This privacy policy explains how we collect, use, and store your personal data in accordance with the EU General Data Protection Regulation (GDPR). It applies to the processing of personal data through our website and online store.
We collect the following categories of personal data:
Identity and contact information: name, email address, billing and shipping addresses.
Payment details: payment processing is handled entirely by Stripe, a certified third-party provider. We do not store or process any credit card numbers or payment information ourselves.
Account and preferences: wishlist items, marketing preferences, language or currency selections, cookie choices.
Technical information: IP address, browser type, device information, and cookies.
Optional data: date of birth, gender (if voluntarily provided).
We process your personal data for the following purposes, based on the following legal grounds:
Purpose
Legal basis
We process your personal data for the following purposes, based on the following legal grounds:
Purpose Legal Basis
To manage your user account Performance of a contract
To process orders and payments Legitimate interest
To provide customer service Consent
To send marketing and newsletters Legal obligation
To improve our website and services (analytics)
To comply with legal obligations (e.g., accounting, fraud prevention)
Where we rely on your consent (e.g., for marketing emails or cookie preferences), you have the right to withdraw your consent at any time.
We retain your personal data only as long as necessary for the purpose for which it was collected, or as required by law (e.g., for accounting or tax purposes, typically 7 years in Sweden).
We only share your personal data with trusted third parties necessary for our services:
Stripe (for secure payment processing)
Delivery services (to ship your order)
Marketing platforms (if you’ve given consent)
Fraud prevention services
Analytics tools (for internal improvement)
These third parties only process your data on our instructions and under data processing agreements in line with GDPR.
You have the following rights regarding your personal data:
Access – request a copy of the data we hold about you
Correction – request that we correct inaccurate data
Erasure – request deletion of your data (under certain conditions)
Objection – object to data processing based on legitimate interest
Restriction – request limited processing
Data portability – receive your data in a structured, machine-readable format
To exercise your rights, contact us at: support@coo-women.com
We follow industry best practices to protect your personal information. Payment information is securely processed by Stripe using encrypted connections (SSL/TLS). No payment data is stored or handled directly by us.
Our website uses cookies to enhance your browsing experience, remember preferences, and collect analytics. You can manage your cookie preferences in your browser settings.
Please note: disabling cookies may affect the functionality of the site.
We may update this privacy policy from time to time. The latest version is always available on our website. Significant changes will be communicated clearly.
If you have any questions or requests regarding your personal data or this privacy policy, please contact:
E-mail address: support@coo-women.com
Updated: May 2025
Join Us Here