Privacy Policy

PRIVACY POLICY – MERCHANDISE ZONE

Last updated: October 19, 2026

INTRODUCTION

VaruZone is an international e-commerce business that offers products for home, leisure and everyday life.

The website's marketing, customer service and administrative operations are provided with support from ArcticLyx AB and SIA “Nordic Commerce Media”.

The sale of products via VaruZone is conducted by Nordic Digital Commerce Ltd, which is the legal seller and payment recipient.

This privacy policy describes how personal information is collected, used, stored and shared when you visit the website, shop with us or contact our customer service.

We protect your personal privacy and process personal data in accordance with applicable data protection legislation, including EU General Data Protection Regulation (GDPR) and applicable UK data protection regulations.

COMPANY INFORMATION AND ROLES

VaruZone's marketing, customer service and administrative services are provided with the support of the following companies:

ArcticLyx AB
Corporate registration number: 559504-6904
Tin Ring 59
176 74 Jarfalla
Sweden

SIA “Nordic Commerce Media”
Registration number: 40203753691
Ieriķu Street 32-85
Riga, LV-1084
Latvia

Both companies provide assistance with marketing, customer communication, customer support and administrative services.

Seller

Nordic Digital Commerce Ltd
Company number: 17237704
Suite 302, 4 Station Square
Cambridge, CB1 2GE
UK

Nordic Digital Commerce Ltd is the legal seller and contractual party when purchasing via VaruZone and is responsible for the personal data processing where the company determines the purposes and means of the processing, for example when handling purchase agreements and associated obligations.

ArcticLyx AB and SIA “Nordic Commerce Media” may process personal data within the framework of their support services.

When these companies process personal data on documented instructions from a data controller, they act as data processors. If any of the companies independently or jointly determines the purposes and means of a particular processing, it may instead be the data controller or joint data controller for that processing.

The actual division of responsibilities shall follow the companies' operations and applicable agreements.

PERSONAL DATA THAT WE COLLECT

We may process the following categories of personal data:

  • name

  • billing address

  • delivery address

  • email address

  • phone number

  • order number and order history

  • information about purchased products

  • payment status and transaction references

  • refund and return information

  • communication with customer service

  • IP address

  • device and browser information

  • information about how the website is used

  • cookie identifiers and similar technical data

  • marketing preferences and consent settings

Payment information is also processed by the external payment service providers used for the purchase.

What data is processed depends on how you use the website and which services you choose.

SOURCES OF PERSONAL DATA

Personal data may be collected:

  • directly from you when you make a purchase

  • when you contact customer service

  • when you register or use a customer account

  • automatically through the website and cookies

  • from payment service providers

  • from delivery and logistics partners

  • from other service providers when relevant and permitted by law

HOW WE USE PERSONAL DATA

We process personal data for the following purposes:

  • execute and administer orders

  • manage payments and refunds

  • arrange delivery of ordered products

  • handle returns and complaints

  • provide customer support

  • communicate about orders and deliveries

  • prevent fraud and security incidents

  • maintain the technical functioning of the website

  • analyze and improve the website

  • carry out marketing when there is a legal basis

  • fulfill accounting, tax and other legal obligations

We do not use personal data for purposes that lack an applicable legal basis.

LEGAL GROUNDS FOR PROCESSING

We process personal data when there is a legal basis under applicable data protection legislation.

Fulfillment of contracts

Personal data is processed when necessary to carry out purchases, handle orders, payments, deliveries and customer matters relating to the purchase agreement.

Legal obligation

Certain data is processed and saved to meet requirements under, among other things, accounting, tax and consumer legislation.

Legitimate interest

Personal data may be processed on the basis of legitimate interest when the processing is necessary and our interests do not outweigh your rights and freedoms.

This may apply, for example, to certain customer service, fraud prevention and website security.

Consent

When consent is required, for example for certain types of cookies, tracking or marketing, we request your consent before processing begins.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

PAYMENTS AND ORDER MANAGEMENT

Nordic Digital Commerce Ltd is the legal seller and payment recipient for purchases via VaruZone.

Payments are processed through the external payment service providers offered in the checkout.

Personal data necessary for payment processing may be shared with relevant payment service providers.

Orders can be handled through international suppliers and external logistics partners on behalf of Nordic Digital Commerce Ltd.

To complete a delivery, necessary personal information, such as name, delivery address, telephone number and order information, may be shared with relevant delivery partners.

ArcticLyx AB and SIA “Nordic Commerce Media” may process personal data for customer service, customer communication and administration within the framework of their respective assignments.

