Last updated: August 24, 2026
Little Secrets Nordic (“Little Secrets Nordic”, “we”, “us” or “our”) is operated by Elevate Y Biz Mindset. We operate this online store and website and provide the related information, content, features, products and services (collectively, the “Services”).
Our online store is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and Services to you.
This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, make a purchase, create an account, subscribe to our communications, contact us or otherwise interact with our Services.
For the purposes of applicable data protection legislation, including the EU General Data Protection Regulation (“GDPR”), Elevate Y Biz Mindset, operating under the trade name Little Secrets Nordic, is the data controller for the personal information described in this Privacy Policy, except where another party, such as Shopify, acts as an independent controller for specific processing activities.
Personal Information We Collect
Depending on how you interact with our Services, we may collect and process the following categories of personal information:
How We Collect Personal Information
We may collect personal information:
How We Use Your Personal Information
We process personal information only where we have an appropriate legal basis under applicable data protection law.
We may use your personal information to process and fulfil orders, receive and verify payments, arrange delivery, process returns or refunds and otherwise perform our contract with you.
We may also use personal information to provide customer support, communicate with you about your orders or account, maintain and improve our website and Services, prevent fraud and protect the security of our website.
Where required, we may process information to comply with legal obligations, including accounting, tax, consumer protection and regulatory requirements.
Where we have your consent, or where otherwise permitted by applicable law, we may use your information to send newsletters, offers and other marketing communications. You may withdraw your consent or unsubscribe from marketing communications at any time.
We may also process certain information where necessary for our legitimate interests, such as improving our Services, protecting our business and understanding how customers use our website, provided that those interests do not override your rights and freedoms.
Cookies and Similar Technologies
We and our service providers may use cookies and similar technologies to operate the website, remember preferences, understand how visitors use our Services and, where you have provided the required consent, support analytics, marketing and personalised advertising.
Where required by applicable law, non-essential cookies will only be used after you have provided your consent.
You can manage your cookie preferences through the cookie consent tools available on our website.
How We Share Personal Information
We may share personal information with trusted third parties where necessary to operate our business and provide our Services.
These may include Shopify, payment providers, delivery and logistics providers, IT and hosting providers, analytics providers, customer support providers and marketing or advertising partners.
We may also disclose personal information where required by law, regulation, court order or another valid legal process, or where reasonably necessary to protect our legal rights, customers or Services.
We do not disclose personal information to third parties for purposes unrelated to operating our business unless we have an appropriate legal basis to do so.
Shopify
Our online store is hosted and powered by Shopify.
Shopify processes personal information relating to your access to and use of our store in order to provide its e-commerce services and functionality.
Certain information may be processed by Shopify independently in accordance with Shopify’s own privacy practices. Shopify may also process information in countries outside the European Economic Area.
For further information about Shopify’s processing of personal information and the privacy rights available to you in relation to Shopify’s services, please refer to Shopify’s Consumer Privacy Policy.
International Data Transfers
Some of our service providers may process or store personal information outside Sweden or the European Economic Area.
Where personal information is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards will be used as required by applicable law. These may include European Commission Standard Contractual Clauses or other recognised transfer mechanisms.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
Retention periods may depend on the nature of the information and our legal, accounting, tax, contractual and regulatory obligations.
Information relating to purchases and transactions may therefore be retained for the period required under applicable Swedish accounting and tax legislation.
When personal information is no longer required, we will delete or anonymise it where appropriate.
Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of electronic transmission or storage can be guaranteed to be completely secure. You are responsible for keeping any account credentials associated with our Services confidential.
Your Rights
If you are located in the European Economic Area, you may have rights under the GDPR in relation to your personal information.
Subject to applicable conditions and exceptions, these may include the right to request access to your personal information, request correction of inaccurate information, request deletion of your information, request restriction of processing, object to certain processing, receive certain information in a portable format and withdraw consent where processing is based on consent.
You also have the right to object at any time to the processing of your personal information for direct marketing purposes.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, please contact us using the details provided below. We may need to verify your identity before fulfilling certain requests.
Marketing Communications
If you subscribe to our marketing communications, you may unsubscribe at any time by selecting the unsubscribe link contained in our marketing emails or by contacting us.
Unsubscribing from marketing communications will not prevent us from sending transactional or service-related communications concerning your orders, payments, deliveries or account.
Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, security or content of websites operated by third parties. We recommend reviewing the privacy policies of any third-party websites you choose to visit.
Children’s Privacy
Our Services are not intended for children, and we do not knowingly collect personal information from children in circumstances where parental or guardian consent would be required under applicable law.
If you believe that a child has provided personal information to us improperly, please contact us so that we can take appropriate action.
Complaints
If you have concerns about how we process your personal information, please contact us first so that we can review your concern.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY).
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, business practices or applicable legal and regulatory requirements.
When we make changes, we will publish the updated Privacy Policy on this website and revise the “Last updated” date above.
Contact
For questions about this Privacy Policy, our privacy practices or to exercise your data protection rights, please contact:
Little Secrets Nordic
Operated by Elevate Y Biz Mindset
Köpenhamnsvägen 105D
217 75 Malmö
Sweden
Email: info@littlesecretsnordic.com
Phone: +46 76 046 03 11
VAT Number: SE840910608801
For the purposes of applicable data protection law, Elevate Y Biz Mindset, operating under the trade name Little Secrets Nordic, is the data controller for your personal information.
