PRIVACY POLICY
Last updated: October 2026

At Sour Bubbles, we respect your privacy. This Privacy Policy explains how we collect, use, share and protect personal information when you visit sourbubbles.com, purchase our products, contact us or subscribe to our marketing.

It also explains your rights and how to contact us about your personal information.

1. Who Is Responsible for Your Information?
Sour Bubbles AB is responsible for the personal information described in this policy.

Data controller: Sour Bubbles AB
Organization Number: 559489-2878
Address: [Street address and postal code], Hisings Backa, Sweden

Email: contact@sourbubbles.com
Phone: +46 76 266 35 88

2. Personal Information We Collect
The information we process depends on how you interact with us.

Contact and delivery information
When you order or contact us, this may include your name, email address, telephone number, billing address and delivery address.

Order and transaction information
We process information about products purchased, selected flavours and quantities, order numbers, transaction references, payment status, deliveries, returns and refunds.

Payment providers process the payment details required for your selected payment method. Please do not send full card details to us by email.

Account information
If you create a customer account, we process the information needed to maintain it, such as your contact details, account identifiers and order history.

Customer support information
We process messages, enquiries and any photographs or documents you provide when requesting assistance.

If you contact us about allergies or dietary requirements, we only use that information to answer your question. Please avoid sending sensitive personal information that is not necessary for your enquiry.

Technical and website information
Our website and service providers may process your IP address, browser type, device information, access times and security logs.

Information about browsing behaviour, marketing engagement and advertising identifiers depends on the tools enabled and your privacy choices.

Marketing preferences
If you subscribe to our communications, we process your contact details, subscription preferences and records of consent or withdrawal.

3. Where We Obtain Information
We obtain personal information:

• Directly from you when you place an order, create an account, subscribe or contact us
• Through our website and its technologies, subject to applicable consent requirements
• From payment providers, shipping carriers and service providers assisting with your order
• From someone purchasing a product for you, where they provide your delivery details

When you interact with us through social media, we may receive your profile name and the information you choose to share. The social media platform also processes information under its own privacy policy.

4. Why We Use Your Information
We use personal information only where we have an applicable legal basis.

Processing purchases
We use contact, order and transaction information to accept payments, fulfil orders, arrange deliveries and manage returns.
Legal basis: Performance of our contract with you, or steps taken at your request before entering into a contract.

Managing customer accounts
We use account information to provide and maintain an account you request.
Legal basis: Performance of the account service agreement.

Responding to enquiries
We use your contact details and correspondence to answer questions and resolve problems.
Legal basis: Performance of a contract for order-related assistance, or our legitimate interest in responding to other enquiries. Legal obligations may also apply to complaints and consumer-rights requests.

Accounting and legal compliance
We retain relevant transaction records and respond to lawful requests where required.
Legal basis: Compliance with legal obligations.

Security and fraud prevention
We use relevant technical and transaction information to protect our store, investigate suspected fraud and prevent unauthorised access.
Legal basis: Our legitimate interest in protecting customers and our business, balanced against your rights.

Marketing communications
We use your contact details to send newsletters, product drops and offers when you subscribe.
Legal basis: Consent.

Optional analytics and advertising
Where these tools are enabled, we use website activity and identifiers to understand website usage or measure and personalise advertising. We currently use: [analytics and advertising tools, e.g. Google Analytics, Meta Pixel, TikTok Pixel].
Legal basis: Consent where required.

Legal claims
We may retain relevant information to establish, exercise or defend legal claims.
Legal basis: Our legitimate interest in protecting legal rights.

5. Shopify and Other Service Providers
Our online store uses Shopify to support its operation, including checkout and order management.

Shopify’s processing depends on the services enabled. It may act on our behalf or, for certain activities, as an independent controller. More information is available in Shopify’s Privacy Policy.

We also share relevant information with providers involved in:

• Payment processing
• Shipping, fulfilment and returns
• Website hosting and IT support
• Email and customer support
• Accounting and professional advice
• Marketing or analytics, where applicable

Our main providers include: [payment, shipping, email and marketing providers, e.g. Shopify Payments, Klarna, PostNord, Shopify Email].

