Privacy policy

 

Effective Date / Last Updated: 25 February 2026

 

This Privacy Notice (the “Notice”) describes how Hultafors Group North America, Inc. including Hults Bruk and its other subsidiaries and affiliates as well as service providers, assigns, or other third parties acting on our behalf (the “Company”), collect, use, disclose, and retain personal information about you when you visit and interact with us, including on our website us.hultsbruk.com (the “Site”), make purchases, sign up for the newsletter, or contact us. It applies to residents of all US states and incorporates required disclosures under federal law and applicable state privacy laws. By interacting with us, you consent to this privacy practices described in this Notice.

 

This Notice does not apply to job applicants or employees, which have separate disclosures where required.

 

Notice at Collection: We collect categories of personal information as described in the “Categories of Personal Information that the Company Collects” section below. We use these categories of personal information for the purposes described in the “Purposes for Collecting and Using Personal Information” section below.  We sell or share these categories of personal information as described in the “Sale or Sharing of Personal Information” section below.  We retain these categories of personal information as described in the “Retention of Personal Information” section below.

 

You can download a pdf-version of this Notice here.  

 

1. About Personal Information

Personal information means information that identifies, relates to, or can reasonably be linked to a person or household. This includes names, online identifiers, purchase data, device information, and similar categories. Anonymous or aggregated data is not considered personal information, and we publicly commit to maintain and use the information in deidentified form and not to attempt to reidentify the information. We respect privacy and maintain administrative, technical, and organizational measures to protect personal information.

 

2. Categories of Personal Information that the Company Collects

• Identifiers: Name, postal address, email, phone number, IP address, account identifiers, cookie IDs, device IDs.

• Customer Records Information: Billing and shipping address, order information, communications with customer support. 

• Commercial Information: Products viewed, added to cart, purchased, returned, or reviewed. Coupon and discount usage.

• Internet or Network Activity: Device type, operating system, browser version, pages visited, time on page, clicks, scroll actions, cart events, checkout attempts, referral sources, analytics identifiers, marketing tag events (Google Ads, Meta Pixel, Microsoft Ads), consent preferences.

• Geolocation Data: Approximate location based on IP address. 

• Inferences: Preferences, purchase likelihood, product interest categories, audience segments based on browsing or interaction.

• Sensitive Information: The Company does not collect or process sensitive personal information as defined under US state privacy laws. When contacting us on your own initiative, please only provide us with personal data that is necessary to handle your request.

 

3. Sources of Personal Information

The Company collects personal information from the following sources:

• Directly from you when you make a purchase, create an account, contact us, or request support. 

• Automatically through cookies, analytics scripts, log files, and similar tracking tools.

• Service providers that support e-commerce, payments, advertising, analytics, and logistics.

• Advertising partners that deliver or measure ads on platforms such as Google, Meta, and Microsoft.

• Affiliates within the Company that support US operations.

 

4. Purposes for Collecting and Using Personal Information

The Company uses personal information for the following purposes:

• Purchase Processing and Order Fulfillment: This includes processing orders and payments, providing delivery and return services, communicating order confirmations and subsequent updates, and managing refunds along with all associated customer service interactions.

• Website and Platform Operation: To operate and maintain the website and online store, including ensuring site performance, carrying out debugging and security measures, detecting and preventing fraud, and conducting analytics to improve functionality and the overall user experience.

• Customer Support: To provide customer support, including responding to requests and resolving issues related to orders, deliveries, refunds, or account access.

• Account Creation and Management: To enable and manage registered customer accounts, including pre-filling checkout information, providing access to order history, and synchronizing sessions across devices.

• Marketing and Advertising: To carry out marketing and promotional activities, including sending newsletters and promotional emails (if subscribed), conducting targeted advertising and audience matching, measuring campaign performance, sending cart abandonment reminders where permitted, and personalizing marketing communications.

• Legal and Compliance Requirements: To meet legal, tax, accounting, and compliance obligations, including maintaining transaction records, responding to legal and regulatory requests, and protecting the rights, safety, and security of users and systems.

We do not use or disclose sensitive personal information for purposes other than those described in this Notice or as permitted by applicable law.

 

5. Disclosure of Personal Information to Service Providers

We may disclose any of the above categories of personal information as described in this Notice to the following third parties for any of the purposes described in this Notice. Only individuals and entities that require access to personal information to carry out the purposes described in this Notice will be permitted to handle it. This includes relevant marketing, commercial, administrative, financial, compliance, legal, and other operational functions within our group companies, whether located inside or outside the United States.

