Privacy Policy

We value your privacy and want you to feel safe when shopping with us. We´ve written this policy with the same honesty and care we put into our products - clearly, transparently, and withou unnecessary legal jargon.

This Privacy Policy explains how we collect, use, protect, and share your personal data – and what rights you have under applicable data protection laws.

Last updated: 19 October 2025

1. Data Controller

Nine & Above Apparel AB, registration number 559296-4786, is the data controller for the processing of personal data in connection with purchases, customer service, and marketing.

Address: 746 41 Bålsta, Sweden
Email: hello@nineandabove.com

We comply with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.

If you have any questions about how we process your data, please contact us.

2. Personal Data We Collect

To provide our products and services, we need to process certain personal data.
We collect the following categories of information:

• Customer details: name, address, email, phone number.

• Order details: purchased products, delivery and payment information, order history.

• Payment details: processed by our payment providers (e.g., Klarna, PayPal).

• Technical information: IP address, device type, browser, language settings, and cookie data.

• Communication: messages via email, chat, contact form, or social media.

• Marketing data: newsletter subscriptions, consents, open and click statistics.

We only collect information necessary to fulfil our obligations and provide the best possible experience for you.

3. How We Use Your Personal Data

We use personal data for the following purposes:

1. To process and deliver your order – including payment, order confirmation, shipping, and returns.

2. To provide customer support – to respond to your questions or handle complaints.

3. To improve our products and services – through analysis of customer behaviour and feedback.

4. To send marketing communications – when you have given consent, such as newsletters or personalised offers.

5. To meet legal obligations – including accounting, warranties, and consumer rights.

6. To prevent fraud and protect our systems – through security monitoring and logging.

We never use your personal data for any purpose other than those listed above, and we never sell personal data to third parties.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract: to fulfil an agreement with you, such as processing and delivering an order.

• Legal obligation: to comply with statutory requirements, such as tax and accounting laws.

• Legitimate interest: to improve our services, prevent misuse, and ensure secure transactions.

• Consent: when you actively agree to marketing communications or cookies.

5. Data Retention

We keep personal data only for as long as necessary for each purpose:

• Order and transaction data: 7 years (in accordance with Swedish accounting law).

• Customer service records: up to 12 months after the case is closed.

• Marketing data: until you withdraw your consent.

• Technical and cookie data: according to your cookie preferences or until you delete them.

Once the data is no longer needed, it is securely deleted.

6. Sharing of Personal Data

We only share personal data with trusted partners who help us operate our business, such as:

• Payment providers: Shopify Payments, Klarna, PayPal, Swish.

• Shipping and logistics partners: DHL, UPS, PostNord.

• Technical platforms: Shopify (e-commerce platform), Fraktjakt, Synka+, Fortnox, Klaviyo, IT and email service providers.

• Authorities: when required by law, e.g., tax or customs authorities.

All partners act as data processors under binding agreements and comply with GDPR or equivalent standards.
We never sell personal data to third parties.

7. Transfers Outside the EU/EEA

Some of our service providers – such as Shopify, Meta (Facebook/Instagram) and Google – may process data outside the EU/EEA.

When this occurs, we ensure protection through EU Standard Contractual Clauses (SCCs) or other recognised safeguards.

Nine & Above only collaborates with providers that meet these requirements to ensure your data remains protected regardless of location.

8. Your Rights

Under GDPR and applicable laws, you have the following rights:

• Right of access – to request a copy of your personal data.

• Right to rectification – to correct inaccurate or incomplete information.

• Right to erasure – to request deletion of your data (“right to be forgotten”).

• Right to restriction of processing – to temporarily limit how we use your data.

• Right to data portability – to receive your data in a structured, machine-readable format.

• Right to object – to processing based on legitimate interest.

• Right to withdraw consent – for processing based on consent (e.g., marketing emails).

To exercise these rights, please contact hello@nineandabove.com.
If you believe we have processed your data unlawfully, you can lodge a complaint with your local data protection authority.
In Sweden, this is the Swedish Authority for Privacy Protection (IMY) – imy.se.

9. Cookies

We use cookies and similar technologies to make our website work properly, improve its performance, and enhance your experience.
Cookies are small text files stored on your device when you visit our site.

Types of cookies we use:

• Necessary cookies – essential for technical functionality (e.g., shopping cart, login, checkout).

• Analytics cookies – help us understand how our site is used and how we can improve it (e.g., Google Analytics).

• Marketing cookies – used to display relevant ads and measure campaign results (e.g., Meta Pixel).

When you first visit our website, you can choose which cookies to allow through our cookie consent banner.
Only necessary cookies are active without consent.
You can change or withdraw your consent at any time via the “Cookie Settings” link in the website footer.

Cookies are stored for varying durations depending on their purpose – some are deleted when you close your browser, while others may remain for up to 24 months.

Nine & Above Apparel AB is jointly responsible for cookie usage together with respective third-party providers.

You can also manually delete cookies through your browser settings.
More information is available at www.aboutcookies.org.

10. Marketing & Communication

If you subscribe to our newsletter, we process your email address to send inspiration, product news, and offers.
You can unsubscribe at any time by clicking the link in the email or contacting us directly.

Messages sent to customer service (email, chat, or social media) may be stored for up to 12 months for follow-up and quality purposes.

11. Data Security

We take the protection of your personal data seriously and apply both technical and organisational measures, including:

• Secure SSL encryption for data transmission.

• Limited access to personal data.

• Regular software updates and data backups.

We continuously review and improve our security practices to ensure your data remains safe and handled in accordance with the law.

12. Changes to This Policy

We may update this Privacy Policy when necessary, for example due to legal changes or adjustments in our processing activities.
The date of the latest update is shown at the top of this document.
Significant changes will be communicated on our website or via email to registered users.

13. Contact

If you have any questions about how we process personal data or wish to exercise your rights, please contact us:

Nine & Above Apparel AB
746 41 Bålsta, Sweden
Email: hello@nineandabove.com