Providers receive information relevant to their services. Where they process information on our behalf, appropriate data-processing arrangements are required.

Payment providers and carriers may also process information for their own legal or operational purposes under their own privacy policies.

We may disclose information to authorities where legally required, or to professional advisers and prospective purchasers where necessary for a lawful business transaction, with appropriate safeguards.

6. Cookies and Similar Technologies
Our website uses technologies necessary for functions such as maintaining a shopping basket, checkout and security.

Optional analytics or advertising technologies require your consent where applicable. You can refuse these without preventing ordinary shopping functions.

You can change your choices through [where cookie settings are found, e.g. “the Cookie Settings link at the bottom of every page”].

Our Cookie Policy provides information about the technologies used, their providers, purposes and duration.

7. Marketing Choices
You can stop receiving marketing emails by using the unsubscribe link in any marketing email or contacting: contact@sourbubbles.com

Withdrawing consent does not affect processing that was lawful before withdrawal.

Unsubscribing from marketing does not stop necessary service messages, such as order confirmations, delivery updates or responses to your enquiries.

8. International Data Transfers
Shopify and other providers may process information outside the European Economic Area.

Where applicable, transfers rely on an appropriate legal mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with additional safeguards where necessary.

You can contact us to request information about the safeguards relevant to your data and how to obtain a copy.

9. How Long We Keep Information
We retain personal information only for as long as necessary for its purpose or to meet legal requirements.

• Order and accounting records: seven years, in accordance with the Swedish Bookkeeping Act (bokföringslagen)
• Customer accounts: until you delete your account or ask us to delete it
• Customer support enquiries: up to two years after the matter has been resolved
• Marketing records: until you unsubscribe or withdraw your consent
• Technical and security logs: up to 12 months

Information may be kept longer where necessary to resolve disputes or legal claims.

We may retain limited information recording an unsubscribe request so that we can respect it.

Information is deleted or anonymised when no longer needed, subject to applicable legal requirements.

10. Protecting Your Information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss and misuse.

Access is limited to people and providers who need it for their work.

No online service can guarantee absolute security. Please keep account credentials confidential and contact us if you suspect unauthorised use.

11. Your Privacy Rights
Depending on the circumstances and applicable law, you may have the right to:

• Obtain information about how your data is used
• Access your personal information and receive a copy
• Correct inaccurate or incomplete information
• Request deletion
• Request restriction of processing
• Receive certain information in a portable format
• Object to processing based on legitimate interests
• Object to direct marketing at any time
• Withdraw consent
• Exercise protections relating to certain solely automated decisions

Some rights are subject to legal conditions or exceptions. For example, we may need to retain records required for accounting purposes.

To make a request, email contact@sourbubbles.com.

We may ask for proportionate information to verify your identity. We normally respond within one month. Where a lawful extension is necessary, we will explain it within that period.

12. Profiling and Automated Decisions
Sour Bubbles does not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

Our store platform may use automated fraud analysis to flag orders that need a manual review. Any decision to cancel an order is reviewed by us.

Where a payment provider independently makes a credit or eligibility decision, its privacy information explains that processing and the relevant rights.

13. Children’s Information
Purchases by minors must comply with our purchase terms and applicable requirements for parental or guardian permission.

If you believe a child has provided personal information that we should not hold, contact us so that we can investigate and take appropriate action.

14. Providing Information
Some information is necessary to process your order, arrange delivery or meet legal obligations. If you do not provide it, we may be unable to complete the purchase.

Optional information and marketing consent are not required to make a purchase.

15. Complaints
You can contact us with concerns about your privacy at: contact@sourbubbles.com

You also have the right to complain directly to a relevant data protection authority without contacting us first.

In Sweden, the supervisory authority is:
Integritetsskyddsmyndigheten (IMY)
www.imy.se

Where applicable, you may instead contact the authority in the country where you live, work or believe an infringement occurred.

16. Changes to This Policy
We may update this policy to reflect changes to our operations, providers or legal requirements.

The current version and update date will appear on this page. We will provide additional notice or request consent where required.

17. Contact Us
Sour Bubbles AB
Organization Number: 559489-2878
Hisings Backa, Sweden

Email: contact@sourbubbles.com
Phone: +46 76 266 35 88