Privacy Policy

1. Data controller

Jonatan Wedde, company no. 935 534 216, Drammensveien 70, 0271 Oslo, Norway, is the data controller for personal data processed in connection with this store. Contact: jonatanwedde@gmail.com.

2. What we collect

  • Order data: name, address, email, phone, order history.
  • Payment data: handled by our payment providers (e.g. Shopify Payments, PayPal); we do not store full card numbers.
  • Technical/tracking data: IP address, device, browser and on-site behaviour via cookies and the Meta pixel (see section 5).

3. Purposes & legal bases

  • Fulfilling orders and delivery (contract, GDPR Art. 6(1)(b)).
  • Customer service and complaints (contract / legal obligation).
  • Marketing and measurement via the Meta pixel (consent, Art. 6(1)(a)).
  • Bookkeeping (legal obligation).

4. Processors & international transfers

We use providers such as Shopify (store/payments), Gelato (production/shipping), PayPal (payments), Meta (ads/pixel) and an accounting tool. Data processing agreements are in place. Some transfers (e.g. to Meta) may involve third countries; appropriate safeguards (SCCs / adequacy) are used.

5. Cookies & the Meta pixel

This store uses cookies, including the Meta pixel, for measurement and marketing. Tracking/marketing cookies are set only after your consent via the cookie banner. You can withdraw consent at any time.

6. AI customer service (EU AI Act + GDPR Art. 22)

Customer enquiries are partly answered automatically by an AI assistant. You are always informed when you are interacting with AI. Decisions with legal or similarly significant effects are not made solely by automated means — you have the right to human review and can ask to speak to a human at any time.

7. Retention

We keep data only as long as necessary for the purpose. Accounting records are kept as required by law (generally 5 years).

8. Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object. Contact jonatanwedde@gmail.com. You may also lodge a complaint with your local data protection authority.