PRIVACY POLICY

PRIVACY POLICY

Last Updated: July 26, 2026

Welcome to Sour Ribbons ("Company", "we", "our", or "us").

At Sour Ribbons, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you visit our website, purchase our products, contact us, or otherwise interact with our services.

By using our website, you acknowledge that you have read and understood this Privacy Policy.

1. COMPANY INFORMATION

Sour Ribbons

Böckebolsvägen 28

422 54 Gothenburg

Sweden

Email: info@sourribbons.com

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to:

  • Our website

  • Our Shopify online store

  • Purchases made through our website

  • Customer service interactions

  • Marketing communications

  • Newsletter subscriptions

  • Promotional campaigns

  • Social media interactions where applicable

  • Any other services operated by Sour Ribbons

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from our website. Those services maintain their own privacy policies.

3. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to all visitors, customers, business partners, and users located in the European Union, the United States, and other countries where our products and services are offered.

If local laws provide additional rights, those rights remain applicable.

4. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our website, we may collect different categories of personal information.

A. Information You Provide

You may provide us with information including:

  • Full name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

  • Company name (if applicable)

  • Order information

  • Customer support requests

  • Product reviews

  • Marketing preferences

  • Any information voluntarily submitted to us

B. Order Information

When placing an order we may collect:

  • Products purchased

  • Order number

  • Purchase date

  • Order history

  • Shipping method

  • Payment status

  • Discounts used

  • Gift card information

  • Delivery preferences

Payment card information is processed securely through Shopify Payments. Sour Ribbons does not store your complete payment card details.

C. Account Information

If you create an account, we may collect:

  • Username

  • Login credentials

  • Password (encrypted)

  • Saved addresses

  • Wishlist information

  • Order history

  • Communication preferences

D. Device Information

When visiting our website, certain technical information may automatically be collected, including:

  • IP address

  • Browser type

  • Browser version

  • Device type

  • Operating system

  • Language preferences

  • Screen resolution

  • Time zone

  • Referring website

  • Pages visited

  • Time spent on pages

  • Navigation behavior

  • Click activity

E. Cookies and Similar Technologies

We use cookies and similar technologies to improve website functionality, remember user preferences, analyze website performance, prevent fraud, and enhance the shopping experience.

Additional details about cookies are available in our Cookie Policy.

5. INFORMATION COLLECTED THROUGH SHOPIFY

Our online store is hosted by Shopify.

When you browse or make a purchase, Shopify may automatically collect certain technical and transactional information necessary to operate the store, process payments, prevent fraud, manage orders, and improve platform security.

This information may include:

  • Device identifiers

  • Browser information

  • IP address

  • Shopping activity

  • Checkout information

  • Order information

  • Security logs

  • Fraud prevention data

  • Payment verification information

Shopify processes this information according to its own privacy practices and applicable laws.

6. INFORMATION FROM CUSTOMER COMMUNICATIONS

If you contact us by email or through customer support, we may collect:

  • Your name

  • Email address

  • Message contents

  • Attachments

  • Customer service history

  • Previous correspondence

  • Purchase references

  • Complaint information

These communications help us improve our services and respond efficiently to customer requests.

7. INFORMATION WE DO NOT INTENTIONALLY COLLECT

Our products are not intended for children under the age required by applicable law to provide valid consent.

We do not knowingly collect personal information from children. If we become aware that personal information has been collected from a child without appropriate authorization, we will promptly delete such information.

If you believe a child has provided us with personal information, please contact us immediately.

8. ACCURACY OF INFORMATION

You are responsible for ensuring that the personal information you provide is accurate, complete, and kept up to date.

Providing inaccurate or incomplete information may affect our ability to fulfill orders, provide customer support, or comply with legal obligations.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our business operations, technologies, or services.

When significant changes are made, we will publish the updated version on our website and update the "Last Updated" date shown at the top of this policy.

Your continued use of our website after changes become effective constitutes acceptance of the updated Privacy Policy.

