Last updated: August 24, 2026
The Flying Swede is operated by Alba Entrepreneurs AB, a company registered in Sweden. Alba Entrepreneurs AB is the data controller responsible for the processing of personal data described on this page.
This page supplements our Privacy Policy and explains how we process personal data in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
Alba Entrepreneurs AB
Trading name: The Flying Swede
Organisation number: 559322-1996
Email: contact@theflyingswede.com
Phone: +46 70 755 01 14
2. Personal Data We May Collect
Depending on how you interact with our store, we may process:
-
Name
-
Billing and shipping address
-
Email address
-
Telephone number
-
Order and purchase information
-
Payment transaction information
-
IP address and device information
-
Customer service correspondence
-
Cookie and website usage data
-
Country or region
-
Age or age-verification status where required by law
-
Information required for fraud prevention and payment security
We do not intentionally collect personal data from individuals who are below the legal age required to purchase nicotine products.
3. Why We Process Personal Data
We may process personal data to:
-
Process and fulfil orders
-
Arrange delivery and provide shipment tracking
-
Process payments and refunds
-
Verify age where required
-
Provide customer service
-
Prevent fraud and misuse
-
Comply with accounting, tax, consumer protection and other legal obligations
-
Maintain and secure our website
-
Manage customer preferences and cookie choices
-
Send marketing communications where legally permitted and where the required consent has been obtained
4. Legal Bases for Processing
Under the GDPR, we process personal data using one or more of the following legal bases:
Performance of a contract
When processing is necessary to process your order, take payment, arrange delivery or provide customer support relating to a purchase.
Legal obligation
When we are required to retain or process information to comply with accounting, tax, regulatory, age-restriction or other applicable legal requirements.
Legitimate interests
Where necessary for fraud prevention, website security, business administration and improving our services, provided that these interests do not override your fundamental rights and freedoms.
Consent
Where consent is required, for example for certain marketing communications, cookies or tracking technologies. You may withdraw your consent at any time.
5. Age Verification
Our products are age-restricted.
Where required by applicable law or by our payment, delivery or compliance providers, we may process information necessary to verify that a customer or recipient meets the applicable minimum age requirement.
We aim to process only the information necessary for this purpose.
6. Sharing of Personal Data
We may share personal data with service providers where necessary to operate our store, including:
-
Shopify and ecommerce infrastructure providers
-
Payment processors and acquiring banks
-
Shipping and logistics providers
-
Age-verification providers
-
Fraud-prevention and security providers
-
Accounting and professional advisers
-
Analytics and technology providers
-
Government authorities where required by law
These providers may only process personal data for the purposes necessary to provide their services or as otherwise permitted by law.
7. International Data Transfers
Some of our service providers may process personal data outside Sweden or the European Economic Area.
Where required by law, we use appropriate safeguards for international transfers, such as adequacy decisions or Standard Contractual Clauses approved by the European Commission.
Additional information about Shopify's processing practices is available in our Privacy Policy.
8. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.
For example:
-
Order and accounting records may be retained for the period required under Swedish accounting and tax legislation.
-
Customer service correspondence is retained only as long as reasonably necessary to resolve the matter and maintain appropriate business records.
-
Marketing data is retained until consent is withdrawn or the information is no longer required.
-
Age-verification information is retained only where necessary and permitted by applicable law.
Retention periods may differ where we are required to preserve information because of a legal claim, dispute, fraud investigation or regulatory requirement.
9. Your GDPR Rights
Depending on the circumstances, you may have the right to:
-
Request access to your personal data
-
Request correction of inaccurate personal data
-
Request deletion of personal data
-
Request restriction of processing
-
Object to certain processing
-
Receive personal data in a portable format
-
Withdraw consent at any time where processing is based on consent
-
Lodge a complaint with a supervisory authority
These rights may be subject to legal limitations. For example, we may need to retain certain transaction records to comply with accounting or other legal obligations.
10. Exercising Your Rights
To exercise your data-protection rights, contact:
We may need to verify your identity before fulfilling a request.
We will respond within the time period required by applicable data-protection law.
11. Cookies and Tracking
Our website may use cookies and similar technologies for essential store functionality, analytics and other purposes.
Where consent is required, non-essential technologies are used only in accordance with the preferences selected through our cookie consent mechanism.
You can change or withdraw your cookie choices through the privacy settings available on our website.
12. Complaints
If you believe that your personal data has been processed in violation of applicable data-protection law, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection:
Integritetsskyddsmyndigheten (IMY)
You may also contact us first at:
We will make reasonable efforts to investigate and resolve your concerns.
13. Changes to This Notice
We may update this GDPR & Data Protection notice where our processing activities, service providers or legal obligations change.
The latest version will always be published on this page.
For additional information about how personal data is processed through our Shopify store, please also review our Privacy Policy.