Last updated: 8 October 2026
The Organic Labs Sweden AB respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit www.theorganiclabs.com, contact us or buy products from us.
1. Who we are
The data controller responsible for your personal data is:
The Organic Labs Sweden AB
Organisation number: 559285-2890
VAT number: SE559285289001
Kungsbro strand 29, 112 26 Stockholm, Sweden
Email: info@theorganiclabs.com
Phone: +46 79 355 12 46
If you have questions about this Privacy Policy or how we process your personal data, please contact us at the email address above.
2. Personal data we collect
Depending on how you interact with us, we may collect:
- Name
- Billing and delivery address
- Email address
- Telephone number
- Company name and VAT information
- Order and transaction information
- Products purchased
- Payment status and limited payment-related information
- Communications you send to us
- Customer service history
- IP address
- Browser and device information
- Website activity and interaction data
- Cookie and similar technology information
- Marketing preferences and consent choices
When you make a payment, payment information may be processed directly by our payment service providers. We do not necessarily receive or store your complete payment card details.
3. How we use your personal data
We may process personal data to:
- Process and fulfil orders
- Take and verify payments
- Arrange shipping and delivery
- Provide order confirmations and tracking information
- Handle returns, refunds and complaints
- Respond to enquiries and customer service requests
- Manage customer accounts
- Communicate with business and wholesale customers
- Prevent fraud and protect our website
- Maintain accounting, tax and business records
- Improve our website, products and customer experience
- Measure website performance and usage
- Send marketing communications where permitted
- Display or measure advertising where permitted
- Comply with legal and regulatory obligations
We only process personal data where we have an appropriate legal basis.
4. Legal bases for processing
Under the General Data Protection Regulation (GDPR), our legal bases may include:
- Performance of a contract: we process information necessary to accept, process, deliver and manage your order or other agreement with us.
- Legal obligation: certain information must be retained or processed to comply with accounting, tax, food safety or other legal requirements.
- Legitimate interests: we may process information where reasonably necessary for operating and protecting our business, providing customer service, preventing fraud, improving our services and managing business relationships, provided those interests do not override your fundamental rights and freedoms.
- Consent: where required, we rely on your consent, for example for certain marketing activities, advertising technologies or non-essential cookies. You may withdraw your consent at any time.
5. Shopify and our online store
Our online store runs on Shopify. Shopify may process personal data to provide the e-commerce infrastructure that lets us operate our website and fulfil online orders. Shopify may process information according to its own privacy documentation and its contractual arrangements with merchants.
6. Payments
Payments are processed by third-party payment providers available on our website or at checkout. These providers receive the information necessary to process and secure your transaction, and may process personal data according to their own privacy policies and legal obligations.
7. Shipping and delivery
To fulfil your order, we share the necessary information with shipping, logistics and fulfilment providers. Depending on the shipment, these may include carriers such as DHL, UPS and PostNord. The information shared may include your name, delivery address, telephone number, email address and other information needed to deliver and track your shipment.
8. Cookies and similar technologies
Our website uses cookies and similar technologies. Some cookies are necessary for the website, shopping cart, checkout, security and other essential functions to work.
Other cookies may be used, where permitted, for website analytics, remembering preferences, measuring website performance, marketing, advertising and understanding how visitors use our website. Where required by law, non-essential cookies are only used after you have given your consent.
You can manage your cookie preferences through the cookie consent tools on our website, where available, and control certain cookies through your browser settings.
9. Marketing communications
If you subscribe to our newsletter or otherwise consent to receive marketing communications, we may use your contact information to send you information about products, offers and company news. Where permitted by law, we may also contact existing customers about similar products or services.
You can unsubscribe from marketing emails at any time with the unsubscribe link in each email or by contacting us. Unsubscribing does not stop the necessary messages about your orders or account.
10. Analytics and advertising
We may use analytics and advertising technologies to understand how our website is used, measure performance and improve our marketing. Depending on the technologies enabled on our website, information such as device identifiers, IP address, browsing activity and interactions with our website may be processed. Where consent is legally required for these technologies, they are only activated after you have given it.
11. Who we share personal data with
Where necessary, we share personal data with service providers that help us run our business, including:
- Shopify and e-commerce technology providers
- Payment processors
- DHL, UPS, PostNord and other logistics providers
- IT and hosting providers
- Accounting and financial service providers
- Customer service providers
- Analytics providers
- Marketing and advertising providers
- Professional advisers
- Government authorities or regulators where legally required
We only share the information that is reasonably necessary for the purpose. We do not sell your personal data as a database or customer list to third parties.
12. International data transfers
Some service providers may process personal data outside Sweden or the European Economic Area (EEA). Where personal data is transferred outside the EEA, we take the measures required by law to ensure an adequate level of protection, such as an adequacy decision by the European Commission, Standard Contractual Clauses or another legally recognised transfer mechanism.
13. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet our legal obligations. For example, transaction and accounting information must be kept for the period required by Swedish accounting and tax law. Other information is deleted or anonymised when it is no longer needed.
14. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. However, no method of electronic transmission or storage can be guaranteed to be completely secure.
15. Your rights under the GDPR
Where the GDPR applies, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate information
- Request deletion of your personal data in certain circumstances
- Request restriction of processing
- Object to certain processing
- Withdraw consent where processing is based on consent
- Request data portability where applicable
- Lodge a complaint with a data protection authority
These rights are subject to the conditions and exceptions set by law. To exercise them, contact us at info@theorganiclabs.com. We may need to verify your identity before handling certain requests.
16. Complaints
If you have concerns about how we process your personal data, please contact us first so that we can look into it. You also have the right to lodge a complaint with the supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
17. Children's privacy
Our website and products are not specifically directed at children. We do not knowingly collect personal data directly from children where parental or guardian consent would be required by law.
18. Third-party links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of websites or services we do not control, and we encourage you to read their privacy policies before giving them personal information.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, business practices or legal requirements. The latest version is always published on this page with the date it was last updated.
20. Contact us
For questions about this Privacy Policy, your personal data or your privacy rights, please contact:
The Organic Labs Sweden AB
Organisation number: 559285-2890
VAT number: SE559285289001
Kungsbro strand 29, 112 26 Stockholm, Sweden
Email: info@theorganiclabs.com
Phone: +46 79 355 12 46