Privacy policy

Privacy Policy

Last updated: 28 August 2026

Hidden Nook Club operates this online store and website, including its content, features, products and related services. Our store is powered by Shopify, which provides the ecommerce platform that enables us to offer these services.

This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit our website, place an order, create an account, submit a book request, subscribe to marketing or otherwise communicate with us.

Nothing in this policy limits your rights under the General Data Protection Regulation (GDPR) or other applicable data protection law.

Who Is Responsible for Your Personal Data?

The data controller responsible for the processing described in this policy is: 

Hidden Nook Club Handelsbolag
Trading as Hidden Nook Club
Organisation number: 9698037364
Address: Stationsgatan 66 b, 972 34 Luleå, Sweden
Email: support@hiddennookclub.com

Personal Information We Collect

Personal information means information that identifies you or can reasonably be connected to you.

Depending on how you interact with our store, we may collect or process the following categories of information:

  • Contact information, including your name, email address, telephone number, billing address and delivery address.

  • Order and transaction information, including purchased products, order history, returns, cancellations, refunds and delivery information.

  • Customer account information, including account details, saved addresses, preferences and loyalty information.

  • Payment information, including payment method, transaction status, payment confirmation and limited payment details provided by Shopify or the selected payment provider. Hidden Nook Club does not directly receive or store complete card numbers or security codes.

  • Communications, including customer-service enquiries, return requests, reviews, book requests and other messages sent to us.

  • Marketing preferences, including newsletter subscriptions and consent choices.

  • Device and technical information, including IP address, browser type, device information, network information and other online identifiers.

  • Usage information, including how you navigate and interact with our website, products, emails and services.

  • Cookie and analytics information, depending on your consent choices and the technologies enabled on our website.

We do not intentionally collect sensitive personal information unless it is necessary and lawfully provided for a specific purpose.

Sources of Personal Information

We may receive personal information:

  • directly from you when you place an order, create an account, contact us, submit a request or subscribe to marketing;

  • automatically from your browser or device through cookies and similar technologies;

  • from Shopify and payment providers;

  • from Gardners, distribution partners and delivery carriers in connection with order fulfilment, delivery and returns;

  • from service providers that operate technology on our behalf; and

  • from partners or third parties where permitted by law.

How We Use Personal Information

We may use personal information to:

  • process, fulfil, deliver and manage orders;

  • process payments, cancellations, returns and refunds;

  • communicate about orders, availability, delays and delivery;

  • provide customer service;

  • respond to book requests;

  • create and manage customer accounts;

  • operate loyalty benefits and rewards;

  • provide requested newsletters and marketing communications;

  • remember preferences and improve the shopping experience;

  • analyse and improve our website, products and services;

  • detect and prevent fraud, misuse and security incidents;

  • maintain business, tax and accounting records;

  • establish, exercise or defend legal claims; and

  • comply with legal or regulatory obligations.

Legal Bases for Processing

Under the GDPR, we process personal information using one or more of the following legal bases:

Performance of a Contract

We process information necessary to:

  • process and deliver an order;

  • take payment;

  • communicate about an order;

  • manage cancellations, returns and refunds;

  • provide customer service; and

  • take steps requested by you before entering into a purchase.

Legal Obligations

We process and retain certain information when necessary to comply with:

  • accounting and tax requirements;

  • consumer-protection law;

  • product-safety obligations;

  • fraud-prevention requirements; and

  • valid requests from courts, authorities or regulators.

Legitimate Interests

We may process information where necessary for legitimate business interests, including:

  • securing our website and services;

  • preventing fraud and misuse;

  • improving customer service;

  • managing legal claims; and

  • understanding and improving our business.

We rely on legitimate interests only where those interests are not overridden by your rights and freedoms.

Consent

We rely on consent where required, including for:

  • newsletters and certain marketing communications;

  • non-essential analytics cookies;

  • advertising cookies; and

  • personalised marketing activities.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

How We Share Personal Information

We share personal information only where reasonably necessary to operate our store, fulfil an order, provide requested services or comply with the law.

Recipients may include:

  • Shopify, which hosts and operates our ecommerce platform;

  • payment providers selected at checkout;

  • Gardners and other distribution partners, where required to source, pack, dispatch or process a return;

  • delivery companies and carriers;

  • email and communication providers;

  • customer-service, loyalty and review providers;

  • analytics, advertising and marketing providers, where enabled and permitted by your consent choices;

  • IT, hosting, security and cloud-service providers;

  • accountants, insurers, legal advisers and other professional advisers; and

  • courts, regulators, tax authorities, law enforcement or other authorities where disclosure is required or permitted by law.

We may also disclose information in connection with a sale, restructuring or transfer of all or part of the business, subject to applicable law.

