Last updated: 5 October 2026
This privacy policy explains how we handle your personal data when you visit nabila.se and when you buy from the shop. We follow the General Data Protection Regulation (GDPR).
1. Who is responsible
Nabila Abdul Fattah, org. no. 810604-0424, Allhelgonagatan 4, 415 45 Göteborg, Sweden. Email: online-shop@nabila.se
2. What we collect and why
When you buy: name, delivery address, billing address, email address, phone number if you give one, order details and payment status. We need this to fulfil the purchase contract with you. Legal basis: performance of a contract.
Accounting: order details, amounts and invoice records. Legal basis: legal obligation under the Swedish Accounting Act.
Customer service, returns and complaints: your correspondence with us, order numbers and any photos you send. Legal basis: performance of a contract and our legitimate interest in handling the matter.
If you create an account in the shop: your name, email address, addresses and order history. Legal basis: performance of a contract.
When you contact us: the information you choose to include in your message. Legal basis: our legitimate interest in replying to you.
Technical information: IP address, browser type and pages visited, through cookies and server logs, so the site works and stays secure. See section 6.
We never sell your data, and we do not send newsletters unless you sign up.
3. Who we share data with
We share only what is needed, and only with the following recipients:
- Printify and the print facilities that make and ship the products. They receive your name, delivery address and what you ordered.
- The payment providers WooPayments (Stripe) and PayPal. They handle the payment. We never see your card details.
- The carriers that deliver the parcel.
- one.com, which hosts the website.
- Termly, which provides the cookie banner.
- Our bookkeeping and the Swedish Tax Agency, to the extent the law requires.
4. Transfers outside the EU
Some of the providers above, including Printify, PayPal, Stripe and Termly, are US companies or have staff outside the EU. Where data is transferred outside the EU, it is done with the safeguards the GDPR requires, primarily the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework. Contact us if you want details about a specific provider.
5. How long we keep data
- Order data and records needed for accounting: seven years after the end of the calendar year in which the financial year ended, as required by the Swedish Accounting Act.
- Customer account: as long as you keep the account. You can ask us to delete it at any time.
- Email and customer service: normally up to two years, or longer if the matter concerns a complaint that can still be raised.
- Cookies: for the periods stated in the cookie banner.
6. Cookies
This site uses cookies. Necessary cookies are required for the site, the cart and the checkout to work, and to remember your language choice. They cannot be switched off. Other cookies, for example for statistics, are only used if you consent to them in the cookie banner. You can change your choice at any time through the banner, or delete cookies in your browser.
7. Your rights
You have the right to request a copy of the data we hold about you, to have incorrect data corrected, to have data deleted, to ask us to restrict processing, to object to processing based on legitimate interest, and to receive your data in a machine-readable format. The right to deletion does not cover data we are required by law to keep, for example in our accounts.
Contact us at online-shop@nabila.se and we will help you. If you believe we handle your data incorrectly, you have the right to complain to the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, www.imy.se.
8. Changes
We may update this policy. The date at the top shows when it last changed.