 

We also rely on external partners and service providers in multiple jurisdictions and may need to disclose personal information to them when necessary. Such recipients may include IT and hosting providers, logistics and fulfilment partners, professional advisers, and advertising or analytics partners.

 

Access to personal information is limited to Company personnel and to advisers, suppliers, service providers, partners, and distributors who require the information to perform their duties, and only to the extent necessary. For instance, our e-commerce staff may access order and payment details, while product teams may access enquiries or complaints regarding our products.

 

Personal information relating to this Site is primarily disclosed to the following categories of service providers acting on our behalf:

 

• E-commerce platform (Shopify)

• Payment processors (Shopify Pay, Paypal) 

• Shipping carriers and fulfilment agents

• Analytics providers (Google Analytics, Shopify Analytics, Microsoft Clarity)

• Marketing service providers and email platforms (Klaviyo, Microsoft Dynamics)

• Advertising platforms (Google, Meta, Microsoft, TikTok)

• Fraud detection tools 

• Technical support and IT service providers

• Professional advisors such as legal or accounting firms

These parties may access personal information only to perform contracted services.

 

We also disclose personal information to independent Data Controllers where required. These include governmental authorities (such as law enforcement or tax authorities), payment service providers and financial institutions for transaction processing, external legal or financial advisers, courts or dispute resolution bodies, potential acquirers of our business or assets, and transportation partners involved in delivering your order. These recipients determine their own purposes and methods for handling personal information, and their respective privacy notices apply.

 

6. Sale or Sharing of Personal Information

The Company does not sell personal information in exchange for monetary compensation or any other valuable consideration.  We do not sell personal information of individuals below 16 years of age.

 

We may share your personal information for cross-context behavioral advertising with advertising platforms, who may receive personal information, including identifiers, internet activity, commercial information, and inferences, for the purpose of delivering targeted advertising and measuring the effectiveness of our marketing efforts.

 

Such disclosures may involve partners including Google Ads, Meta Ads, Microsoft Ads, and TikTok Ads. Where applicable, state laws require the provision of opt-out mechanisms for the sharing of personal information for advertising purposes, we make these options available, as described in Section 9.

 

7. Retention of Personal Information

We retain personal information only for the period necessary to fulfill the business, operational, legal, accounting, or security purposes for which it was collected. Retention periods differ depending on the category of information and are determined by factors such as transactional requirements, customer service and support needs, fraud prevention measures, statutory accounting and tax obligations, and contractual commitments with service providers. Personal information is not kept longer than is required for these purposes.

 

8. Cookies and Tracking Technologies

We use cookies, tags, pixels, and similar tracking technologies for the following purposes:

• Essential site operations

• Analytics and performance

• Marketing measurement

• Advertising and retargeting

• User consent management

 

These technologies may include tools such as Google Analytics, Google Ads Tag, Meta’s Pixel, Microsoft UET, Shopify’s built-in tracking mechanisms, and cookie consent management platforms. You may be able to control how these third-party technologies collect, use, and disclose your personal information by reviewing the privacy practices of each third party. For example, to learn more about Google’s privacy policy, please visit: https://policies.google.com/privacy or to opt out of the collection and processing of such information by Google, you can visit this website: https://tools.google.com/dlpage/gaoptout.

 

These third parties may collect personal information about your online activities over time and across different websites when you use our Site.

 

Users may be able to adjust their cookie preferences at any time through the cookie banner or settings interface provided on the Site.

 

For more information on how we work with cookies, please see our Cookie Policy.

 

9. Consumer Privacy Rights in the United States

Subject to applicable US state privacy laws, individuals whose personal information we process may be able to exercise a number of additional privacy rights. These privacy rights vary by state.

 

Right to access/know

You may be able to request confirmation of whether we process personal information about you and receive a copy of such information in a commonly used electronic format. This may include the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about the consumer. In some states, you may be able to request a list of specific third parties, other than individuals, to whom we have disclosed personal information.

 

Right to correction

You may be able to request that inaccurate personal information be corrected and incomplete information completed.

 

Right to deletion

In certain situations, you may be able to request the deletion of your personal information. This right is subject to legal exceptions and operational limitations.

 

Right to data portability

When processing is based on consent or a contract, you may be able to request to receive the personal information you provided to us in a structured, commonly used, machine-readable format or have it transmitted to another controller where technically feasible.

