Privacy policy
Last updated: 25 September 2026
At Circle of Friends, we want it to be easy to understand how we use your personal data. This policy explains what information we process, why we use it and what rights you have.
Who is responsible for your personal data?
The data controller is:
C.O.F. Retail AB
Company registration number: 559191-4865
Polhemsgatan 13
112 36 Stockholm
Sweden
Please do not send returns or other mail to this address.
Store and return address:
Circle of Friends
Hjulhamnsgatan 7
211 34 Malmö
Sweden
Contact: info@circleoffriendsshop.com
If you have any questions about how we process your personal data, you are always welcome to contact us.
What personal data do we use?
The information we process depends on how you use our store and website.
This may include:
- your name and contact details, such as your address, email address and phone number,
- order and purchase information,
- payment information,
- shipping and tracking information,
- information about returns and claims,
- communications with our customer service,
- information connected to your customer account,
- technical information about how you use our website, such as your device, browser, IP address and website activity,
- your choices regarding cookies, analytics and marketing.
We aim to collect and use only the information needed for the purposes described in this policy.
Why do we use your data?
To process your purchase
When you shop with us, we need to use personal data to receive and manage your order, process payment, ship your items and communicate with you about your purchase.
The main legal basis for this processing is that it is necessary to fulfil our contract with you.
Shipping and returns
We share the information needed with the shipping and logistics services used for your order or return.
Depending on the destination and shipping method, this may include PostNord, DHL Express, FedEx or the systems we use to manage these shipments.
The information may include your name, address, email address, phone number, order reference and information required for shipping, customs clearance and tracking.
When you register a return, we also process information about the items you return, the reason for the return, return shipping and your refund.
Payments and fraud prevention
Payments are processed through Shopify and the payment providers available at checkout.
We normally do not have access to your full card details. The payment provider processes the information needed to complete the payment, prevent fraud and comply with legal requirements.
Customer service
If you contact us, we use the information you provide to answer your question and assist you with matters such as an order, delivery, return or claim.
We may retain communications where necessary to follow up on your case or document what has been agreed.
Accounting and other legal obligations
Certain information about purchases and payments must be retained so that we can comply with accounting, tax and other legal requirements.
In these cases, we process the information because we have a legal obligation to do so.
Shopify
Our online store is powered by Shopify.
Shopify processes personal data to provide services including our website, customer accounts, checkout, order management, payments, security and other functions required to operate our online store.
In some circumstances, Shopify may process information for its own purposes and is then responsible for that processing.
More information about how Shopify processes personal data is available in Shopify's own privacy information.
Cookies and similar technologies
We use Shopify Customer Privacy to manage your choices regarding cookies and similar technologies.
We divide these functions into four categories:
Required – necessary for the website and essential functions such as the shopping cart, checkout, security and your privacy choices to work. These cannot be switched off.
Personalization – used for features that personalize your experience.
Analytics – helps us understand how the website is used and how our marketing performs.
Marketing – used for advertising measurement, audiences and more relevant marketing.
Optional categories are switched off by default where consent is required. You can accept all, decline optional categories or make your own choices.
You can change or withdraw your consent at any time through Cookie preferences at the bottom of our website.
When consent is withdrawn, subsequent loading of the external Google and Meta resources covered by your choices is stopped. Essential Shopify functions continue to operate so that the website can work properly.
We use Google & YouTube through Shopify for analytics, advertising measurement and marketing.
When you allow analytics, Google technology may be used to measure activity on the website and help us understand how our website and advertising perform. Additional processing may take place depending on your choices and the Google services being used.
The integration may process information both in your browser and through server-based functions. The exact information processed depends on the service, your activity and your privacy choices.
Meta – Facebook and Instagram
We use Facebook & Instagram through Shopify for advertising measurement, audiences and marketing.
The Meta Pixel in your browser is activated when you have allowed marketing. The integration also supports server-based processing.
Depending on your choices and how you use the website, Meta may process information about visits, interactions and purchases to measure and improve advertising.
Shopify Network Intelligence
We use Shopify Network Intelligence, which may use information from our store and Shopify's network for purposes including security, analytics, personalization and marketing. Its use is affected by applicable privacy rules and your choices regarding cookies and similar technologies.
Email marketing
We send marketing emails to customers who have chosen to receive them or where we otherwise have a lawful basis to do so.
Signing up for email marketing is not pre-selected in our store.
You can unsubscribe at any time using the link in our marketing emails.
Messages needed to manage an order, delivery, return or other customer service matter are not marketing and may be sent even if you do not subscribe to our newsletter.
Who do we share your data with?
We share personal data where necessary to operate our store and provide our services.
This may include:
- Shopify and payment providers,
- shipping and logistics providers,
- Google,
- Meta,
- email and customer communication providers,
- IT and hosting providers,
- accounting and other professional service providers,
- public authorities where we are legally required to provide information.
We do not sell our customer lists.
Transfers outside the EU/EEA
Some of our service providers are international companies, which means that personal data may be processed in or made accessible from countries outside the EU/EEA.
Where such transfers take place, they must be covered by a valid transfer mechanism under applicable data protection law, such as an adequacy decision or the European Commission's Standard Contractual Clauses.
How long do we keep your data?
We keep personal data for as long as it is needed for the purpose for which it was collected.
The retention period varies depending on the type of information. Order and payment information may, for example, need to be retained for longer periods for accounting, tax, warranty, claims and other legal obligations.
Customer service information is retained for as long as needed to manage and follow up on the matter.
Information processed on the basis of consent is used until consent is withdrawn or the processing is no longer needed, subject to any legal obligations and technical retention periods.
Your rights
Depending on the circumstances and applicable law, you may have the right to:
- receive information about how your personal data is used,
- access the personal data we hold about you,
- have inaccurate information corrected,
- request deletion of your data,
- request restriction of processing,
- object to certain processing,
- receive certain data in a portable format,
- withdraw your consent.
If processing is based on consent, withdrawing your consent does not affect the lawfulness of processing that took place before it was withdrawn.
Contact info@circleoffriendsshop.com if you would like to exercise any of your rights. We may need to verify your identity before providing or changing personal data.
You also have the right to lodge a complaint with the relevant data protection authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY).
Where applicable, we and Shopify also respect browser-based privacy signals such as Global Privacy Control.
Changes to this policy
We may update this Privacy Policy when our services, service providers or legal obligations change.
The latest version is always available on our website. The date at the top shows when the policy was last updated.
Contact us
If you have any questions about this policy or how we process your personal data, please contact us:
C.O.F. Retail AB
Company registration number: 559191-4865
Email: info@circleoffriendsshop.com
Store and return address:
Circle of Friends
Hjulhamnsgatan 7
211 34 Malmö
Sweden