1. Scope and responsibility

This Privacy Policy explains how Nordcom Group AB (“WeightStart”, “we”, “us” or “our”) handles personal information when you visit our website, contact us or purchase a membership. Personal information means information that identifies you or can be linked to you.

It covers our website and membership administration, and explains your choices and rights. Information about the processing of sensitive health data for personal plans must be provided separately, where that information is requested. This policy does not replace that notice or any required consent.

2. Personal information we collect

Information you provide

• Contact and correspondence. Your name, email address and the information you include when you contact us.
• Purchase and membership information. Information needed to process your purchase and administer your membership, including contact, billing and order details provided through checkout.

Information from your use of the website

Technical information includes your IP address and browser details. Cookies and similar technologies may also process information about your use of the store, depending on the features enabled and your consent choices. See the cookies section below.

3. Purposes and legal bases

The legal basis depends on the reason for processing your information.

Requested services and purchases — contract

Responding to questions about a requested purchase, completing checkout and administering a membership rely on taking steps at your request before a contract, or performing that contract.

General enquiries — legitimate interests

For other correspondence, our interest is to respond to people who contact WeightStart and handle relevant follow-up.

Required records — legal obligations

Records required under applicable accounting and other laws are processed to meet those obligations.

Security and disputes — legitimate interests

Where information is needed to protect the website or handle a dispute, the relevant interests must be balanced against your rights.

Optional activities — consent where required

Where an activity requires consent, such as optional tracking, consent must be obtained separately. You can withdraw it without affecting processing carried out lawfully before withdrawal.

4. Health and personal plans

Please do not send medical records, diagnoses or other sensitive health information through ordinary email, WhatsApp or checkout notes.

Private health information requires additional protection and a specific legal justification. Before a service asks you for this information, you should receive a separate notice explaining what is collected, why it is needed, who can access it and how long it is kept. This website notice does not replace that information or any required consent.

5. Cookies and similar technologies

Shopify uses cookies and similar technologies to support store functions such as checkout, security and preferences. Depending on the features enabled, these technologies may also be used for analytics or advertising.

Where a consent choice is presented, you can accept or reject optional categories. You can also manage cookies through your browser settings; blocking essential cookies may affect checkout or other store functions. Consent for optional tracking is separate from accepting this privacy policy.

6. Sharing and service providers

Shopify provides our online store and processes information involved in operating it. Information may also be handled by providers involved in a service you use, such as payment processing or communications, and by authorities where disclosure is legally required.

Shopify’s role varies with the services involved. For processing for which Shopify is responsible, read its Consumer Privacy Policy and use its privacy portal.

7. International transfers

Service providers may process information outside your country. Where information is transferred outside the EEA, the applicable transfer mechanism and safeguards must protect it under data protection law. You can contact us for information about recipients and applicable safeguards.

8. How long information is kept

Retention depends on why the information was collected. Enquiry records are needed to respond and handle relevant follow-up. Membership and purchase records may be needed to administer the service, meet legal record-keeping obligations or handle a dispute.

The applicable period is determined by the purpose, relevant legal obligations and any continuing need to establish, exercise or defend legal claims. When there is no remaining lawful reason to retain personal information, it should be deleted or made anonymous. Private health information requires its own retention rules.

9. Protecting your information

Access to personal information should be limited to people who need it for the relevant service. No website or communication channel can guarantee complete security. Please keep account credentials private and contact us if you suspect unauthorised access.

When contacting us about a privacy request, share only the details needed to identify and resolve the request. Do not send medical documents or identity documents unless we have explained why they are needed and how to provide them securely.

10. Your rights and choices

Depending on the applicable law and circumstances, you can request access to your information, correction of inaccurate details, erasure, restriction of processing or a portable copy. You may also object to processing based on legitimate interests, depending on your circumstances. You can object to direct marketing at any time. These rights are subject to the conditions and exceptions in applicable law.

Where we rely on consent, you can withdraw it at any time. This does not affect processing carried out lawfully before withdrawal. You can also complain to your supervisory authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY).

Exercising your rights is normally free of charge. Requests are normally answered within one month. If a permitted extension is needed, we will explain why within that period. We may ask for proportionate information to verify your identity.

To make a request, contact marcel@weightstart.com or rafael@weightstart.com.

11. Information you need to provide

You choose whether to contact us or make a purchase. Information needed to respond to a request, complete checkout or administer a membership is necessary for that activity. If it is not provided, we may be unable to respond, complete the purchase or provide the requested service. Optional information should be identified where it is requested.

12. Changes to this policy

This notice will be updated when our data practices change. Where a change materially affects how personal information is used, additional information will be provided as required by applicable law. You can contact us if you have questions about the version that applies to your information.

13. Contact us

For questions about this policy or to exercise your privacy rights, contact Marcel Sobolewski or Rafael Westin.

marcel@weightstart.com
rafael@weightstart.com