Privacy policy
PRIVACY POLICY
Last updated: September 5, 2026
This Privacy Policy describes how Hejblik AB, trading as Blik Cosmetics (“Blik Cosmetics”, “we”, “us” or “our”) collects, uses, stores and shares personal information when you visit blikcosmetics.com, purchase our products, contact us, or otherwise interact with our services.
Hejblik AB is the data controller for the personal information described in this Privacy Policy, except where another party acts as an independent data controller under its own privacy policy.
CONTACT
If you have questions about this Privacy Policy, our processing of your personal information, or wish to exercise your privacy rights, please contact us at:
Hejblik AB
Sweden
love@blikcosmetics.com
PERSONAL INFORMATION WE COLLECT
Depending on how you interact with us, we may collect the following categories of personal information.
Contact and account information
This may include your name, email address, telephone number, billing address, shipping address and customer account information.
Order and transaction information
When you make a purchase, we process information about your order, products purchased, delivery details, returns, refunds and other transaction information.
Payment information is processed through our payment and ecommerce providers. We do not necessarily receive or store your full payment card details.
Customer service, returns and complaints
If you contact us regarding an order, return, complaint or product issue, we may collect your contact information, order number, correspondence with us, details about the issue and any photos or other information you choose to provide.
Please only provide information that is relevant and necessary for us to handle your request.
Device and usage information
When you use our website, we and our service providers may automatically collect information such as your IP address, browser type, device information, operating system, time zone, pages viewed, products viewed, referring pages, search activity and information about how you interact with the Site.
This information may be collected through cookies, pixels, log files and similar technologies.
Marketing and advertising information
If you subscribe to marketing or interact with our advertising, we may process information such as your email address, marketing preferences, interactions with messages and advertisements, and information about your use of the Site.
Where required by law, we ask for your consent before using personal information or cookies for marketing, analytics or personalised advertising.
HOW WE USE YOUR PERSONAL INFORMATION
We may use your personal information to:
- process and fulfil your orders
- process payments and refunds
- arrange shipping and delivery
- handle returns, complaints and product issues
- communicate with you regarding your orders
- provide customer service
- manage customer accounts
- detect and prevent fraud, misuse and security incidents
- comply with accounting, tax, consumer protection and other legal obligations
- operate, maintain and improve our website and services
- analyse how our website and services are used
- personalise your experience where permitted
- send marketing communications where permitted by law
- measure and improve our advertising and marketing
- establish, exercise or defend legal claims
- protect our customers, business and legal rights
LEGAL BASES FOR PROCESSING
If the General Data Protection Regulation, or GDPR, applies to you, we process your personal information on one or more of the following legal bases.
Performance of a contract
We process personal information when necessary to fulfil your order, deliver products, process payments and refunds, handle returns and otherwise perform our agreement with you.
Legal obligations
We process information where necessary to comply with legal obligations, including accounting, tax, consumer protection and product related obligations.
Legitimate interests
We may process personal information where necessary for our legitimate interests, provided that those interests do not override your rights and freedoms.
These interests may include providing customer service, protecting our business against fraud, improving our services, maintaining security and understanding how our business performs.
Consent
Where required, we rely on your consent for activities such as certain marketing communications, analytics cookies and personalised advertising.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that took place before your consent was withdrawn.
HOW WE SHARE PERSONAL INFORMATION
We may share personal information with companies that help us operate our business and provide our services.
These may include:
- Shopify, which provides our ecommerce platform
- payment processors and payment service providers
- fulfilment and logistics providers, including Jobbex Service AB
- postal and shipping carriers
- customer service and communications providers
- IT, hosting, security and fraud prevention providers
- analytics providers
- advertising and marketing providers
- accountants, auditors, professional advisers and authorities where required
We only share information that is reasonably necessary for the relevant purpose.
Our service providers may process personal information on our behalf under appropriate contractual obligations. Certain providers may also process information as independent data controllers under their own privacy policies.
SHOPIFY
Our online store is powered by Shopify.
Shopify processes personal information in connection with your use of our store, including information necessary to operate the Site, process transactions, provide checkout functionality, prevent fraud and provide other Shopify services.
Depending on our Shopify settings and the services we use, Shopify may also process information to provide enhanced services, analytics, personalisation or advertising functionality.
If Shopify Network Intelligence or related Shopify enhanced services are enabled, Shopify may use customer information from participating merchants to provide features designed to improve fraud prevention, personalisation, store performance and advertising. Other merchants do not receive direct access to our customer information through this functionality.
You can learn more about Shopify's processing of personal information in Shopify's own privacy policy.
