Privacy policy

Last updated: 2026-10-13

At House of Vikings, we value your privacy. This policy explains how we process your personal data when you visit houseofvikings.com, shop with us or contact us.

1. Who is responsible for your personal data?

The data controller is:

Company name: Deventia AB

Address: Bellevuevägen 3D, 217 27 Malmö

Email: info@houseofvikings.com

Please contact us if you have any questions about this policy or how we process your personal data.

2. What personal data do we process?

Depending on how you use the website, we may process the following information:

Contact details, such as your name, email address, telephone number, billing address and delivery address.

Order details, such as products ordered, amounts, currency, order number and information about returns or complaints concerning products.

Payment details, such as payment status, transaction reference and selected payment method.

Information you provide when contacting us, such as messages and images relating to a complaint concerning a product.

Technical information, such as your IP address, browser and device information, to the extent that our services collect it.

Cookie data and information about how you use the website, where such information is collected in accordance with your cookie preferences.

We primarily obtain this information from you. We may also receive information from our payment and delivery providers, for example about whether a payment has been completed or a shipment has been delivered.

3. Why do we process your personal data?

To manage your purchase

We use your information to receive and process orders, process payments, send order confirmations, deliver products and manage returns.

Legal basis: Processing is necessary to perform our contract with you.

You must provide the information required for payment and delivery so that we can complete your purchase.

To handle customer service enquiries and product complaints

We use relevant contact and order details, together with information you provide, to answer questions and handle complaints or claims concerning products.

Legal basis: Processing is necessary to perform the contract, comply with legal obligations or pursue our legitimate interest in answering questions and handling customer enquiries, depending on the nature of the matter.

To comply with legal requirements

We process certain information to fulfil obligations under, for example, accounting and consumer protection legislation.

Legal basis: Legal obligation.

To protect the website and prevent misuse

We may process technical information and relevant transaction details to protect the website, troubleshoot problems and prevent fraud or other misuse.

Legal basis: Our legitimate interest in maintaining a secure and functioning online store. We balance this interest against your right to privacy.

For newsletters and marketing

If you consent to receiving newsletters, we use your email address to send information and offers from House of Vikings.

Legal basis: Consent.

You may withdraw your consent at any time by using the unsubscribe link in our communications or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent.

For analytics and personalised advertising

With your consent, we use tools developed in-house to analyse visitor statistics.

Legal basis: Consent.

You can change or withdraw your consent via [link or location of cookie settings].

4. Payments via Stripe

We use Stripe to process payments in our online store.

When you make a payment, Stripe processes the information needed to complete the payment and, where applicable, prevent fraud and comply with legal obligations. The information processed depends, among other things, on the payment method you select.

We receive information needed to manage your order, such as payment status and transaction reference.

Stripe may process personal data both on our behalf and as an independent data controller for certain purposes. Further information is available in Stripe’s privacy policy.

5. Who do we share your information with?

We share personal data where necessary for the purposes described in this policy. Recipients may include:

Payment provider: Stripe.

Carriers and delivery providers: PostNord.

E-commerce platform and web hosting: Azure (Microsoft).

Providers of IT, customer service and email services: Azure (Microsoft), GoDaddy.

We may also disclose information to public authorities where required by law, or where necessary to establish, exercise or defend legal claims.

Where a provider processes information on our behalf, the processing must be governed by a data processing agreement. Some recipients, such as payment providers and carriers, may act as independent data controllers for parts of their processing.

6. Transfers outside the EU/EEA

Some providers may process personal data in countries outside the EU/EEA.

Where personal data is transferred outside the EU/EEA, the transfer must have a valid basis under applicable data protection rules. This may include a European Commission adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where necessary.

Contact us at info@houseofvikings.com if you would like more information about the safeguards for a particular transfer or a copy of the relevant safeguards.

7. How long do we retain your information?

We retain personal data for as long as necessary for the purpose of the processing or to comply with legal requirements.

Order and customer information: 3 years.

Accounting records: retained for the period required by accounting legislation.

Customer service and product complaint cases: 30 days.

Newsletter information: used to send newsletters until you withdraw your consent. Limited information may then be retained to document your withdrawal and respect your unsubscribe request.

Technical logs: 30 days.

Cookie data: retention periods are set out in our cookie information.

Information may need to be retained for longer where necessary to handle an ongoing dispute or comply with a legal obligation. When information is no longer needed, it is deleted or anonymised.

8. Cookies

We use cookies and similar technologies on the website.

Necessary cookies are used for functions such as the shopping cart, checkout and security. Cookies for other purposes, such as analytics or advertising, are used only after obtaining your consent where required.

Cookie

Purpose

WebShop.Admin

Keeps the user logged in, including regular customers.

WebShop.Cart.se and equivalent cookies for other markets

Links the visitor to the shopping cart for up to 30 days.

.AspNetCore.Antiforgery…

Protects forms against forged requests.

hov_statistics_ignore

Stores the visitor’s choice to be excluded from statistics for 180 days.

ARRAffinity / ARRAffinitySameSite

Azure uses these cookies to keep the visitor on the same server instance.

9. Your rights

Subject to the conditions set out in data protection legislation, you have the right to:

Receive information about and access your personal data.

Have inaccurate information corrected and incomplete information completed.

Request the deletion of your information.

Request restriction of processing.

Object to processing based on legitimate interests.

Receive information you have provided to us in a structured, commonly used and machine-readable format where processing is based on a contract or consent and is carried out by automated means.

Withdraw your consent where processing is based on consent.

You always have the right to object to the processing of your personal data for direct marketing.

The right to erasure is not absolute. For example, we may need to retain certain information to comply with accounting requirements or handle legal claims.

Contact us at [email address] to exercise your rights. We may need to verify your identity to ensure that information is provided to the correct person.

10. Complaints to a supervisory authority

If you believe that we process your personal data in breach of data protection rules, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

Website: www.imy.se

You may also contact the data protection authority in the EU/EEA country where you live or work, or where the alleged infringement occurred.

11. Changes to this privacy policy

We may update this policy when our processing of personal data changes. The latest version is always available on houseofvikings.com, together with the date of the latest update.

If a change requires additional information or new consent, we will provide that information or obtain consent before the relevant processing begins.