Privacy Policy

Last updated: May 2025

Nordic Spirit Sweden, operated by JTI Sweden AB, is responsible for this website and store. The website is powered by Shopify. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit or use our services, make a purchase, or otherwise communicate with us.

JTI Sweden AB will be processing your personal data based on consent. You will be offered consent options when you visit our website for the first time. You can change your decisions at any time by reaching out to JTI Sweden AB, see below contact details. If you change your decision, it will not affect the lawfulness of processing based on consent before its withdrawal.

Please read this Privacy Policy carefully. By using our services, you acknowledge that you have read and understood how we process your personal information as described below.

Important: Our services are intended exclusively for persons aged 18 and over. We do not knowingly collect personal information from persons under the age of 18.

Personal Information We Collect

"Personal information" refers to information that identifies or can reasonably be linked to you as an individual. Depending on how you interact with our services, we may collect the following categories of personal information:

• Contact details including name, address, billing address, shipping address, phone number, and email address.
• Financial information including credit and debit card numbers, payment information, and transaction details.
• Account information including username, password, security questions, and preferences and settings.
• Transaction information including products you view, add to your cart, purchase, return, or cancel.
• Communications with us including information you share when contacting customer support or otherwise communicating with us.
• Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
• Usage information including information about how and when you interact with our services.
• Consent information including the timestamp of when you provided your consent and the type of consent given.

Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, for example when you create an account, sign up for our newsletter, visit or use our services, or otherwise provide us with your personal information.
• Automatically through the services, including from your device via cookies and similar technologies when you visit our website.
• From our service providers, when we engage them to provide services and they collect or process personal information on our behalf.
• From partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

• Providing and improving the services. We use your personal information to deliver our services, process payments, fulfil orders, manage your account, arrange delivery, and handle returns and exchanges.
• Marketing and communications. We use your personal information to send marketing and promotional communications by email, provided you have given your consent. You may unsubscribe at any time.
• Security and fraud prevention. We use your personal information to authenticate your account, ensure a secure payment experience, and detect and prevent fraud or other harmful activity.
• Communicating with you. We use your personal information to provide customer support and maintain our business relationship with you.
• Legal reasons. We use your personal information to comply with applicable law, respond to legal requests, or ensure compliance with our terms and policies.

How We Share Your Personal Information

We may share your personal information with third parties in the following circumstances:

• With Shopify, vendors, and other third parties that perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, and fulfilment.
• With business and marketing partners, such as Klaviyo (email and CRM), to provide marketing services and send promotional communications to you.
• With our affiliates or within our corporate group.
• In connection with a business transaction, such as a merger or acquisition.
• To comply with legal obligations, respond to government or law enforcement requests, or protect our rights and services.

We never sell your personal information to third parties.

Relationship with Shopify

Our services are powered by Shopify, which collects and processes personal information about your use of the services in order to provide and improve them. Information you submit may be transferred to and shared with Shopify as well as third parties in countries other than where you reside.

To learn more about how Shopify processes your personal information and your rights in relation to Shopify's processing, visit the Shopify Consumer Privacy Policy at privacy.shopify.com.

Retention and Security

How long we retain your personal information depends on different factors, including whether we need it to maintain your account, provide services, comply with legal obligations, resolve disputes, or enforce agreements.

• Launch waitlist registration: retained until 6 June 2026, after which your consent is converted to a newsletter subscription unless you unsubscribe.
• Newsletter subscription: retained until you unsubscribe.
• Consent log: retained for 3 years to meet GDPR documentation requirements.

Please be aware that no security measure is completely impenetrable. We recommend that you avoid sharing sensitive information via unsecured channels.

Your Rights

Depending on where you are located, you may have the following rights regarding your personal information. These rights are not absolute and may in certain cases be limited by applicable law.

• Right of access. You may request information about the personal information we hold about you.
• Right to erasure. You may request that we delete your personal information.
• Right to rectification. You may request that we correct inaccurate personal information we hold about you.
• Right to restriction of processing. You may request that we restrict or pause the processing of your personal information in certain circumstances.
• Right to data portability. You may request a copy of your personal information in a structured, machine-readable format.
• Right to withdraw consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object to processing. You may object to certain processing of your personal information, including for direct marketing purposes.
• Managing communication preferences. You may unsubscribe from our newsletters at any time via the unsubscribe link in any email we send.

To exercise your rights, please contact us at nordicspirit@jti.com We will respond to your request within 30 days.

Complaints and Supervisory Authority

If you have complaints about how we process your personal information, you are welcome to contact us. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), which is the supervisory authority for data protection matters in Sweden:

International Transfers

Your personal information may be transferred to, stored, and processed in countries outside Sweden and the EU/EEA, for example in the United States via Shopify and Klaviyo. For such transfers, we rely on the European Commission's Standard Contractual Clauses (SCCs) or other recognised transfer mechanisms to ensure an adequate level of protection for your data.

Children and Age Restriction

Our services are intended exclusively for persons aged 18 and over. We do not knowingly collect personal information from persons under the age of 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. The updated version will be published on our website with a revised "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or how we process your personal information, or if you wish to exercise any of your rights, please contact us:

JTI Sweden AB is the data controller for the processing of your personal information under this policy.