Privacy Policy

Last updated: June 10, 2026

1. Introduction

This Privacy Policy explains how Urban Growers, a brand operated by Viprosper Group AB ("we", "us", "our"), collects, uses, stores, shares, and protects your personal data when you visit our website, create an account, make a purchase, contact us, or otherwise use our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

By using our website and services, you acknowledge that your personal data will be processed as described in this Privacy Policy.

2. Data Controller

The data controller responsible for the processing of your personal data is:

Viprosper Group AB
Trading Name: Urban Growers
Organization Number: 559442-8137
VAT Number: SE559442813701
Email: info@urbangrowers.se

If you have any questions regarding this Privacy Policy or how we process your personal data, please contact us using the details above.

3. Personal Data We Collect

Depending on how you use our services, we may collect the following categories of personal data:

Contact Information

• Name

• Billing address

• Shipping address

• Email address

• Telephone number

Order and Transaction Information

• Order number

• Purchased products

• Payment status

• Delivery information

• Returns and refunds

• Transaction history

Account Information

If you create a customer account, we may collect:

• Username

• Login credentials

• Account settings

• Purchase history

Communications

Information you provide when contacting us through:

• Email

• Contact forms

• Customer support requests

• Product reviews

• Feedback

Technical Information

When you use our website, we may automatically collect:

• IP address

• Browser type

• Device information

• Operating system

• Website usage information

• Pages visited

• Referring website

• Cookie identifiers

4. Sources of Personal Data

We collect personal data:

• Directly from you when you make a purchase, create an account, subscribe to communications, contact us, or otherwise interact with our services.

• Automatically through cookies and similar technologies when you use our website.

• From service providers that assist us in operating our business.

• From business partners, advertising partners, analytics providers, and social media platforms where permitted by law.

5. How We Use Your Personal Data

We use personal data for the following purposes:

Order Management

To:

• Process and fulfill orders

• Deliver products

• Process payments

• Manage returns and refunds

• Communicate regarding purchases and deliveries

Customer Service

To:

• Respond to inquiries

• Provide customer support

• Handle complaints

• Improve the customer experience

Marketing

Where permitted by law or with your consent, we may use personal data to:

• Send newsletters

• Inform you about offers and promotions

• Inform you about products, services, and events

You may unsubscribe from marketing communications at any time.

Security and Fraud Prevention

To:

• Protect our customers and business

• Prevent and detect fraud

• Investigate suspicious activity

• Maintain website and service security

Analytics and Improvement

To:

• Understand how the website is used

• Improve functionality

• Improve the user experience

• Develop products and services

• Measure the effectiveness of marketing activities

Legal Obligations

To comply with applicable laws, regulations, and legal obligations, and to protect our rights.

6. Legal Bases for Processing

We process personal data on one or more of the following legal grounds:

Performance of a Contract

When processing is necessary to provide products or services that you have requested or purchased.

Legal Obligation

When processing is required by law, including accounting, tax, or consumer protection legislation.

Legitimate Interests

When processing is necessary for our legitimate business interests, such as improving our services, protecting our business, and preventing fraud.

Consent

When the law requires consent, such as for certain cookies or marketing communications.

You may withdraw your consent at any time.

7. Right of Withdrawal, Returns, and Refunds

If you exercise your statutory right of withdrawal, request a return, or contact us regarding the cancellation of a purchase, we may process:

• Name

• Email address

• Order number

• Information provided in your request

We use this information to:

• Identify your order

• Confirm receipt of your request

• Process returns and refunds

• Fulfill our obligations under consumer protection laws

The legal basis for this processing is the performance of a contract and compliance with legal obligations.

8. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Ensure the website functions properly

• Remember your preferences

• Analyze traffic and user behavior

• Measure marketing effectiveness

• Personalize content and advertisements

Cookies may include:

• Necessary cookies

• Preference cookies

• Analytics cookies

• Marketing cookies

Where required by law, we obtain your consent before placing non-essential cookies.

You may change or withdraw your consent at any time through our cookie settings.

For more information about Shopify cookies:

https://www.shopify.com/legal/cookies

9. Sharing Personal Data

We may share personal data with trusted third parties where necessary to operate our business.

This may include:

• E-commerce platforms such as Shopify

• Payment providers

• Shipping and logistics providers

• Marketing and analytics providers such as Google and Meta

• Customer service and business system providers

• Professional advisors and public authorities where required by law

We do not sell your personal data.

10. Shopify

Our online store is powered by Shopify Inc. Shopify provides the e-commerce platform that enables us to sell our products and services online.

Shopify may process certain personal data to provide website functionality, payment processing, fraud prevention, analytics, security, and related services.

For more information about Shopify’s privacy practices:

https://privacy.shopify.com

11. International Transfers

Some service providers may process personal data outside the European Economic Area (EEA) or the United Kingdom.

Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• European Commission Standard Contractual Clauses (SCCs)

• Adequacy decisions

• Other legally approved transfer mechanisms

12. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Examples include:

• Accounting and tax records: up to 7 years

• Customer service matters: up to 3 years

• Marketing consent records: until consent is withdrawn

• Customer accounts: while the account remains active or as reasonably necessary thereafter

13. Children's Privacy

Our services are not intended for children.

We do not knowingly collect personal data from individuals below the minimum age required under applicable law.

14. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction.

However, no method of transmission or storage is completely secure, and we therefore cannot guarantee absolute security.

15. Third-Party Links

Our website may contain links to third-party websites, applications, or services.

We are not responsible for the privacy practices, content, or security of such third parties.

16. Your Rights

Under applicable law, you may have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of personal data

• Request restriction of processing

• Object to processing

• Withdraw consent

• Request data portability

• Lodge a complaint with a supervisory authority

17. Complaints

If you believe that we process your personal data in violation of applicable law, you have the right to lodge a complaint with the data protection authority in the country where you reside, work, or where the alleged infringement occurred.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, or services.

The latest version will always be available on our website, and the "Last updated" date indicates when changes were made.

19. Contact

If you have any questions regarding this Privacy Policy, our privacy practices, or your personal data, please contact:

Email: info@urbangrowers.se

This Privacy Policy applies to Urban Growers and all websites, stores, and services operated by Viprosper Group AB under the Urban Growers brand.