Last updated: 28 August 2026

NEXO AB operates this online store and is responsible for the processing of personal data as described in this Privacy Policy. Our online store uses Shopify as its e-commerce platform, which enables us to provide our products and services to you.

This Privacy Policy explains how NEXO AB collects, uses, stores, and discloses personal data when you visit our website, use our services, make a purchase or other transaction, create an account, contact us, or otherwise interact with our online store.

We respect your privacy and process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where applicable.

Data Controller

NEXO AB is the data controller for the processing of personal data described in this Privacy Policy, except where otherwise required by applicable law or where Shopify independently processes personal data as a separate data controller.

You can find NEXO AB's contact details at the end of this Privacy Policy.

Personal Data We Collect or Process

The personal data we process depends on how you use our online store and services. We may process the following categories of information:

• Contact information, such as your name, email address, telephone number, billing address, and shipping address.
• Order and transaction information, such as products you order, order numbers, order history, returns, refunds, and delivery information.
• Payment-related information, such as payment method, payment status, and transaction information. Payments are processed by Shopify and/or our payment providers, and we normally do not have access to your complete payment card details.
• Account information, if you create a customer account, such as account details, settings, and preferences.
• Communications with us, such as the content of messages, customer service requests, questions, complaints, and return requests.
• Technical information, such as IP address, browser, device, operating system, network information, and other technical identifiers.
• Usage information, such as how you navigate the website, which pages and products you view, and how you interact with our services.
• Marketing and consent information, such as your preferences regarding email marketing, cookies, personalization, and similar settings.

Sources of Personal Data

We primarily collect personal data directly from you when you make a purchase, create an account, contact us, subscribe to marketing communications, or otherwise use our online store.

Certain information is collected automatically when you use the website, including through cookies and similar technologies.

We may also receive personal data from Shopify, payment providers, carriers, technical service providers, and other partners that help us provide and administer our services.

How and Why We Use Your Personal Data

We process personal data only where we have a clear and legitimate purpose for doing so.

Orders and Performance of a Contract

We process personal data to receive and administer orders, process payments, arrange delivery, manage returns and refunds, communicate with you regarding your order, and otherwise perform our contract with you.

The legal basis for this processing is performance of a contract or taking steps at your request before entering into a contract.

Customer Service and Communication

We process your contact details and information relating to your inquiry in order to answer questions, assist with orders, handle complaints, returns, and other customer service matters.

This processing is based on performance of a contract and, where relevant, our legitimate interest in providing good customer service and administering our business.

Accounting and Legal Obligations

We may process and retain certain information where required to comply with legal obligations, including accounting, tax, consumer protection, and other applicable laws.

The legal basis for this processing is compliance with a legal obligation.

Security and Fraud Prevention

We may process personal data to protect our online store, our customers, and our business, including to prevent and detect fraud, misuse, security incidents, and unlawful activity.

This processing is based on our legitimate interest in protecting our business, customers, and systems and, where applicable, on legal obligations.

Improving Our Services

We may use information about how our online store is used to analyze functionality, improve the user experience, develop our services, and understand how customers interact with our website.

Where consent is not required, this processing is based on our legitimate interest in developing and improving our business. Where applicable law requires consent, we process such information only after consent has been provided.

Marketing

If you have subscribed to marketing communications, we may use your contact information to send information about products, offers, promotions, and other news.

Where required by applicable law, this processing is based on your consent. You may unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us.

If you unsubscribe from marketing communications, we may still send non-marketing messages that are necessary in connection with an order, customer account, or other existing customer relationship.

Cookies and Similar Technologies

Our online store uses cookies and similar technologies to enable the website to function, remember preferences, provide features, analyze website usage, and, where permitted, support marketing and personalization.

Certain cookies are necessary for the website and its basic functions to operate.

Where applicable law requires consent for non-essential cookies or similar technologies, we will request your consent before such processing takes place.

You can manage available privacy and cookie settings through the options provided in our online store and through your browser settings.

Personalized Advertising and Your Choices

Depending on the services and features used, personal data may be processed for advertising, analytics, or personalization purposes.

If you are covered by laws that provide a right to object to or opt out of certain uses of personal data for targeted advertising, sale, or sharing, you may use our Data Sharing Opt-Out page, where this feature is available in your region, or contact us.