 

10. HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information only when permitted by applicable law and only for legitimate business purposes. Depending on your interaction with our website, we may use your information to:

  • Process and fulfill your orders

  • Verify payments and prevent fraudulent transactions

  • Ship products and provide delivery updates

  • Respond to customer service requests

  • Provide order confirmations and receipts

  • Create and manage customer accounts

  • Improve our products and services

  • Personalize your shopping experience

  • Analyze website performance and customer behavior

  • Detect, investigate, and prevent fraud or other illegal activities

  • Maintain the security of our website and systems

  • Comply with legal obligations

  • Enforce our Terms and Conditions

  • Resolve disputes

  • Process refunds and exchanges

  • Send important service-related communications

  • Send marketing communications where permitted by law or with your consent

  • Improve our customer support and business operations

We do not use your personal information for automated decision-making that produces legal or similarly significant effects unless required or permitted by applicable law.

11. LEGAL BASES FOR PROCESSING (GDPR)

If you are located within the European Economic Area (EEA), United Kingdom, or another jurisdiction with similar privacy laws, we process your personal information only where we have a lawful basis.

These legal bases include:

Performance of a Contract

We process your information when necessary to:

  • Complete your purchases

  • Deliver your orders

  • Process payments

  • Provide customer support

  • Manage returns and refunds

  • Fulfill our contractual obligations

Legitimate Interests

We may process your information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Examples include:

  • Improving website functionality

  • Preventing fraud

  • Protecting our business

  • Website analytics

  • Customer service improvements

  • Security monitoring

  • Product development

  • Business reporting

  • Internal administration

Legal Obligations

We may process information where required to comply with:

  • Tax laws

  • Accounting requirements

  • Consumer protection laws

  • Court orders

  • Government requests

  • Regulatory obligations

  • Fraud investigations

Consent

Where required by law, we rely on your consent before:

  • Sending certain marketing communications

  • Using optional cookies

  • Processing information for purposes requiring consent

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

12. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information for money.

However, we may share personal information when necessary to operate our business or where required by law.

Information may be shared with:

  • Shopify

  • Payment processors

  • Shipping carriers

  • Logistics providers

  • Customer support providers

  • Professional advisors

  • Legal counsel

  • Government authorities when legally required

  • Fraud prevention providers

  • Security providers

  • IT service providers

  • Cloud hosting providers

  • Analytics providers

  • Marketing service providers (where permitted)

Each provider is permitted to use your information only for the services they perform on our behalf or as otherwise permitted by applicable law.

13. SHOPIFY SERVICES

Our online store is powered by Shopify.

Shopify may process certain personal information to:

  • Host our online store

  • Process transactions

  • Detect fraud

  • Secure payments

  • Store order information

  • Manage customer accounts

  • Improve platform reliability

  • Maintain infrastructure security

Your information may be processed on servers located in multiple countries depending on Shopify's infrastructure and applicable legal safeguards.

14. PAYMENT PROCESSING

Payments made through our store are processed using Shopify Payments and authorized payment partners.

We do not receive or store your complete payment card number, CVV code, or other sensitive payment credentials.

Payment providers may collect:

  • Payment information

  • Billing information

  • Transaction identifiers

  • Fraud prevention information

  • Payment verification information

These providers process payment information according to their own privacy notices and applicable financial regulations.

15. SHIPPING PROVIDERS

To deliver your orders, we may share necessary information with shipping and logistics partners.

This may include:

  • Name

  • Delivery address

  • Telephone number (where required)

  • Email address (where required)

  • Tracking information

  • Order reference

  • Delivery instructions

Shipping providers use this information solely to complete delivery services or as otherwise required by law.

16. FRAUD PREVENTION AND SECURITY

Protecting our customers is a priority.

We may use personal information to:

  • Detect suspicious activity

  • Prevent fraudulent transactions

  • Verify customer identity

  • Prevent unauthorized access

  • Investigate abuse of our services

  • Protect customer accounts

  • Monitor payment security

  • Comply with financial crime prevention requirements

Where necessary, we may share relevant information with payment providers, fraud detection services, financial institutions, or law enforcement authorities.

