025

By subscribing to VIREA’s SMS service, you consent to receive informational or marketing messages from us.

Participation is voluntary

Consent is not required to make a purchase

Message frequency may vary

Standard message and data rates may apply

You can unsubscribe at any time by sending STOP or using the unsubscribe link.

We process SMS data in accordance with GDPR and applicable ePrivacy rules.

Contact & Data Controller

VIREA is the data controller for your personal data.

📧 Email: support@virea.se