Last updated: 5 November 2026
This policy explains how Heat & Smoke AB, which runs ChiliLovers.nu, uses your personal data when you visit the English shop or buy from us.
Who is responsible for your data
Heat & Smoke AB, company registration number 559188-3169, Muraregatan 42, 265 33 Åstorp, Sweden, is the controller of the personal data described here. You can contact us about your data at kundtjanst@chililovers.nu.
What we use your data for
| Purpose | Data | Legal basis |
|---|---|---|
| To handle your order, payment, delivery and customer service | Name, delivery address, telephone number, email address, IP address, order history | We need it to fulfil our agreement with you |
| To keep accounting records | Order and payment records | Legal obligation under Swedish accounting law |
| To handle a withdrawal from your purchase | Name, order number, email address, date and time received | We need it to fulfil our agreement and to comply with consumer law |
| To run your customer account, if you have one | Name, email address, addresses, password in protected form, orders | We need it to fulfil our agreement with you |
| To keep the website working and secure, and to protect our forms against spam | Necessary cookies, server logs, and the data you enter in our forms, which we check on our own server (see below) | Our legitimate interest in running a working and secure shop |
You must provide the data needed to place and deliver an order. Without it we cannot complete your purchase. We never sell your data.
How long we keep your data
- Accounting records are kept for seven years after the end of the calendar year in which the financial year ended, as Swedish accounting law requires.
- Customer account data is kept until you ask us to remove your account, unless the law requires us to keep it.
- Withdrawal messages and customer service emails are kept for as long as we need them to handle your case and any claim connected to it.
Who we share your data with
Payment. You pay through Kustom Checkout. We share information about your order with Kustom, and Kustom shares the information it needs with us. Kustom is responsible for its own processing in the checkout. Please read Kustom’s privacy notice, available in the checkout and at https://www.kustom.co/legal/privacy-policy.
Delivery. We give PostNord your name and delivery address, and where needed your email address or mobile number, so that PostNord can deliver your order and notify you.
Newsletter. The English shop has no newsletter sign-up, and we do not send marketing emails to customers of the English shop.
Spam protection. We protect the forms on the English pages ourselves, on our own server, for example with a hidden field that only automated programs fill in and a limit on how many messages can be sent from one connection. The data you type into the forms, the checkout or the login on the English pages is not sent to an external anti-spam service.
Technical suppliers. Suppliers who host and maintain our website and email process data on our behalf.
We do not share your data with others unless we have a legal basis to do so.
Transfers outside the EU/EEA
Some suppliers may process data outside the EU/EEA, including in the United States. When that happens, the transfer relies on a safeguard permitted by the GDPR, such as an adequacy decision or the EU standard contractual clauses. You can ask us for more information.
Your rights
You have the right to:
- access the personal data we hold about you and receive a copy;
- have incorrect data corrected;
- have your data erased, unless we must keep it to comply with a legal obligation such as accounting law;
- ask us to restrict our processing of your data;
- object to processing based on our legitimate interests;
- receive the data you gave us in a machine-readable format, where processing is based on consent or an agreement;
- withdraw your consent at any time, without affecting the processing done before you withdrew it.
To use any of these rights, email kundtjanst@chililovers.nu.
You can also complain to a data protection authority. In Sweden this is the Swedish Authority for Privacy Protection (IMY, https://www.imy.se/en/). You can also complain to the authority in the EU country where you live or work.
Cookies
Cookies are small text files saved on your device when you visit a website. The English shop uses only cookies that are necessary for the shop to work:
- to keep your shopping cart and your session;
- to keep you logged in, if you log in;
- to remember that you have seen our cookie notice.
The checkout is provided by Kustom, which sets its own cookies when you pay. See Kustom’s privacy notice.
The English pages do not load analytics or advertising tools and do not set analytics or advertising cookies. If we start to use them, we will ask for your consent first and update this policy.
You can turn off cookies in your browser settings, but the cart and the checkout will then not work.
How we protect your data
We use encrypted connections and protect stored passwords with one-way hashing.
Other parts of our website
The Swedish shop at ChiliLovers.nu has its own privacy policy in Swedish, which applies when you use the Swedish pages, including services offered only there, such as the newsletter, gift cards, ChiliLovers Club and Min odling. The Swedish pages use analytics and marketing tools that the English pages do not use.
Changes to this policy
We may change this policy when needed. The current version is always published on this page, with the date above.