Where Global Privacy Control is supported and applicable in your region, such a signal may be treated as a request to opt out of certain processing.

How We Disclose Personal Data

We do not sell personal data in the traditional sense.

However, we may disclose or make personal data available to service providers and other parties where necessary to operate our online store and provide our services.

This may include Shopify, payment providers, carriers and logistics partners, IT and cloud service providers, analytics providers, marketing partners, customer service providers, professional advisers, and authorities where disclosure is required by law.

We may also disclose information in connection with a merger, business transfer, reorganization, or other similar corporate transaction, in accordance with applicable law.

Service providers that process personal data on our behalf may only process such information in accordance with applicable agreements and data protection requirements.

Our Relationship with Shopify

Our online store uses Shopify as its e-commerce platform.

Shopify processes personal data in order to provide the technical services necessary to operate our online store, manage orders, and provide relevant features.

In certain situations, Shopify processes personal data on our behalf as a data processor. For some services and features, Shopify may also process personal data as an independent data controller in accordance with Shopify's own terms and privacy policies.

If we use features such as Shopify Network Intelligence or other Enhanced Services, Shopify may process information in accordance with its own data protection terms and legal bases.

More information about how Shopify processes personal data and your rights in relation to Shopify can be found in Shopify's privacy policy and privacy portal.

Third-Party Websites and External Links

Our online store may contain links to websites, social media platforms, or other services operated by third parties.

If you visit an external website, that third party's own privacy and security terms will apply. NEXO AB is not responsible for how external websites process personal data.

We recommend reviewing the relevant third party's privacy policy before providing personal data.

International Data Transfers

Shopify and some of our other service providers may process or store personal data in countries other than the country in which you live.

Where personal data subject to the GDPR is transferred outside the European Economic Area (EEA), we or our service providers use approved safeguards where required, such as adequacy decisions, the European Commission's Standard Contractual Clauses, or other lawful transfer mechanisms.

How Long We Retain Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected or for as long as we are legally required to retain it.

The retention period for particular information depends on factors including the type of data, our relationship with you, legal obligations, accounting requirements, the need to handle complaints or disputes, and other legitimate business needs.

When personal data is no longer required, it will be deleted, anonymized, or otherwise handled in accordance with applicable law.

Security

We use reasonable organizational and technical measures to protect personal data against unauthorized access, loss, misuse, alteration, or unauthorized disclosure.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

Please do not send sensitive or confidential information to us through insecure communication channels unless necessary.

Children's Personal Data

Our online store and services are not specifically directed at children.

We do not knowingly collect personal data from children in violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided personal data to us improperly, please contact us so that we can investigate and, where appropriate, delete the information.

Your Rights

If the GDPR or other applicable data protection laws apply to you, depending on the circumstances, you may have the right to:

• receive information about how your personal data is processed and request access to it;
• have inaccurate or incomplete personal data corrected;
• request deletion of personal data;
• request restriction of processing;
• receive certain personal data in a structured, commonly used, and machine-readable format;
• object to processing based on legitimate interests;
• object to direct marketing;
• withdraw consent where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Certain rights are subject to limitations and may not apply in every situation. For example, we may need to retain certain information in order to comply with a legal obligation.

We may need to verify your identity before processing a request.

To exercise your rights, please contact us using the contact details at the end of this Privacy Policy.

Complaints

If you have questions or complaints about how we process your personal data, we encourage you to contact us first so that we have an opportunity to assist you.

If you are located within the EEA, you also have the right to lodge a complaint with the competent data protection authority.

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Changes to This Privacy Policy

We may update this Privacy Policy when necessary, including due to changes in our business, services, technical solutions, or applicable laws and regulations.

When this Privacy Policy is updated, we will publish the revised version on this website and update the “Last updated” date.

Where a change requires specific notice or renewed consent under applicable law, we will handle this in accordance with those requirements.

Contact

If you have questions about our processing of personal data, this Privacy Policy, or if you wish to exercise any of your rights, please contact us:

NEXO AB
Hästhovsgatan 9C
722 27 Västerås
Sweden

Company registration number: 559581-5050
VAT number: SE559581505001
Email: support@getnexo.shop
Phone: +46 769248894

NEXO AB is the data controller for the processing of personal data described in this Privacy Policy, except where otherwise required by applicable law or where Shopify independently processes personal data as a separate data controller.