Privacy Policy

Below you can read the complete Privacy Policy from Woolnut AB – Revised September 2022.

This Privacy Policy describes the policies and procedures of Woolnut AB (“Woolnut”, “we”, “our” or “us”) on the collection, use and disclosure of your information when using (the “Website”).

This privacy policy falls under the General Data Protection Regulation (GDPR).

What personal information do we collect?

When you purchase something from our webshop at, as part of the buying and selling process, we collect the personal information you give us. This data includes:

  • Name
  • Address
  • Phone number
  • E-mail
  • Shipping tracking number

When you browse our website, we also collect your internet protocol (IP) address in order to provide us with information that helps us to improve your user experience on our site. This information helps us to learn about your browser and operating system for example. Read more about our use of cookies and how you can handle cookies in our cookie policy.

With your permission, we also collect your e-mail if you choose to subscribe to our newsletter. You can cancel the subscription by yourself at any time. Read more about our direct marketing further down.

Why we collect this data

We collect the above mentioned personal data in order for us to process orders through our webshop and/or to send e-mails in the form of a newsletter with campaigns or information on new products. We need your name, address, phone number and e-mail in order for us to ship your purchased product and notify you on receipt, delivery and such.

Third party access to your data

We never sell your personal information to any third party. The only third parties that use, collect and/or store your personal data does so to the extent that is necessary to allow them to perform the services they provide to us. These third parties have their own privacy policies and terms of use that you find on their webpages. Third parties that use, collect and/or store your personal data when completing a purchase through include:

  • WordPress (e-commerce platform) – Read WordPress privacy policy here.
  • WooCommerce (e-commerce plugin for WordPress) – Read WooCommerce privacy policy here.
  • Mailpoet (newsletter plugin for WordPress) – Read Mailpoet privacy policy here.
  • DHL – Read DHL privacy policy here.
  • FedEx – Read FedEx privacy policy here.
  • Boomerang Distribution OÜ (logistics partner) – Read more here.
  • Ongoing Warehouse AB (logistics partner) – Read more here.
  • Grant Thornton Sweden AB (accounting firm) – Read more here.

Your payment information

When completing a transaction, your payment information is needed such as credit and debit card information or your PayPal payment information. This payment information is not collected or stored by us, but instead by the following third party companies depending on your choice of payment. These have their own privacy policies as shown below.

  • Stripe (payment provider) – Read Stripe’s privacy policy here.
  • PayPal (payment provider) – Read PayPal’s privacy policy here.

How we secure your data

To protect your personal information, we take precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you complete a purchase and provide us with your payment information, the information is encrypted using SSL AES-256.


Cookies are small text files that are stored on your computer when browsing certain websites. Cookies are used on in order for us to improve the user experience throughout the website. You are asked permission to use these cookies the first time you visit our website. Read more about cookies in our cookie policy.

Direct Marketing

We send newsletters and promotional content to our users who have actively chosen this and supplied us with an e-mail address. We only contact people who have double opted-in to receive our newsletters and provide unsubscribe links at any communication we send. Our direct marketing database is managed by Mailpoet. Find out how Mailpoet protects your personal information and is GDPR compliant here. You can always contact us if you want us to remove your e-mail directly and permanently.

We will never contact you with news or other non-order related information or messages unless you choose to let us do so through our newsletter.

Contact Us

If you have any concerns regarding the storage of your personal information or want your information to be permanently deleted, please contact us here.