17. INTERNATIONAL DATA TRANSFERS

Because we operate internationally and use global service providers, your personal information may be transferred to countries outside your country of residence.

Where personal information is transferred internationally, we implement appropriate safeguards as required by applicable law, which may include:

  • Standard Contractual Clauses approved by the European Commission

  • Adequacy decisions

  • Contractual safeguards

  • Technical security measures

  • Organizational security measures

  • Other legally recognized transfer mechanisms

We take reasonable steps to ensure that international transfers provide an adequate level of protection for your personal information.

18. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to improve functionality, enhance your shopping experience, analyze website traffic, remember your preferences, and maintain the security of our services.

Cookies are small text files stored on your device when you visit our website.

Depending on your location and applicable law, you may be asked to consent to certain categories of cookies before they are placed on your device.

We may use the following categories of cookies:

Essential Cookies

These cookies are necessary for the operation of our website and cannot be disabled.

Examples include:

  • Shopping cart functionality

  • Checkout process

  • Customer authentication

  • Website security

  • Fraud prevention

  • Session management

  • Payment processing

  • Load balancing

Without these cookies, certain parts of our website may not function properly.

Functional Cookies

Functional cookies allow us to remember your preferences and improve your shopping experience.

These cookies may remember:

  • Language preferences

  • Country selection

  • Saved shopping cart

  • Account preferences

  • Accessibility settings

  • Recently viewed products

Analytics Cookies

Analytics cookies help us understand how visitors use our website.

Information collected may include:

  • Number of visitors

  • Pages viewed

  • Time spent on pages

  • Traffic sources

  • Customer journey

  • Device information

  • Browser information

  • Website performance

This information helps us improve our website and customer experience.

Advertising Cookies

Where permitted by law, advertising cookies may be used to:

  • Display relevant advertisements

  • Measure advertising performance

  • Limit repeated advertisements

  • Personalize marketing

  • Build audience insights

  • Improve future advertising campaigns

Advertising cookies may be placed by trusted advertising partners.

19. MARKETING COMMUNICATIONS

If you subscribe to our newsletter or otherwise consent to receive marketing communications, we may send you:

  • Product announcements

  • Promotions

  • Exclusive offers

  • Discounts

  • Restock notifications

  • New product launches

  • Seasonal campaigns

  • Company news

You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link included in our emails or by contacting us directly.

Even if you unsubscribe from marketing communications, we may still send important transactional emails relating to your purchases, customer support requests, legal notices, or account activity.

20. DATA RETENTION

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law.

Retention periods depend on the type of information involved, including:

  • Customer accounts

  • Order history

  • Payment records

  • Tax documentation

  • Customer service communications

  • Fraud prevention records

  • Legal compliance documentation

When personal information is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable legal requirements.

21. DATA SECURITY

Protecting your personal information is extremely important to us.

We implement appropriate technical, administrative, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, accidental loss, destruction, or theft.

Security measures may include:

  • Encrypted connections (SSL/TLS)

  • Secure payment processing

  • Access controls

  • Authentication procedures

  • Employee confidentiality obligations

  • Fraud monitoring

  • Network security measures

  • System monitoring

  • Security updates

  • Backup procedures

Although we take reasonable precautions to protect your information, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure.

22. YOUR PRIVACY RIGHTS

Depending on your country or state of residence, you may have certain privacy rights under applicable law.

These rights may include the right to:

  • Access your personal information

  • Correct inaccurate information

  • Update incomplete information

  • Delete personal information

  • Restrict certain processing activities

  • Object to certain processing activities

  • Withdraw consent where processing is based on consent

  • Request data portability

  • Lodge a complaint with a supervisory authority

  • Request additional information about how your data is processed

We will respond to verified requests within the time periods required by applicable law.

23. EUROPEAN PRIVACY RIGHTS (GDPR)

If you are located in the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR).

