PRIVACY POLICY
Effective Date: October 20, 2025
At Sugar Rush Candy Couture, your privacy is extremely important to us. This privacy policy explains how Sugar Rush c/o North by Northeast AB, reg. no. 559282-5565 (“Sugar Rush”, “we” or “us”) collect, use, disclose, and safeguard your information when you visit any of our websites www.sugarrush-candy.com, sugarrush-candy.de, sugarrush-candy.eu, sugarrush-candy.se or sugarrush-candy.store (the “Site”), place an order, or interact with us in any way.
Sugar Rush is the data controller of any processing of your personal data, unless otherwise stated in this privacy policy.
1. What we collect
We may collect personal data when you (i) make a purchase at our Site, (ii) sign up for news, invites and offers, (iii) are browsing our website. Such personal data will include your name, e-mail address, telephone number, delivery address, payment details, IP address, behavior on the website and other information that you voluntarily provide us. Below you can read more on the purpose and legal ground for our processing of the personal data we collect.
2. Purpose, personal data, legal ground and storage periods
Purchases
Purpose of processing: When you purchase our products and/or create an account, we will process your personal data to fulfil our contractual obligations towards you regarding your purchase.
Categories of personal data: Identity (first name and second name), delivery address/billing address, telephone number, e-mail address, log in details, order information, payment details, payment history, credit card information and payment reference number.
Legal ground for processing: The processing is necessary for our performance of the purchase contract with you.
Storage period: We store and process the personal data for the period necessary for us to be able to fulfill our contractual obligations unless applicable laws or regulations oblige us to continue the processing, e.g. applicable tax and accounting legislation. We will retain personal data that we process to administer the customer relationship and that is processed in your customer account for 1 year after the customer relationship has ended. The customer relationship is considered to have ended when you (i) choose to delete the account or (ii) have not made a purchase during the last year.
Direct marketing
Purpose of processing: When you sign up for news, invites and offers, we will process your personal data to provide the services as requested by you. Further, to optimize your experience of us, we provide you with relevant marketing information and send reminders about items that are left in your shopping cart.
Categories of personal data: Name, e-mail address and any communication sent to you.
Legal ground for processing: The processing is necessary for our legitimate interests to maintain good customer relations and inform about our business and services.
Storage period: If you opt-out or unsubscribe from our marketing, we will no longer process your personal data for this purpose. Unless there is another legal ground for keeping your data (such as a valid purchase contract), we will also erase your personal data.
Customer support
Purpose of processing: When you request support or other customer service request, we will process your personal data to be able to assist you with the relevant matter.
Categories of personal data: We only use such personal information as we need to be able to provide the service to you securely and efficiently. We use the personal information you provide when you contact us, such as name, contact information and other necessary information. In order to resolve your case, we may also need to access and use transaction information, such as order, payment and delivery information.
Legal ground for processing: If we provide customer support on the basis of a purchase, we consider the processing of your personal data to be necessary for the performance of the purchase contract to which you are party. In other cases, the processing of your personal data is based on our legitimate interest to provide you with the best customer service possible.
Storage period: We store and process your personal data for the period necessary for us to resolve your support matter, however maximum 1 year after latest contact.
Analysis and improvements
Purpose of processing: We may use your personal data to evaluate, develop and improve our products and the Site.
Categories of personal data: IP address, page visited, other device/browser information and user-generated information from our cookies.
Legal ground for processing: The processing is based on the consent you give us when you accept the cookies. In the case of strictly necessary cookies, our processing is necessary for our legitimate interest to ensure that our products and Site are meeting your and our needs over time and to develop and improve our products and Site.
Storage period: The storage period for our cookies you will find here.
3. Data security
We implement security measures to protect your personal data. All transactions are processed through a secure gateway provider and are not stored or processed on our servers.
4. Sharing of your personal data and international transfers
To fulfill the purposes described above, we will need to share personal data with third parties, e.g. IT-suppliers and e-commerce platform such as Shopify, payment service providers such as Klarna and PayPal, and transport companies such as DHL and PostNord, in order for them to handle and deliver your order. We may also share your personal data with legal authorities when required by law or to protect our rights and safety. When your personal data is shared with other controllers, they will be responsible for your personal data and we refer to them for more information on how they process your personal data.
The personal data is generally processed within EU/EEA. If the data is transferred to a country outside the EU/EEA, we ensure that such transfer is lawful. If the European Commission does not consider that the country ensures an adequate level of protection, the transfer to the third country will be supported by the EU Commission’s standard contractual clauses for the transfer of personal data to a country outside the EU/EEA. Where applicable, the standard contractual clauses are supplemented by additional safeguards. Finally, your personal data may also be transferred to the USA, where applicable, and such transfers are based on the recipient being certified under the EU-US Data Privacy Framework.
5. How we use cookies
Cookies are small text files sent to your web browser from a web server and stored on your device or your computer’s hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
For all strictly necessary cookies placed on our website, consent is not required. This includes, for example, cookies that allow our webshop to hold your items in the cart while you are shopping. As for all other types of cookies, we ask for your consent in our cookie banner. You are always able to withdraw your consent.
To find out more on the specific cookies we use on our website, click here.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. You can choose to accept or decline cookies via the cookie settings.
6. Third-party links
Our site may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. We encourage you to review their privacy policies separately.
7. Your rights
You are entitled to the following rights under applicable data protections laws:
· The right to access: You are entitled to receive certain information on our processing of your personal data. Such information is provided in this information document. Further, you have the right to receive a copy of the personal data we process relating to you. Upon request, we will provide a copy of your personal data in a commonly used electronic form.
· The right to rectification: You are entitled to obtain rectification of inaccurate personal data and to have incomplete personal data completed.
· The right to erasure (“right to be forgotten”): You may under certain circumstances request us to delete your personal data. Please note that this right is not unconditional. Therefore, an attempt to invoke the right might not lead to an action from us.
· The right to restriction of processing: You may under certain circumstances request from us to restrict the processing of your personal data. Please note that this right is not unconditional. Therefore, an attempt to invoke the right might not lead to an action from us.
· The right to data portability: You are entitled to receive your personal data (or have your personal data directly transmitted to another data controller) in a structured, commonly used and machine-readable format.
· The right to object: You are entitled to object to certain processing activities conducted by us in relation to your personal data, such as our processing of your personal data based on our legitimate interest. The right to object also applies to processing of your personal data for direct marketing purposes.
If you have questions concerning our processing of your personal data, or want to invoke your rights, contact us at hello@sugarrush-candy.com. You also have the right to lodge a complaint with Integritetsskyddsmyndigheten, the supervisory authority in Sweden.
8. Changes to This Policy
If we change how we handle your personal data or how we use cookies, we will promptly update this privacy policy and publish it on this website.
9. Contact Us
If you have any questions about this privacy policy, please contact us at:
email: hello@sugarrush-candy.com, phone: +46 70 9246577