Privacy policy

Privacy Policy

Last updated: 9 October 2026

This Privacy Policy describes how Northkayak ("we", "us", "our") collects, uses and shares your personal data when you visit or make a purchase from northkayak.com or our other country websites (the "Site"), use our services or otherwise communicate with us (together, the "Services").

When we refer to "you" in this Privacy Policy, we mean users of the Services – whether you are a customer, a website visitor or another person whose personal data we collect.

We recommend that you read this Privacy Policy carefully.

Data Controller

The controller responsible for processing your personal data is:

Långholmen Kajak AB (operator of Northkayak)
Reimersholmsgatan 75, 117 40 Stockholm, Sweden
Company registration number: 559008-9784
Email: info@northkayak.com
Phone: +46 (0)8 740 05 05

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal or regulatory changes. When we do, we will update the date above and take any other steps required by applicable law.

Personal Data We Collect

The personal data we collect depends on how you interact with us.

1. Information You Provide Directly

When you use our Services, we may collect:

  • Contact details (name, address, email address, phone number)
  • Order information (billing address, shipping address, payment confirmation)
  • Account information (username, password, security details)
  • Customer service information (information you give us when contacting us)

Certain features require this information. If you choose not to provide it, some Services may not work properly.

2. Information Collected Automatically

We may automatically collect certain information about your device and how you use our Site, including:

  • IP address
  • Browser type
  • Device information
  • Pages viewed
  • Time spent on pages
  • Referring websites

This data is collected using cookies and similar tracking technologies.

3. Information from Third Parties

We may receive information from:

  • Shopify (our e-commerce platform provider)
  • Payment providers
  • Shipping and logistics providers
  • Analytics and advertising partners

All such data is handled in accordance with this Privacy Policy.

How We Use Your Personal Data

1. To Provide Our Services

To process payments, fulfil orders, arrange shipping, handle returns and provide customer service.

Legal basis: performance of a contract (Article 6(1)(b) GDPR).

2. Marketing and Advertising

To send marketing emails and SMS messages and to show relevant advertising.

Legal basis: legitimate interest (Article 6(1)(f) GDPR) or consent where required by law (Article 6(1)(a) GDPR).

You can unsubscribe from marketing communications at any time.

3. Security and Fraud Prevention

To detect, investigate and prevent fraudulent or unlawful activity.

Legal basis: legitimate interest (Article 6(1)(f) GDPR).

4. Improving Our Services

To analyse how our Services are used and improve the user experience.

Legal basis: legitimate interest (Article 6(1)(f) GDPR) or consent where cookies require it.

5. Legal Obligations

To comply with legal requirements, for example accounting and tax rules.

Legal basis: legal obligation (Article 6(1)(c) GDPR).

Cookies

We use cookies and similar technologies to:

  • Operate our store
  • Improve performance
  • Analyse traffic
  • Show relevant advertising

We only use cookies that are not strictly necessary if you have given your consent through our cookie banner. You can change or withdraw your consent at any time, and you can also manage or disable cookies in your browser settings. Please note that some features of the Site may not work properly if cookies are disabled.

For more information about Shopify cookies, visit www.shopify.com/legal/cookies.

How We Share Personal Data

We may share personal data with:

  • Service providers (payment providers, shipping providers, IT providers, analytics providers)
  • Marketing and advertising partners
  • Shopify (platform provider)
  • Authorities, where required by law
  • Parties to a merger, acquisition or business transfer

We do not sell personal data.

International Data Transfers

Your data may be processed outside your country of residence, including outside the European Economic Area (EEA).

Where required, we rely on recognised safeguards such as:

  • EU Standard Contractual Clauses
  • Adequacy decisions by the European Commission

Data Retention

We keep personal data only for as long as necessary to:

  • Fulfil contractual obligations
  • Comply with legal requirements (for example accounting rules)
  • Resolve disputes
  • Enforce agreements

Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Request correction
  • Request deletion
  • Request restriction of processing
  • Object to processing, including processing for direct marketing
  • Request data portability
  • Withdraw your consent at any time
  • Lodge a complaint with a supervisory authority

To exercise your rights, contact us at info@northkayak.com. We may need to verify your identity before processing your request.

The competent supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se. You can also contact the data protection authority in the EU country where you live.

Children

Our Services are not directed at children under 16. We do not knowingly collect personal data from children.

Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those websites.

Contact

If you have questions about this Privacy Policy or how we handle data, please contact us:

Långholmen Kajak AB (Northkayak)
Hornsgatan 151, 117 34 Stockholm, Sweden
Email: info@northkayak.com
Phone: +46 (0)8 740 05 05