These rights may include:

  • Right of Access

  • Right to Rectification

  • Right to Erasure ("Right to be Forgotten")

  • Right to Restrict Processing

  • Right to Data Portability

  • Right to Object

  • Rights relating to Automated Decision-Making

  • Right to Withdraw Consent

  • Right to File a Complaint with your local Data Protection Authority

Exercising these rights is generally free of charge unless requests are manifestly unfounded or excessive.

24. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Subject to applicable law, these rights may include:

  • Right to Know what personal information we collect

  • Right to Access personal information

  • Right to Correct inaccurate personal information

  • Right to Delete personal information

  • Right to Request Data Portability

  • Right to Limit the Use of Sensitive Personal Information (where applicable)

  • Right to Non-Discrimination for exercising your privacy rights

We do not discriminate against individuals who exercise their privacy rights under applicable law.

Requests may be submitted using the contact information provided at the end of this Privacy Policy.

25. HOW TO EXERCISE YOUR PRIVACY RIGHTS

If you wish to exercise any of your privacy rights, submit a request using the contact information provided below.

To help protect your privacy and security, we may verify your identity before processing certain requests.

Depending on applicable law, we may request sufficient information to confirm your identity before fulfilling your request.

We aim to respond to verified requests within the timeframes required by applicable law.

26. DO NOT TRACK SIGNALS

Some web browsers offer a "Do Not Track" ("DNT") setting.

Because there is currently no universally accepted industry standard for responding to DNT signals, our website does not currently respond differently when such signals are received.

If an industry standard is adopted in the future, we may update our practices accordingly.

27. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, services, or applications.

We are not responsible for the privacy practices, security, content, or policies of third-party websites.

We encourage you to review the privacy policies of any third-party services you choose to visit.

28. BUSINESS TRANSFERS

If Sour Ribbons is involved in a merger, acquisition, investment, restructuring, sale of assets, bankruptcy, or other corporate transaction, your personal information may be transferred as part of that transaction, subject to applicable legal requirements.

Any successor organization will continue to protect your personal information in accordance with this Privacy Policy or provide notice of any material changes.

29. LEGAL DISCLOSURES

We may disclose personal information where required or permitted by law, including when necessary to:

  • Comply with legal obligations

  • Respond to lawful requests from public authorities

  • Enforce our Terms and Conditions

  • Protect our legal rights

  • Protect our customers

  • Prevent fraud

  • Investigate suspected illegal activity

  • Protect the safety of individuals

  • Defend legal claims

30. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time.

When changes are made, we will:

  • Update the "Last Updated" date at the top of this Privacy Policy.

  • Publish the revised version on our website.

  • Provide additional notice where required by applicable law.

Your continued use of our website after any changes become effective constitutes your acceptance of the revised Privacy Policy.

31. CONTACT US

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Sour Ribbons

Böckebolsvägen 28

422 54 Gothenburg

Sweden

Email: info@sourribbons.com

32. GOVERNING LAW

This Privacy Policy shall be governed by and interpreted in accordance with the laws applicable in Sweden, except where mandatory consumer protection or privacy laws in your country of residence provide additional rights.

Nothing in this Privacy Policy limits any rights you may have under applicable privacy or consumer protection laws.

33. SEVERABILITY

If any provision of this Privacy Policy is found to be invalid, unlawful, or unenforceable, the remaining provisions shall remain in full force and effect.

Any invalid provision shall be interpreted as closely as possible to reflect the original intent while remaining legally enforceable.

34. ENTIRE PRIVACY POLICY

This Privacy Policy constitutes the complete privacy notice of Sour Ribbons regarding the collection, use, disclosure, storage, and protection of personal information through our website and related services.

It should be read together with our:

  • Terms & Conditions

  • Cookie Policy

  • Shipping Policy

  • Refund Policy

  • Accessibility Statement

  • Do Not Sell or Share My Personal Information notice (where applicable)

These policies collectively explain how Sour Ribbons operates its online services and protects customer information.

Thank you for trusting Sour Ribbons.