Privacy Policy

Last updated: 21 June 2026

This Privacy Policy explains how GoodSalla collects, uses, stores and protects your personal data when you visit our website, create an account, place an order, use our skin quiz, build a skincare kit, subscribe to marketing, contact us, or otherwise interact with our store.

GoodSalla is a WooCommerce skincare webstore serving customers in Sweden and the EU. We respect your privacy and process personal data only when we have a valid reason to do so.

1. Who is responsible for your personal data?

The data controller is:

GoodSalla
Organisation number: 830921-5203
Address: ÅRHUSGATAN 61,164 45 KISTA, Sweden
Email: info@goodsalla.com
Website: https://goodsalla.com

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at the email address above.

2. What personal data we collect

We may collect the following categories of personal data:

Account and contact details

Name
Email address
Phone number
Billing address
Shipping address
Account login details, if you create an account

Order and payment information

Products purchased
Order history
Order value
Discounts, coupons or gift cards used
Payment status
Refund and return information

We do not intentionally store full card numbers. Payment card processing is handled by our payment provider.

Shipping and delivery information

Delivery address
Selected shipping method
PostNord service point or parcel locker selection, where applicable
Tracking number
Delivery status

Skin quiz, kit builder and product preference data

If you use our skin quiz, kit builder, concern pages or product recommendation features, we may collect information you choose to provide, such as:

Skin type
Skin concerns
Routine preferences
Product preferences
Budget or routine level
Products added to your kit or wishlist

Our skin quiz and skincare recommendations are for general cosmetic guidance only. They are not medical advice, diagnosis or treatment. Please do not provide medical information, allergy history, diagnosis information or other health data unless we specifically ask for it and you choose to provide it.

If you voluntarily provide information that may be considered sensitive, such as allergy-related or health-related information, we will use it only to respond to your request, avoid unsuitable recommendations where possible, or provide customer support.

Technical and usage data

IP address
Browser type
Device type
Pages visited
Products viewed
Cart activity
Cookie preferences
Security logs

Communication data

Messages you send to us
Customer support requests
Email replies
Product reviews or feedback

3. How we collect personal data

We collect personal data when you:

Visit our website
Create an account
Place an order
Add products to your cart
Use the skin quiz or kit builder
Subscribe to our newsletter or marketing emails
Contact customer support
Leave a review
Choose a delivery option or service point
Interact with cookies, analytics or advertising tools

4. Why we use your personal data

We process personal data for the following purposes:

Purpose	Examples	Legal basis
To process and deliver orders	Checkout, payment confirmation, shipping, returns, refunds	Performance of a contract
To manage customer accounts	Account login, order history, saved addresses	Performance of a contract / legitimate interest
To provide customer support	Responding to questions, complaints and order issues	Contract / legitimate interest
To provide skincare recommendations	Skin quiz, concern pages, kit builder, product suggestions	Consent / legitimate interest
To send marketing messages	Newsletter, offers, product launches, abandoned cart emails where enabled	Consent / legitimate interest where legally allowed
To improve our website	Analytics, performance monitoring, usability improvements	Consent for non-essential cookies / legitimate interest for essential analytics where allowed
To secure our store	Fraud prevention, spam prevention, login protection, security logs	Legitimate interest
To comply with legal obligations	Accounting, tax records, legal claims, authority requests	Legal obligation

5. Payments

When you place an order, your payment is processed by our payment provider. We may receive limited payment-related information such as payment status, transaction reference, payment method type and fraud-screening status.

We do not intentionally store complete card details on our website.

Payment providers may process your personal data according to their own privacy policies. Please review the privacy policy of the payment method you choose at checkout.

6. Shipping and delivery

We use shipping partners, including PostNord, to deliver orders and provide delivery estimates, service point selection, parcel locker selection, tracking and shipment updates.

To deliver your order, we may share your name, address, phone number, email address, order details, parcel details and selected delivery option with our shipping providers.

7. Cookies and tracking technologies

Our website uses cookies and similar technologies to operate the store, remember cart contents, manage checkout, improve performance, measure traffic, and support marketing where enabled.

Some cookies are essential for the website to work, such as cart, checkout, login and security cookies. Other cookies, such as analytics, marketing and advertising cookies, are used only where legally permitted and, where required, after you give consent.

You can manage or withdraw your cookie preferences through our cookie banner or cookie settings link, where available. You can also control cookies through your browser settings, but disabling essential cookies may affect store functionality.

8. Marketing communications

If you subscribe to our newsletter or marketing messages, we may use your email address to send product updates, offers, skincare content and store news.

You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us at info@goodsalla.com.

We do not sell your personal data.

9. Product reviews and user content

If you leave a product review, your review, display name and rating may be visible publicly on the website. Please do not include personal, medical or sensitive information in product reviews.

We may moderate, remove or refuse reviews that contain unsafe claims, private information, offensive content, spam or misleading information.

10. Who we share personal data with

We may share personal data with trusted third parties where necessary to operate our store, fulfil orders, provide services, comply with the law or protect our business.

These may include:

Website hosting providers
WooCommerce, WordPress and related technical service providers
Payment processors
Shipping providers, including PostNord
Email and customer support providers
Analytics providers
Marketing and advertising platforms, where enabled
Security and fraud prevention providers
Accounting, tax, legal and professional advisers
Public authorities where required by law

We require service providers to handle personal data securely and only for the agreed purpose.

11. International transfers

Where possible, we process personal data within the EU/EEA. Some service providers may process data outside the EU/EEA.

If personal data is transferred outside the EU/EEA, we will use appropriate safeguards where required, such as standard contractual clauses, adequacy decisions or other lawful transfer mechanisms.

12. How long we keep personal data

We keep personal data only for as long as needed for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Order and invoice records: normally kept for up to 7 years where required for accounting and tax purposes.
Customer account data: kept while your account remains active or until you request deletion, unless we must keep certain data for legal reasons.
Customer support messages: kept as long as needed to handle your request and maintain business records.
Marketing data: kept until you unsubscribe or withdraw consent.
Cookie consent records: kept as needed to document your preferences.
Security logs: kept for a limited period unless needed to investigate fraud, abuse or security incidents.
Skin quiz and kit builder data: kept only as long as needed to provide recommendations, improve your shopping experience or maintain your account preferences, unless you ask us to delete it earlier.

13. How we protect your personal data

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, encrypted connections, security monitoring, limited admin access, backups, plugin updates and secure hosting practices.

No website or online service is completely secure, but we work to keep your data protected and reduce risk.

14. Your privacy rights

Depending on the situation, you may have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete data
Request deletion of your personal data
Request restriction of processing
Object to certain processing
Withdraw consent at any time where processing is based on consent
Request data portability where applicable
Object to direct marketing at any time
Lodge a complaint with a supervisory authority

To exercise your rights, contact us at info@goodsalla.com. We may need to verify your identity before responding to your request.

15. Complaints

If you are not satisfied with how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with your local data protection authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, IMY.

16. Children’s privacy

Our website is intended for adults and customers who are legally able to place online orders. We do not knowingly collect personal data from children for marketing purposes.

If you believe a child has provided personal data to us without appropriate permission, please contact us and we will review the information.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our store, legal requirements, service providers or data practices.

The latest version will always be published on this page with the updated date shown at the top.

18. Contact us

For privacy questions, data requests or complaints, contact:

GoodSalla
Email: info@goodsalla.com
Address: ÅRHUSGATAN 61 164 45 KISTA, Sweden