Privacy Policy
Last updated: 2026-05-31
This policy describes how Boe Scandinavia AB collects, uses and protects your personal data when you visit boeleisure.com, subscribe to our newsletter or shop in our store.
Data controller
Boe Scandinavia AB is the data controller for the processing of your personal data.
Boe Scandinavia AB
Reg. no. 559576-6816
Drakegatan 10, 412 50 Göteborg
hello@boeleisure.com
What data we collect
We collect the following categories of data:
- When you subscribe to our newsletter or waiting list: your email address and, if you provide it, your name.
- When you shop in our store (from 1 July 2026): name, shipping and billing address, email address, phone number, payment information (handled directly by our payment partner — we do not store your card number), order history and any notes you leave at checkout.
- When you visit boeleisure.com: IP address, session and device data, approximate geographic location, referring web page, and information about how you move through the site via cookies and similar technologies.
- When you contact our customer service: the content of your communication with us as well as any images or files you share.
Where the data comes from
Primarily directly from you — when you subscribe, shop or contact us. Some data is collected automatically via cookies when you visit boeleisure.com.
We have also received a subscriber list from Home of ESS AB / ESS Group in connection with Boe Leisure stepping out as an independent brand. The transfer was carried out on the basis of legitimate interest and was clearly communicated to everyone affected in a separate email on 1 June 2026, with the option to unsubscribe in a single click.
Why we process the data
We process your data for the following purposes and on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Sending newsletters and marketing communications | Consent — can be withdrawn at any time |
| Processing and delivering your orders | Contract |
| Handling complaints, returns and customer service matters | Contract and legitimate interest |
| Fulfilling accounting requirements and other legal obligations | Legal obligation |
| Analysing and improving boeleisure.com and our products | Legitimate interest |
| Preventing fraud and security incidents | Legitimate interest |
| Sending relevant product recommendations based on your history | Legitimate interest — you may object at any time |
How long we keep the data
- Newsletter subscription: until you unsubscribe — after which we delete your address within 30 days.
- Order and customer data: 7 years after the customer relationship ends, in line with the requirements of the Swedish Bookkeeping Act.
- Customer service conversations: 36 months after the most recent contact.
- Log and security data: 12 months.
- Cookie data: according to your browser's cookie setting, max 24 months.
Who we share the data with
We share data with our service providers to the extent required to run the business. Among these:
- Shopify Inc. — e-commerce platform (EU / US, processed under the European Commission's Standard Contractual Clauses)
- Klaviyo Inc. — email marketing and customer data (US, Standard Contractual Clauses)
- Payment providers — Klarna, Stripe or equivalent (EU)
- Shipping carriers — DHL, PostNord or equivalent, to deliver your orders
- Accounting firm — to fulfil accounting requirements
- ESS Group AB — for strategic business collaborations (e.g. hotel cross-promotion) — however, no personal data is shared without explicit notice to you
- Authorities — when we are legally obliged (the Swedish Tax Agency, the Swedish Consumer Agency, the Police when necessary)
We do not sell your personal data to third parties.
Transfers outside the EU/EEA
Some of our service providers (e.g. Shopify and Klaviyo) are US companies. For such transfers we ensure an adequate level of protection through the European Commission's Standard Contractual Clauses (SCC) or other approved transfer mechanisms.
Your rights
You have the right to:
- Receive information about what data we process about you (subject access request)
- Request rectification of inaccurate or incomplete data
- Request erasure of data ("the right to be forgotten"), where compatible with our legal obligations
- Request restriction of processing
- Object to processing based on legitimate interest
- Request data portability — to obtain your data in a machine-readable format
- Withdraw consent — at any time, without giving a reason
- Lodge a complaint with the supervisory authority — the Swedish Authority for Privacy Protection (IMY), imy.se
To exercise any of your rights, email us at hello@boeleisure.com. We respond within 30 days.
Cookies and similar technologies
boeleisure.com uses cookies so that the website works, to remember your settings, to analyse traffic and to personalise content and ads. On your first visit we ask for your consent to non-essential cookies.
You can adjust your cookie settings via the cookie banner or in your browser. Technically necessary cookies (e.g. for the shopping cart and login) require no consent and cannot be turned off without the website ceasing to function.
Security
We take technical and organisational security measures to protect your data against unauthorised access, alteration and loss — including encryption, access control, logging and regular security reviews.
Changes to this policy
We may update this policy if our business, the legislation or our service providers change. In the event of material changes, we will inform you by email or on boeleisure.com. The most recently updated version is always available on this page.
Contact
Questions about this policy or about how we process your personal data are answered by:
Boe Scandinavia AB
Reg. no. 559576-6816
Drakegatan 10, 412 50 Göteborg
hello@boeleisure.com