This page explains what personal data we hold, why, and your rights. Last updated 9 October 2026.
Who is responsible
Virenord (Viraine), Karlavägen 53, 115 26 Stockholm, Sweden, info@viraine.com.
What we use and why
- Orders: name, addresses, email, telephone number (needed by the carrier for delivery), what you bought and payment status. Used to deliver your order, handle returns and complaints, and keep the accounts. Basis: our contract with you and our legal obligations (Art. 6(1)(b) and (c) GDPR). We need these details to take your order.
- Fraud prevention: our payment provider runs automated checks at checkout, which can decline a payment. If you think that is wrong, write to us and a person will look at it. Basis: legitimate interest (Art. 6(1)(f)).
- Order emails: confirmation, dispatch and refund emails, and one reminder if a payment does not go through. Basis: our contract and legitimate interest.
- Newsletter and welcome code: your email address and a record of your consent. Basis: consent, which you can withdraw at any time via the link in every newsletter.
- Email after delivery: one email with care tips, a review invitation and a personal thank-you code, only if you tick the box at checkout. We use your parcel’s tracking status to send it after delivery. Basis: consent. Published reviews show your first name and last initial, never your email.
- Your messages to us: to answer and follow up. Basis: legitimate interest.
- Site visits: technical logs to keep the site secure, and page-view totals without cookies. Basis: legitimate interest. Cookies are explained on our cookie page.
- Advertising measurement: only if you choose Accept in the cookie notice, Meta Platforms Ireland receives the pages you view, what you add to your bag and, when you order, the order value and your contact details in hashed form, so we can see which of our ads work. Basis: consent, which you can withdraw at any time under Change cookie settings on our cookie page. Meta and we are jointly responsible for this collection; Meta’s own use is described in its privacy policy.
Who receives it
Only what each needs: our payment provider, the partners who deliver your order, our IT and email service providers, and authorities where the law requires it. Our service providers act on our instructions. With your consent, also Meta Platforms Ireland as described above. We never sell your data.
Some of these recipients may process data outside the EU/EEA. When they do, the transfer is protected by an EU adequacy decision or the European Commission’s standard contractual clauses. Write to us for details.
How long we keep it
- Order and accounting records: seven years after the end of the financial year, as Swedish bookkeeping law requires.
- Other order details: until the order, any return and any complaint are settled.
- Your messages: up to two years.
- Newsletter: until you unsubscribe. Account: until you ask us to close it.
- Technical logs: a short period.
Your rights
You may ask for access to your data, correction, erasure, restriction, data portability, and object to processing based on legitimate interest. You may withdraw consent at any time. Write to info@viraine.com.
You may also complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or to the authority where you live.