Shopify's privacy documentation was updated in July 2026 and describes international processing, machine learning and its use of cookies and similar technologies.
ANALYTICS AND ADVERTISING
We may use analytics and advertising technologies to understand how customers use our Site, measure advertising performance and show more relevant advertising.
These services may include technologies provided by platforms such as Google, Meta, Shopify or other advertising and analytics providers that we use from time to time.
Depending on your location, these technologies may only be activated after you have given consent through our cookie settings.
You can withdraw or adjust your cookie preferences at any time through the privacy or cookie controls available on our Site.
You can also unsubscribe from email marketing at any time by using the unsubscribe option provided in our marketing emails.
COOKIES AND SIMILAR TECHNOLOGIES
Cookies are small files or pieces of information stored on or accessed from your device when you visit a website.
We and our service providers may use cookies and similar technologies for purposes including:
Strictly necessary cookies
These cookies are required for the Site to function and may be used for features such as checkout, shopping carts, security, customer accounts and privacy preferences.
Functional cookies
These cookies help remember choices and provide enhanced Site functionality.
Analytics cookies
These cookies help us understand how visitors use the Site and allow us to analyse and improve performance.
Advertising cookies
These cookies may be used to measure advertising performance and, where permitted, provide personalised advertising.
Where required by applicable law, non essential cookies are only used after you have provided consent.
You can use the cookie banner or privacy settings available on our Site to manage your preferences.
Shopify maintains its own current information about the cookies and similar technologies used by the Shopify platform. Its current cookie policy was updated in August 2026.
INTERNATIONAL DATA TRANSFERS
Some of our service providers operate in countries outside Sweden or the European Economic Area.
This means that personal information may be processed outside the EEA.
Where personal information is transferred outside the EEA, we and our service providers use safeguards required by applicable data protection law, where necessary. These may include adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules or other recognised safeguards.
For customers in the EEA, Shopify states that information may be processed through its Irish entity and transferred to other Shopify locations and service providers, including in Canada and the United States. Shopify states that its intra group transfers from the EEA use approved Binding Corporate Rules and that transfers to third party subprocessors are protected by contractual safeguards where appropriate.
DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The retention period depends on the type of information and the reason we collected it.
For example, we may retain:
- transaction and order information for periods required by applicable accounting, tax and other laws
- information necessary to manage returns, complaints and consumer rights for as long as reasonably necessary
- customer service correspondence while needed to manage your request or protect our legal interests
- marketing information until you unsubscribe, withdraw consent or we no longer need the information
- information necessary to prevent fraud or protect our legal rights for an appropriate period
After information is no longer required, we may delete or anonymise it unless applicable law requires us to retain it.
GDPR requires organisations to explain how long data is retained or the criteria used to determine the period, and personal information should generally not be stored longer than necessary for its purpose.
SECURITY
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
AUTOMATED PROCESSING
We and our service providers may use automated systems to identify fraud, security risks, suspicious transactions or other misuse.
We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on you unless permitted by applicable law and appropriate safeguards are provided.
Shopify also states that it uses machine learning in ways that either involve human participation or do not have legal or similarly significant effects in the relevant context.
YOUR RIGHTS
If the GDPR applies to you, you may have the right to:
- request access to your personal information
- request correction of inaccurate personal information
- request deletion of your personal information
- request restriction of processing
- receive certain personal information in a portable format
- object to certain processing based on legitimate interests
- object to direct marketing
- withdraw consent where processing is based on consent
- lodge a complaint with a data protection authority
These rights are subject to conditions and exceptions under applicable law.
To exercise your rights, contact love@blikcosmetics.com.
We may need to verify your identity before fulfilling certain requests.
GDPR requires businesses to give individuals clear information about purposes, legal bases, recipients, retention, international transfers and their rights.
COMPLAINTS
If you have concerns about how we process your personal information, please contact us first at:
If you are located in Sweden, you also have the right to lodge a complaint with Integritetsskyddsmyndigheten, IMY, the Swedish Authority for Privacy Protection.
IMY accepts complaints concerning the unlawful processing of personal information.
If you live elsewhere in the EEA, you may also contact the competent data protection authority in your country.
THIRD PARTY LINKS
Our Site may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices, content or security of third party websites.
We encourage you to review their privacy policies before providing personal information to them.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our business, services, technology or legal and regulatory requirements.
The current version will be published on this page together with its updated date.
CONTACT
For questions, requests or complaints regarding privacy or personal information, please contact:
Hejblik AB
Trading as Blik Cosmetics
Sweden
love@blikcosmetics.com