We do not sell personal information in exchange for money.

Relationship With Shopify

Our store is hosted by Shopify. Shopify collects and processes personal information to provide, secure and improve the ecommerce services used by Hidden Nook Club.

Information submitted through our store may be transferred to Shopify and its authorised subprocessors, which may operate in countries outside your country of residence.

Where Shopify acts as our processor, it processes customer information on our behalf. Shopify may also process certain information for its own purposes as described in its own privacy documentation.

Where Shopify Network Intelligence or other enhanced Shopify features are enabled, Shopify may process information concerning your interactions with our store, Shopify and other merchants. These activities are subject to applicable consent requirements and your available privacy choices.

For more information and to manage rights relating to Shopify’s own processing, visit the Shopify Privacy Portal.

Distribution, Delivery & Returns

To fulfil an order, we may share necessary information with Gardners, another distribution partner or a delivery carrier.

This may include:

  • your name;

  • delivery address;

  • telephone number;

  • email address;

  • order contents; and

  • delivery instructions.

These details are shared only where necessary to source, dispatch, track or return your order.

Book Requests

When you submit a book request, we may process the information you provide to:

  • review the requested title;

  • investigate availability;

  • respond to your enquiry; and

  • notify you if you have specifically requested an update.

Submitting a book request does not create a purchase or reservation.

Marketing Communications

If you subscribe to our newsletter or other marketing, we may use your contact information to send the communications you requested.

You can unsubscribe at any time by:

Unsubscribing from marketing does not prevent us from sending necessary communications about an existing order or account.

Cookies & Similar Technologies

Our website uses cookies and similar technologies for purposes including:

  • operating the website and checkout;

  • maintaining security;

  • remembering preferences;

  • providing customer-account functionality;

  • measuring website performance; and

  • providing analytics or personalised advertising where permitted.

Non-essential cookies will not be used where consent is required unless you have made the relevant choice through our cookie banner.

You can manage available choices through the cookie banner or privacy controls displayed on our website. You may also adjust browser settings, although blocking essential cookies may affect website functionality.

International Data Transfers

Some service providers may process personal information outside Sweden or the European Economic Area.

Where required, international transfers are protected using a lawful transfer mechanism, such as:

  • a European Commission adequacy decision;

  • approved Standard Contractual Clauses; or

  • another safeguard permitted by applicable data protection law.

You may contact us for further information about safeguards relevant to your personal information.

Third-Party Websites & Links

Our website may include links to third-party websites, services or social-media platforms.

Those services operate under their own privacy policies and terms. Hidden Nook Club is not responsible for how an independent third party collects or processes information after you leave our website.

We recommend reviewing the relevant third party’s privacy information before providing personal data.

Children’s Data

Our services are not intended to be used independently by children who cannot lawfully enter into a purchase or provide valid consent in their jurisdiction.

We do not knowingly collect personal information from children in circumstances where parental or guardian consent is required.

If you believe a child has provided personal information improperly, contact us at support@hiddennookclub.com.

Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

However, no system or method of transmission is completely secure. Please do not send complete payment-card details, passwords or security codes to us by email.

How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods depend on factors including:

  • whether you maintain a customer account;

  • whether an order or return remains active;

  • customer-service requirements;

  • accounting and tax obligations;

  • fraud prevention;

  • dispute resolution; and

  • the establishment, exercise or defence of legal claims.

Certain transaction and accounting information must be retained for the period required under Swedish law.

When information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.

Your Rights

Subject to applicable law, you may have the right to:

  • receive information about how your personal data is processed;

  • request access to your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object to direct marketing at any time;

  • receive certain information in a portable, machine-readable format;

  • withdraw consent where processing is based on consent; and

  • lodge a complaint with a supervisory authority.

These rights are not absolute. We may need to retain or continue processing certain information where required by law or where another lawful exception applies.

To exercise a right, contact support@hiddennookclub.com. We may request reasonable information to verify your identity.

We will respond within the period required by applicable law.

Complaints

If you have concerns about how Hidden Nook Club processes personal information, please contact us first so that we can try to resolve the matter.

You also have the right to lodge a complaint with:

Integritetsskyddsmyndigheten (IMY)
Swedish Authority for Privacy Protection
www.imy.se

If you live in another EEA country, you may also contact the competent supervisory authority in your country.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology, providers or legal obligations.

The latest version will be published on our website with an updated revision date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise a data-protection right, contact:

Hidden Nook Club Handelsbolag
Trading as Hidden Nook Club
Organisation number: 9698037364
Address: Stationsgatan 66 b, 972 34 Luleå, Sweden
Email: support@hiddennookclub.com

We are the data controller for the personal information described in this policy, except where another provider, such as Shopify, acts as an independent controller for its own processing.