Privacy Policy for noseywork.com
Last updated: 6 September 2026
1. Who we are
This online shop is run by:
CHRISTER HAGENES OPDAHL Organisation number: 936 703 941 Email: support@noseywork.no Website: https://noseywork.com
We take your privacy seriously and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Norwegian data protection law.
2. What personal data do we collect?
We collect the following information when you shop with us or create an account:
Information you give us directly:
Contact details: First name, last name, email address, phone number
Delivery address: Street address, postal code, city, country
Billing address: If different from the delivery address
Order history: Information about products you have bought, order date, order status
Information collected automatically:
Technical information: IP address, browser type, operating system, device information
Usage data: Which pages you visit, how long you stay, clicks and navigation patterns
Cookies: See the separate section on cookies below
Payment information:
We do not store card details or payment information on our servers. All payment information is handled by our payment provider.
3. Why do we collect personal data?
We use your personal data for the following purposes:
Carrying out the sale (performance of a contract):
Processing and delivering your order
Sending order confirmations and delivery information
Handling payment
Communicating with you about your order
Customer service (legitimate interest):
Answering your enquiries
Handling complaints and returns
Providing customer support
Legal obligations (legal obligation):
Meeting bookkeeping requirements under the Norwegian Accounting Act (5 years' retention)
Meeting tax obligations
Complying with consumer protection law
Improving the service (legitimate interest):
Analysing user behaviour to improve the website
Understanding how customers use our services
Developing new products and services
4. Who do we share your data with?
We only share personal data with providers we need to run the shop, and only what they need:
Payment
- Stripe processes card, Klarna, Apple Pay, and Google Pay payments for us. We never see your card number. Stripe is PCI DSS certified.
Spam protection
- Cloudflare Turnstile runs an invisible check on the contact form to tell humans from bots, without captcha images. Cloudflare may set cookies for this, see section 8.
Shipping
- Our carrier (Bring) receives your postal code and the weight of your basket already at checkout, to calculate the shipping price before you order. Your full address and phone number are sent only after the order is paid, for the delivery itself.
Operations
Vercel runs the website. Neon stores the database with orders and customer information, on servers in the EU.
Resend sends order confirmations and other emails from us to you.
Error tracking
- We use Sentry to catch technical errors on the website, both in your browser and on our server. This can in some cases include your IP address and the address of the page you were on when the error occurred. This information is only used to fix errors, never for marketing.
Visitor statistics
- We use Umami, which does not set cookies and does not store your IP address. The statistics are anonymous and cannot be linked to you.
We never sell personal data, and we never use it for marketing without your consent.
5. How long do we keep your data?
We only keep personal data for as long as necessary. The shop has no customer accounts, only guest checkout: we don't store more about you than the order itself requires.
Order data and invoices: A minimum of 5 years after purchase (required by the Norwegian Accounting Act)
Technical logs and analytics: A maximum of 14 months
Pending/failed orders: Automatically deleted after 1 month
Cancelled orders: Anonymised after 1 month
Once the retention period expires, the data is permanently anonymised or deleted.
6. Your rights under the GDPR
You have the following rights regarding your personal data:
Right of access (Art. 15 GDPR):
You can request a copy of all personal data we hold about you.
Right to rectification (Art. 16 GDPR):
You can ask us to correct inaccurate or outdated information.
Right to erasure (Art. 17 GDPR):
You can ask us to delete your personal data, unless we have a legal obligation to retain it (e.g. the Accounting Act).
Right to restriction of processing (Art. 18 GDPR):
You can ask us to restrict the processing of your data in certain circumstances.
Right to data portability (Art. 20 GDPR):
You can ask to receive your personal data in a machine-readable format.
Right to object (Art. 21 GDPR):
You can object to our processing of your data, in particular for marketing purposes.
Right to withdraw consent (Art. 7 GDPR):
Where processing is based on consent, you can withdraw it at any time.
How to exercise your rights:
Send an email to support@noseywork.no
We will respond to your request within 30 days
Right to complain:
If you believe we are not complying with data protection law, you have the right to complain to the Norwegian Data Protection Authority (Datatilsynet):
Website: https://www.datatilsynet.no
Email: postkasse@datatilsynet.no
Phone: +47 22 39 69 00
7. Security
We take the security of your personal data seriously and have implemented technical and organisational measures:
SSL/TLS encryption: All data transfer is encrypted (HTTPS)
Secure hosting: Servers in the EU with high security standards
Access control: Only authorised personnel have access to personal data
Regular backups: To prevent data loss
Up-to-date software: We keep all systems updated
No method of transmission over the internet or electronic storage is 100% secure. We therefore cannot guarantee absolute security, but we do our best to protect your data.
8. Cookies
The shop uses a small number of cookies, all necessary for the shop to work, none for analytics, advertising, or tracking:
handlekurv (shopping cart) ā remembers what you have added to your cart. Signed, so it cannot be altered from outside. Deleted after 14 days, or when you complete a purchase.
betaling_pagaende (payment pending) ā remembers which order you just paid for, for one hour, so the order confirmation page knows to clear your cart. Opening an old order confirmation from your email weeks later does nothing.
rabattkode (discount code) ā remembers the discount code you entered at checkout, for 14 days. The code is looked up and validated again every time, regardless of what the cookie says.
PARAGLIDE_LOCALE ā remembers whether you chose Norwegian or English, for a little over a year.
None of these are shared with or read by anyone but us. That is also why we have no cookie banner.
Checkout with Stripe and the spam check from Cloudflare Turnstile (see section 4) may set their own cookies in your browser while you're in checkout or on the contact page. Both are for fraud prevention and security, not advertising, and are governed by Stripe's and Cloudflare's own privacy policies.
If you log in as an administrator, a login cookie is set in addition. It only applies to the shop's own users.
9. Transfer of data outside the EU/EEA
The database and website are located in the EU. Our payment provider and email service may process some data in the US under the EU-US Data Privacy Framework or the EU's standard contractual clauses. We have data processing agreements with all providers that process personal data on our behalf.
10. Children and privacy
Our website is not directed at children under 13. We do not knowingly collect personal data from children. If you are a parent or guardian and discover that your child has given us personal data, please contact us at support@noseywork.no, and we will delete the information.
11. Links to other websites
Our website may contain links to other websites that we do not operate. We are not responsible for the privacy practices of these third-party websites. We encourage you to read the privacy policy of every website you visit.
12. Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.
For material changes, we will:
Update the "last updated" date at the top
Notify you by email (if you have an account)
Display a notice on the website
We encourage you to review this privacy policy regularly.
13. Contact us
If you have questions about this privacy policy or how we process your personal data, you can contact us:
Email: support@noseywork.no Website: https://noseywork.com Organisation number: 936 703 941
We will respond to your enquiries as quickly as possible, and no later than within 30 days.
Data controller: CHRISTER HAGENES OPDAHL Org. no.: 936 703 941 Legal basis: GDPR Art. 6(1)(b) ā Performance of a contract, Art. 6(1)(c) ā Legal obligation (accounting), Art. 6(1)(f) ā Legitimate interest (customer service, analytics and improvement)