 

Right to opt out of certain processing

Depending on your state of residence, you may have the right to opt out of:

• targeted advertising

• the sale or sharing of personal information

• profiling in furtherance of decisions that produce legal or similarly significant effects – this may include the right to question the result of the profiling, to be informed of the reason that the profiling resulted in the decision, and, if feasible, be informed of what actions the consumer might have taken to secure a different decision in the future. You may have the right to review the personal information used in the profiling, and if the decision is determined to have been based upon inaccurate personal information, the consumer may have the right to have the personal information corrected and the profiling decision reevaluated based on the corrected personal information.

 

Instructions for exercising these rights are available via the “Do Not Sell or Share My Personal Information” link in the footer on the Site.

 

Right to withdraw consent

Where processing is based on your consent, you may be able to withdraw that consent at any time.

 

Right to non-discrimination / non-retaliation

You will not be treated differently for exercising any rights granted under applicable privacy laws.

 

Right to appeal

If we deny your request, you may be able to appeal our decision by replying to our notification and stating that you wish to appeal. We will re-evaluate the request and notify you of the outcome.

 

Connecticut disclosure

We do not collect, use, or sell your personal information for the purpose of training large language models.

 

How to Exercise Your Rights

If you have questions or wish to exercise your rights, contact the Hultafors Data Protection Officer at dpo@hultaforsgroup.com or submit a request via our webform.

 

You may also reach us at:

Hultafors Group North America, Inc.

6333 W Donges Bay Rd

Mequon, WI 53092

Or via our toll-free number at (888) 953-8357.

 

These rights are subject to statutory limitations. We may need additional information, name, email address, and telephone number, to verify your identity before processing your request. We will match this information against our business records to verify your identity before responding to your request. 

 

Requests will be answered within the timelines required by applicable law, generally within 45 days. Where necessary due to complexity or volume, this period may be extended for an additional 45 days, and we will inform you of the extension and the reason for it. If your request is submitted electronically, we will provide the response electronically unless you request another method.

 

For information regarding cookie and tracking technology preferences, see section 8.

 

11. Opt-out of Targeted Advertising

Individuals may opt out of targeted advertising by:

• Clicking the “Do Not Sell or Share My Personal Information” link on our website.

• Adjusting cookie settings through our cookie banner.

• Enabling Global Privacy Control (GPC) in their browser. We honor browser-based GPC signals where legally required. The Site does not respond to Do Not Track signals.

• Submitting an opt-out request using our contact options.

 

You may also designate an authorized agent to make such requests on your behalf. We may require that the agent verify the agent’s own identity. A parent or legal guardian may exercise these rights on behalf of a child for whom the requestor has legal responsibility.

 

12. Children’s Privacy

Our website is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. We do not have any knowledge of the sale or share of personal information of consumers under 18 years of age. If you believe that personal information has been collected from a minor, please contact us promptly so we can take appropriate action.

 

13. Cross-Border Transfers

The Site is intended for customers located in the United States, and orders can only be placed when a valid US delivery address is provided. If you submit personal information through the Site or our mobile application outside the context of a purchase, you acknowledge that such information will be transferred to and processed in the United States and may also be handled in other countries or jurisdictions at our discretion. Privacy and data protection laws in the United States, or in any other location where we process personal information, may differ from those in your country of residence.

 

Personal information may be transferred to or accessed by the Company’s affiliates outside the United States, including in the European Union.

 

14. Security Measures

The Company uses administrative, technical, and physical measures intended to protect the security of personal information. Employees and service providers are permitted to access personal information only when necessary to perform their job responsibilities or to provide contracted services to the Company. Credit card details are used solely to process payments and are disclosed only to payment processors and financial institutions involved in handling the transaction confidentially.

 

Although we take reasonable steps to safeguard the Site and the information processed through it, we cannot guarantee the security of data transmitted over the internet.

 

15. Changes to This Notice

We may update this Notice when necessary. If there are material changes to this Privacy Notice, we will notify you as required by applicable law. The effective date above reflects the most recent revision. Continued use of the Site or further interaction with us confirms your acceptance of updates.

 

16. Third Party Content

Links to third party websites, content, or embedded videos may appear on the Site. The Company is not responsible for the content, practices, or privacy policies of those third parties, and we have not evaluated their handling of personal information. You may also designate an authorized agent to make such requests on your behalf. We may require that the agent verify the agent’s own identity. A parent or legal guardian may exercise these rights on behalf of a child for whom the requestor has legal responsibility.

 

17. Contact Information

For questions about this Privacy Notice or our data practices, contact:

 

Hultafors Group Data Protection Officer

Email: dpo@hultaforsgroup.com

 

Hultafors Group North America, Inc. is located at, 6333 W Donges Bay Rd, Mequon, WI 53092.