Privacy policy

Privacy Policy

This Privacy Policy describes how IC Enterprises AB, operating RevitaLash Nordics (“RevitaLash Nordics”, “we”, “us” or “our”), collects, uses and protects your personal data when you visit revitalash.se, revitalash.dk or revitalash.fi (“the Site”) or purchase our products.

We are committed to protecting your privacy and to processing personal data transparently and in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection law in Sweden, Denmark and Finland. By using the Site or our services you confirm that you have read and understood this Privacy Policy.

Data controller

IC Enterprises AB
Registered in Sweden
Organisation number: 556786-7121
Address: Banérgatan 10, 115 23 Stockholm, Sweden
Email: info@iceab.se

If you have questions about your personal data or how we process it, contact us at info@iceab.se.

What personal data we collect

We collect personal data that you provide directly, as well as data collected automatically when you use the Site.

Information you provide: name, email address and phone number; shipping and billing address; order details and purchase history; payment information (processed by our payment providers, not stored by us); account credentials if you create an account; communications with our customer service; newsletter sign-ups and marketing preferences.

Information collected automatically: IP address, browser type and device information; pages visited, time spent on the Site and referring website; cookies and similar tracking technologies (see the section on cookies below); order and browsing behaviour.

Why we process your data (purposes and legal basis)

To fulfil your order (legal basis: performance of a contract): processing orders and payments; shipping and delivering products; handling returns, exchanges and complaints; providing customer support.

To comply with legal obligations (legal basis: legal obligation): bookkeeping and tax obligations under Swedish law; consumer protection requirements; responding to lawful requests from public authorities.

To improve the Site and our services (legal basis: legitimate interest): analysing how the Site is used; improving products, services and user experience; preventing fraud and ensuring security.

Marketing and communications (legal basis: consent or legitimate interest): sending newsletters and promotional emails with your consent; personalised advertising on third-party platforms; customer surveys and feedback requests.

You can withdraw consent for marketing at any time by clicking the unsubscribe link in any email or by contacting us at info@iceab.se.

Who we share your data with

We share personal data only with trusted third parties as necessary to run our business, including:

  • Payment providers (Shopify Payments, Shop Pay, Klarna, Swish, Apple Pay, Google Pay) to process payments
  • Our logistics partner Logpart and the carrier PostNord to pick, pack and deliver your orders, via the warehouse system Ongoing WMS
  • Our accounting system Fortnox for invoicing and bookkeeping
  • Technology providers (Shopify) that power our e-commerce platform
  • Email and marketing providers (Klaviyo, Shopify Email) for newsletters and customer communication
  • Analytics and advertising providers (Google, Meta) to understand and improve performance, only where you have given consent
  • Customer support tools used to manage support requests
  • Public authorities, when required by law

We never sell your personal data to third parties.

International transfers

Some of our service providers may be located outside the EU/EEA. When personal data is transferred outside the EU/EEA we ensure it is protected by appropriate safeguards, such as the EU Standard Contractual Clauses, an adequacy decision by the European Commission or other equivalent legal mechanisms.

How long we keep your data

We keep your personal data only as long as necessary for the purposes described in this policy: order and customer information for 7 years (required by the Swedish Accounting Act); customer accounts until you request deletion or after 3 years of inactivity; newsletter subscribers until you unsubscribe; customer support communications up to 2 years; cookies according to the retention periods stated in the cookie settings.

Your rights

Under the GDPR you have the right to access the personal data we hold about you; correct inaccurate or incomplete data; request deletion of your data; restrict the processing of your data; object to processing based on our legitimate interest; receive your data in a structured, commonly used format (data portability); and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@iceab.se. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority: in Sweden the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se), in Denmark Datatilsynet (datatilsynet.dk) and in Finland the Office of the Data Protection Ombudsman (tietosuoja.fi).

Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. This includes encryption in transit, secure payment processing through trusted providers and limited access controls within our team.

Cookies

We use cookies and similar tracking technologies on the Site. When you first visit the Site you can choose which non-essential cookies to accept, and you can change your choice at any time via the cookie settings link in the footer. Essential cookies required for the Site and checkout to work are always active.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on the Site with the date of the most recent update.

Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at info@iceab.se.

Last updated: 3 November 2026