Privacy & Cookie Policy
Last updated: 22 July 2026
This page explains how Just Coffee ("we", "us") collects, uses and protects your personal data when you use justcoffee.se, and how we use cookies. It is written to comply with the EU General Data Protection Regulation (GDPR), the Swedish Data Protection Act, and the ePrivacy rules in the Swedish Electronic Communications Act (Lag om elektronisk kommunikation).
1. Data controller
Just Coffee is the data controller for personal data processed through this website.
Just CoffeeBoglösa Uppmyrby Gård 14
745 97 Enköping, Sweden
Email: hello@justcoffee.se
2. What data we collect
- Account data: name, email, password hash when you register.
- Order data: billing and shipping address, purchased items, order total, delivery status.
- Payment data: processed by Stripe. We store only the last 4 digits, brand and status — never your full card number.
- Communications: messages you send via the contact form or by email, and newsletter sign-ups.
- Technical data: IP address, browser type, device, pages visited, referring URL, timestamps.
3. Why we process it and legal basis
- Fulfilling orders and subscriptions — necessary for performance of the contract (GDPR Art. 6(1)(b)).
- Customer support and account management — contract and legitimate interest (Art. 6(1)(b) and (f)).
- Accounting and tax records — legal obligation under the Swedish Bookkeeping Act (Art. 6(1)(c)).
- Newsletter — your consent, which you can withdraw at any time (Art. 6(1)(a)).
- Analytics and optional cookies — your consent (Art. 6(1)(a)).
- Fraud prevention and site security — legitimate interest (Art. 6(1)(f)).
4. How long we keep it
Order and invoice data is kept for 7 years to meet Swedish bookkeeping requirements. Account data is kept while your account is active and deleted on request. Contact-form messages are kept for up to 24 months. Newsletter data is kept until you unsubscribe.
5. Who we share it with
We share data only with processors that help us run the shop, under written data-processing agreements:
- Stripe — payment processing.
- PostNord — shipping and delivery.
- Supabase / Cloudflare — hosting, database and email delivery in the EU.
- Mailchimp — newsletter delivery (if you opt in).
Where a processor transfers data outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses.
6. Your rights
Under GDPR you have the right to access, rectify, erase, restrict or object to our processing of your data, and to data portability. You can also withdraw consent at any time. To exercise any right, email hello@justcoffee.se. You may also lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
7. Cookies
A cookie is a small text file stored on your device. We use two categories:
| Type | Purpose | Basis |
|---|---|---|
| Essential | Sign-in session, shopping cart, checkout with Stripe, remembering your cookie choice. | Strictly necessary — no consent required. |
| Optional | Anonymous usage analytics to improve the site. | Only set after you click "Accept all". |
You choose your preference in the banner shown on your first visit. To change it later, clear cookies for justcoffee.se in your browser and the banner will reappear.
8. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed. Material changes will be communicated on this page.