Privacy policy

Last updated: 21 September 2026

About this policy

This policy describes how personal data is processed when you use the Vesta Sweden online store, make a purchase or contact us. For privacy questions and rights requests, contact vestamw@gmail.com.

Data, purposes and legal bases

Orders and customer service: name, contact details, billing and delivery addresses, order contents, payment status and messages you send. These are used to handle purchases, payments, deliveries, returns and fault claims. Processing necessary for a purchase is based on contract. General enquiries are handled based on our legitimate interest in providing customer service.
Legal obligations: transaction records and other data required for accounting and statutory duties are processed to comply with legal obligations.
Accounts, operations and security: account details, preferences, IP address, device and browser information, usage data and security logs may be processed to provide services and prevent abuse. The legal basis is contract when necessary for a requested service, otherwise our legitimate interest in a secure and functioning store.
Newsletters, analytics and marketing: contact details and store usage information may be processed for communications, statistics and personalised marketing with your consent where consent is required. Unsubscribe using the link in a message and change your cookie choices in the footer. Withdrawing consent does not affect earlier lawful processing.

Data comes from you, your use of the website and service providers handling payments and deliveries. We cannot complete a purchase without the information necessary for the order. Payment card details are handled by the payment provider through checkout; never email card details to us.

Shopify and other recipients

The store uses Shopify. Data is shared as necessary with Shopify, payment providers, shipping providers such as PostNord, and providers supporting operations and customer service. Data may also be disclosed to authorities as legally required or used to handle legal claims.

Shopify and connected analytics or marketing partners may process store usage information in accordance with your choices and applicable law. Shopify may independently control some processing within its enhanced services. Read Shopify's Consumer Privacy Policy and use Shopify's privacy portal for rights relating to Shopify's own processing.

Cookies and international transfers

Necessary cookies support functions such as your basket, security and preferences. Optional analytics and marketing cookies are managed through the cookie choices in the footer. You can decline them and change your choice later.

Service providers may process data outside the EEA. Transfers requiring specific protection must be covered by applicable safeguards, such as an adequacy decision or the European Commission's standard contractual clauses. Contact us for information about safeguards for a particular transfer.

Retention

Data is retained for as long as needed for the purpose for which it was collected. This depends on outstanding orders and support matters, account use, applicable claims and limitation periods, and legal retention duties. Newsletter data is used until you unsubscribe or consent otherwise ends; necessary records of your opt-out may be retained to respect that choice.

Your rights

Data protection rules may give you rights of access, rectification, erasure, restriction, portability and objection. You can always object to direct marketing. Rights may be limited by obligations such as statutory retention requirements. Contact vestamw@gmail.com. We may need to verify your identity proportionately before disclosing data.

You may complain to the Swedish Authority for Privacy Protection (IMY) or your local data protection authority. Any updated policy will be posted here with a new date.