SHARING OF PERSONAL DATA

Personal data may be shared with the following categories of recipients when necessary and lawful:

  • Shopify and e-commerce platform providers

  • external payment service providers

  • delivery and logistics partner

  • international suppliers that perform order fulfillment

  • IT and hosting services

  • customer support providers

  • marketing and analytics providers

  • accounting and advisory services

  • authorities when disclosure is required by law

Sharing is limited to what is necessary for the respective purpose.

When a recipient processes personal data as a data processor, an applicable data processor agreement must be in place.

We may also disclose information when necessary to comply with legal obligations or handle legal claims.

RELATIONSHIP WITH SHOPIFY

VaruZone uses Shopify as its e-commerce platform.

Shopify provides technical services that enable, among other things:

  • website function

  • customer accounts

  • shopping cart and checkout functions

  • order processing

  • integrations with other service providers

  • website security

Shopify may process personal data in accordance with its applicable agreements and data protection terms.

For more information, see Shopify's privacy policy.

COOKIES AND SIMILAR TECHNOLOGIES

The website may use cookies and similar technologies to provide and improve features.

These may include:

  • necessary cookies for the website to function

  • cookies for customer accounts and shopping cart

  • analytics cookies

  • cookies for marketing and advertising

Necessary cookies can be used without consent when the legal requirements are met.

For cookies that require consent, this is obtained before they are activated.

You can change or withdraw your consent through the website's cookie settings.

More detailed information about which cookies are used, their purposes, suppliers and storage times should be found in the website's cookie information.

MARKETING

We may use personal data to communicate about offers, products and news when there is a legal basis for this.

When consent is required, it is obtained prior to marketing.

You can unsubscribe from marketing communications at any time by using the unsubscribe link in the message or by contacting customer service.

You also have the right to object at any time to the processing of your personal data for direct marketing purposes.

ArcticLyx AB and SIA “Nordic Commerce Media” can provide marketing services within the framework of their assignments.

THIRD-PARTY WEBSITES

The website may contain links to external websites.

When you visit an external website, another party may be responsible for the processing of your personal data.

We recommend that you read the external website's privacy policy.

CHILDREN'S PERSONAL DATA

VaruZone's services are not specifically aimed at children under the age of 16.

We do not knowingly collect personal data from children in violation of applicable data protection laws.

If we discover that personal data has been collected without the required legal basis, we will take appropriate action.

SECURITY

We take appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration and unauthorized processing.

The security measures are adapted to the nature of the treatment and the risks that may arise.

No method of electronic communication or storage can be guaranteed to be completely risk-free.

STORAGE OF PERSONAL DATA

We only retain personal data for as long as is necessary for the purpose for which it was collected or as long as required by applicable law.

The storage time may depend on:

  • if a customer account is active

  • if an order is still being processed

  • legal requirements for accounting and documentation

  • handling of complaints and disputes

  • need for security and fraud prevention measures

When data is no longer needed, it is deleted or anonymized, unless continued storage is required by law.

More detailed information about applicable retention periods or criteria for determining them can be requested via our contact address.

YOUR RIGHTS

Under applicable data protection law, you may have the right to:

  • request access to your personal data

  • request correction of incorrect information

  • request deletion of personal data

  • request restriction of processing

  • object to certain treatment

  • request data portability when the conditions are met

  • revoke previously given consent

  • receive information about how your personal data is processed

Some rights may be limited when continued processing is required by law or when other legal exceptions apply.

You can exercise your rights by contacting us at:

info@varuzone.se

We will handle your request within the time limit set by applicable data protection legislation.

You also have the right to file a complaint with the competent data protection authority, such as the Swedish Data Protection Authority (IMY) in Sweden.

Website: https://www.imy.se

INTERNATIONAL TRANSFERS

VaruZone conducts international e-commerce and collaborates with service providers and logistics partners in different countries.

Personal data may therefore be processed or transferred outside the EU/EEA, including in connection with international order processing, deliveries and technical services.

When personal data is transferred to countries outside the EU/EEA, we ensure that the transfer is supported by applicable data protection legislation.

This can be done through a valid adequacy decision or through other approved safeguards, such as standard contractual clauses, where required.

You can contact us for information about the safeguards that apply to relevant international transfers.

CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our operations, our services, or applicable legal requirements.

The latest version is published on the website.

The date of last update is indicated at the top of the document.

CONTACT

For questions about this privacy policy or the processing of personal data, please contact:

ProductZone Customer Service
E-mail: info@varuzone.se
Phone: +46 73 576 55 93

Customer service is provided with the support of ArcticLyx AB and SIA “Nordic Commerce Media”.

Questions regarding the processing of personal data are forwarded, if necessary, to the party responsible for the processing in question.