Your data, kept simple.
COUP is a Nordeaster AB product, registered in Sweden, so we follow European data rules (GDPR). Here is the whole of it, in plain words.
Who we are
COUP is a product of Nordeaster AB, org. no. 559595-6185, VAT SE559595618501, Mariehemsvägen 35 D, 906 52 Umeå, Sweden. We are the controller of the personal data described here. Reach us any time at connect@nordeaster.io.
What we collect
Your email when you join the list. Your name, email, delivery address, order contents and subscription status when you order. Payment status from our payment provider — never your card number. Basic, anonymous visit statistics so we know which pages work.
Why we collect it, and on what basis
To take and deliver your order and run your subscription — that is performance of our contract with you. To send you updates you asked for — that is your consent, withdrawable at any time. To keep the shop secure and understand which pages work — that is our legitimate interest. To keep order and tax records — that is a legal duty under Swedish law.
Who processes it for us
Only the services that let us run the shop and get your box to you: website hosting and database, payment processing, email delivery, and our shipping carrier. Each acts on our instructions under a data processing agreement. We do not sell your data and we do not share it for anyone else's advertising.
Where it is stored
Your data is stored on servers inside the EU/EEA. Where a provider processes data outside the EEA, that transfer is covered by the European Commission's Standard Contractual Clauses.
How long we keep it
Order and accounting records for seven years, as Swedish bookkeeping rules require. Newsletter emails until you unsubscribe, which you can do from any email we send. Visit statistics in aggregate only.
Cookies and browser storage
We use the small amount of browser storage needed to remember your basket and your preferred currency. No advertising trackers. The full list is on our cookie policy page.
Your rights
You can ask for a copy of your data, a correction, deletion, a portable export, or to object to or restrict how we use it. Where we rely on consent you can withdraw it at any time. Write to connect@nordeaster.io and we will reply within a month, usually a few days.
Complaints
If you think we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Last updated 18 September 2026. Nordeaster AB, Mariehemsvägen 35 D, 906 52 Umeå, Sweden. Org. no. 559595-6185. VAT SE559595618501. Questions: connect@nordeaster.io