Privacy policy – Stockmood

Updated 11 October 2026. Applies to Stockmood’s website and newsletter functionality.

Confirmation emails are enabled. A newsletter sign-up remains pending until you confirm your email address using the link in the email. Campaign sending is blocked and requires separate approval.

Who is responsible for your data?

Stockmood is operated by Nicolelee Sweden AB, the data controller. Contact kontakt@stockmood.se, 070-392 77 66, or Flyginfarten 4, 177 38 Järfälla, Sweden. This policy does not cover other companies’ records or other processing in the physical store.

We process the email address you provide, your chosen language, sign-up location, sign-up and confirmation times, and subscription status. The purposes are to manage your subscription, document consent and, once sending is expressly enabled, send Stockmood’s news and offers. The legal basis is your consent. Subscription is voluntary. Confirmation links expire after 48 hours. We do not track email opens or collect click statistics.

You can withdraw consent through an email’s unsubscribe link or by contacting us. Withdrawal does not affect the lawfulness of earlier processing.

Suppression and security

Unsubscribed or blocked addresses are retained with date, source and reason to prevent further unwanted emails. Consent evidence and delivery history may be needed to handle objections and show that unsubscribes are respected. The legal basis is our legitimate interest in secure operation and respecting unsubscribes. The sign-up function uses a temporary hashed IP-based counter, expiring after 15 minutes, to limit abuse.

Retention

Active subscriptions are kept until ended. Unconfirmed sign-ups have a 30-day retention threshold and are deleted at the next scheduled cleanup. Cleanup normally runs hourly; the host calls the website’s scheduler every 15 minutes. Outages or larger queues may delay execution.

Suppression records, consent evidence and delivery history are reviewed annually. Data no longer needed is deleted or anonymised after assessment. Suppressions are not automatically removed while still needed to prevent unwanted emails. Backups may contain older data until overwritten; retention and suppressions must therefore be reapplied after a restore.

Providers and administrative access

The website is hosted by Websupport. It processes technical connection data, such as IP address and time, plus logs and backups for operation and security. Its public description gives 7 days to 12 months for logs and backups depending on the service; this is a general range, not a verified exact duration for every log in this account. See Websupport’s retention description and processing terms.

Authorised administrators use WordPress. When assistance with website administration is requested, data needed for the task may be processed by the administrator’s AI client, here OpenAI/ChatGPT. The AI client’s own terms and privacy settings govern data it receives. Administrative reads should be limited to what is needed for the task. Contact us for information about access and applicable safeguards.

Stockmood uses Brevo for confirmation emails and, after separate approval, newsletters. During delivery, Brevo processes recipient email addresses, sender details, message content and technical delivery events on our instructions. Open tracking and click statistics are disabled. Brevo may also receive aggregate DMARC reports about authentication of email from stockmood.se; these concern domain email security and are separate from recipients’ opens and clicks. See Brevo’s terms, including its Data Processing Agreement, and data storage information.

Cookies and local storage

The newsletter popup uses no cookies or local storage. It appears at most once per page view, after 30 seconds or 60% scrolling. The page does not remember popup displays between visits. No separate cookie choice is required for this function. The popup does not appear on the page immediately after a pending sign-up. Obsolete popup data from an earlier version is removed when the page runs.

WordPress uses necessary sign-in cookies for administrators. Newsletter consent is given separately in the form, and subscriptions are activated only after confirmation. This function uses no third-party, advertising or analytics cookies.

Your rights

You can request access, rectification, erasure and, where applicable, restriction or data portability. You can object to processing based on legitimate interests and to direct marketing. Contact us to exercise your rights or ask about our assessment and providers. You can complain to the Swedish Authority for Privacy Protection, IMY. This newsletter function does not make automated decisions with legal or similarly significant effects.

Updates

We update this policy when processing changes. This version describes Stockmood’s production website and newsletter functionality. Confirmation emails are enabled. Campaign sending requires separate approval. Changes to providers, administrative access or retention should be followed by a policy review.