Skip to Content

Privacy policy

Last updated: 28 October 2026

JB Nordic AB (reg. no. 556657-0338, Värmdövägen 253, SE-131 42 Nacka, Sweden) is the controller of the personal data described here. This policy explains what data we collect, why, how long we keep it and what rights you have. Send any questions to info@jbnordic.se.

Our customers are mainly dental laboratories and clinics, so most of the data we handle concerns contact persons at companies and organisations.

What data we collect

  • Contact details – name, company, role, email, phone, billing and delivery address.
  • Customer and order data – agreements, quotations, orders, deliveries, invoices, payments and service or support cases.
  • Web shop account – login details, cart and order history.
  • Communication – emails, chat messages, forms, meeting bookings and notes from calls and trade fairs.
  • Technical information – IP address, browser and device, needed for the website to work and stay secure.

We do not need personal identity numbers or sensitive personal data, and ask you not to send such data to us.

Why we process the data and on what legal basis

  • Delivering what you ordered – handling quotations, orders, deliveries, invoicing, warranty and support. Basis: contract.
  • Meeting legal requirements – for example accounting and tax. Basis: legal obligation.
  • Customer relations and sales – answering questions, following up contacts from trade fairs and meetings, and informing existing customers about similar products and services. Basis: legitimate interest.
  • Cart reminder – if you have added products to your cart and entered your email without completing the purchase, we may send a reminder. Basis: legitimate interest. You can opt out at any time.
  • Newsletter – when you sign up. Basis: consent. You can unsubscribe via the link in every mailing.
  • Security and statistics – protecting the website against abuse and understanding how it is used, without tracking individual visitors. Basis: legitimate interest.

You can object at any time to processing based on legitimate interest, for example mailings to existing customers.

Who we share the data with

We never sell personal data. We only share it with suppliers who need it for us to run our business. They process the data on our behalf under data processing agreements, or as independent controllers where that follows from their role.

  • Business system and website – Odoo, operated and supported by our partner Implefy. The data is stored in Sweden.
  • Email and calendar – Microsoft 365.
  • Newsletter – Mailchimp (Intuit, USA).
  • Card payments – Stripe. We never see your full card details.
  • Spam protection in forms – Google reCAPTCHA.
  • Visitor statistics – Plausible Analytics (EU), without cookies and without storing IP addresses.
  • Warehouse and shipping – our logistics partner and the carriers delivering your order.
  • Manufacturers and service partners – when needed for installation, warranty, service or training.
  • Financing and leasing – if you apply for it, to the finance company you choose.
  • Accounting, audit and authorities – when required by law.

Transfers outside the EU/EEA

Some suppliers, for example Mailchimp, Google and Stripe, may process data in the USA. Such transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep the data

  • Customer, order and invoice data: for as long as the customer relationship lasts, then seven years as required by Swedish accounting law.
  • Contacts and enquiries that did not lead to a purchase: up to 24 months after the last contact.
  • Abandoned carts: up to 90 days.
  • Newsletter: until you unsubscribe.
  • Chat and support cases: up to 24 months.

Cookies

We only use cookies needed for the website to work, for example login, language choice, cart and chat. We do not use cookies for advertising or tracking. The visitor statistics from Plausible work without cookies. On pages with forms, Google reCAPTCHA is loaded, which may set its own cookies to tell humans from bots.

Your rights

You have the right to request access to, correction or erasure of your data, to restrict processing, to object to processing based on legitimate interest, to receive data you have provided in a machine-readable format, and to withdraw consent at any time. Data we are required to keep by law, such as accounting records, is erased only when the retention period has expired.

Contact info@jbnordic.se and we will reply within one month. If you are unhappy with how we handle your data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Changes

We update this policy when our processing changes. The latest version is always available on this page.

WebshopSearch product