Privacy policy

Last updated: 27 September 2026

At Outdoors Nordic we take your privacy seriously. This policy explains what personal data we collect, why we collect it, on what legal grounds, who can access it and what rights you have.

Data controller

Store name: Outdoors Nordic

Company details

The address above is not the return address.

Email: info@outdoorsnordic.com

What personal data do we collect?

Contact details: name, email address, phone number, delivery and billing address.
Order and payment information: what you buy, return or exchange, order history, payment method and payment status. Card details are handled by our payment providers, not by us.
Account information: if you create an account, for example login details and settings.
Customer service information: what you write to us with questions, complaints, exchanges and returns.
Reviews: ratings, photos and the name you choose to publish.
Device and usage data: IP address, device and browser information, unique identifiers, which pages and products you view and what you add to your cart.
Cookies and similar technologies: see "Cookies and tracking".

The data comes directly from you, automatically when you use the website, or from our service providers and advertising partners.

Why do we process your personal data?

Purchase and delivery: process orders and payments, deliver goods, send order and shipping confirmations and handle returns and exchanges. Legal basis: contract.

Customer service: answer your questions and handle complaints and warranty cases. Legal basis: contract and legitimate interest.

Legal obligations: for example accounting and consumer protection. Legal basis: legal obligation.

Security: prevent fraud and misuse. Legal basis: legitimate interest.

Newsletter by email and SMS: offers and news. Legal basis: consent. You can unsubscribe at any time using the link in the email or by replying STOP to an SMS.

Advertising and measurement: show relevant ads on social media and search engines, for example, and measure how they perform. Legal basis: consent where the law requires it, see "Cookies and tracking".

Analytics and improvement: understand how the website is used in order to improve it. Legal basis: consent where the law requires it, otherwise legitimate interest.

Cookies and tracking

We use cookies and similar technologies to make the website work, for analytics and for marketing. How we ask for consent depends on where you are:

EU/EEA and the United Kingdom: we only use necessary cookies until you have actively given your consent. You decide whether to accept or reject analytics and marketing cookies.
Switzerland: we inform you about cookies and you can reject analytics and marketing cookies at any time.
United States: you can opt out of the sharing of personal data for targeted advertising via the "Your privacy choices" link.

You can change or withdraw your consent at any time through the cookie settings at the bottom of the website.

Who can access your personal data?

We do not sell your personal data. We share it when needed to run the store, fulfil agreements, market ourselves or comply with the law:

Service providers (processors) that process data on our behalf: e-commerce platform, payment providers, warehousing and logistics partners, email and SMS service, review service, analytics and measurement tools, and IT and customer service systems. They process the data on our instructions and under data processing agreements.
Advertising and marketing partners, for example Meta (Facebook and Instagram), Google and TikTok, to display and measure ads. In some cases they also process the data for their own purposes under their own privacy policies.
Authorities when we are required by law.
Advisers such as auditors and lawyers when needed.
In a business transfer, for example if the business is sold.

Our relationship with Shopify

Our store runs on Shopify, which processes personal data about how you use the store in order to provide and improve the service. For certain features based on your interactions with our store, other merchants and Shopify, Shopify is an independent controller and also handles your requests about that data. Read more and exercise your rights through Shopify's privacy portal: https://privacy.shopify.com/en

Transfers outside the EU/EEA

Some suppliers and partners may process data outside the EU/EEA, for example in the United States and Canada. In those cases we make sure appropriate safeguards are in place, either an adequacy decision (for example the EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.

How do we protect your data?

We use encrypted connections (SSL/TLS), restricted access for authorised staff and ongoing security updates. No security measure is completely impenetrable, so please do not send sensitive information through insecure channels and keep your login details private.

How long do we keep your data?

Order and accounting records: under the Swedish Accounting Act, as a rule seven years.
Customer service cases: as long as needed for the case, complaints and warranties.
Newsletters and consents: until you unsubscribe or withdraw your consent.
Account: until you close it.

After that the data is deleted or anonymised.

Your rights

Depending on where you live, you have the right to:

access your data and receive a copy of it,
have inaccurate data corrected,
have data erased, to the extent we are not required to keep it by law or contract,
request restriction of processing,
receive the data you provided in a machine-readable format (data portability),
object to processing based on legitimate interest, including direct marketing,
withdraw consent at any time,
opt out of sharing for targeted advertising (including in certain US states) via "Your privacy choices".

If you visit the website with Global Privacy Control enabled, we treat this, depending on where you are, as a request to opt out of sharing for targeted advertising.

Contact us to exercise your rights. We may need to verify your identity and we respond within the time the law requires. You can also appoint an authorised agent to make the request on your behalf.

If you are unhappy with how we handle your data, you have the right to complain to a supervisory authority:

United Kingdom: the Information Commissioner's Office (ICO), ico.org.uk.
Canada: the Office of the Privacy Commissioner of Canada, www.priv.gc.ca.
Australia: the Office of the Australian Information Commissioner (OAIC), www.oaic.gov.au.
New Zealand: the Office of the Privacy Commissioner, www.privacy.org.nz.
United States: there is no single federal privacy authority. Depending on your state you may be able to contact your state Attorney General, and you can use "Your privacy choices" to exercise your opt-out rights directly with us.

As we are a Swedish company, the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), www.imy.se, is also the competent authority for us. You can contact the authority where you live or the IMY.

Children

Our website is not directed at children and we do not knowingly collect data about people under 16. Contact us if you believe your child has given us data and we will delete it.