privacy policy

Privacy Policy

This website collects personal data (personal information) from its users. In this privacy policy, you will find information about the data we collect, the basis on which we collect it (legal basis for processing), how the data is used, and your rights regarding your personal information.

Data Controller and Processor

Merch Mate AS
Org. no. 931 730 606
Kongeveien 47
1412 Sofiemyr
NORWAY

Email: post@merchmate.no

Changes

This privacy policy was last updated and modified on 26 May 2023.

Personal Information

Collected Information upon Purchase

When you purchase products from this website, personal information provided by you—such as your name, address, telephone number, email, and payment information—is collected and processed so we can manage your order, deliver the products you have ordered, handle returns, and allow you to manage your account on our website if you have created one.

We may also process personal information to notify you when a product is back in stock, handle feedback you have provided regarding customer service interactions, or contact you if there are issues delivering your ordered goods. We may also analyze purchases made by various customer groups to improve our offerings.

Such information is processed because it is necessary to fulfill our agreement with you and because we both have an interest in effective communication to provide you and other customers with the best possible service.

Cookies

This website uses cookies to retrieve, collect, and analyze user data, traffic, and actions taken on this website. We do this to use statistical data to understand how our users navigate the site and thus enhance the user experience. You can read more about this in our Cookie Policy.

Marketing

If you have consented, we may process your email address and telephone number to send you newsletters and marketing specifically tailored to you. Offers may be customized based on information we hold about your past purchases and history with us. We may also use information from other sources for demographic data such as gender, date of birth, residence, and interests (profiling). You can withdraw your consent or object to such profiling at any time as described below.

Sharing Personal Information

Your personal information may be shared with our partners, such as shipping providers, system providers, IT and hosting service providers, marketing services, accounting and auditing services, and payment solutions.

Beyond this, we will not share your personal information with third parties unless required by law, authority demands, or if we have your consent.

Storage Location

As a general rule, personal information is stored on servers geographically located within the EU/EEA area. In certain cases, it may be necessary to transfer your personal information to servers geographically located outside the EU/EEA. In all cases, we ensure that the transfer of personal information is subject to the same legal requirements applicable within the EU/EEA. This can include privacy clauses approved by the EU or covered by the EU-US Privacy Shield. Copies of these clauses are linked below. All our data processors are subject to strict confidentiality obligations regarding your personal information.

Retention Period

Personal information will be processed and stored for as long as necessary for the purpose for which it was collected.

If you have created an account, information associated with your profile on “My Page” will be deleted when your account is deleted. Information about the account contact and billing details is stored for five years as required by applicable accounting legislation. After five years, we delete or anonymize information associated with a purchase unless you have created an account on My Page and chosen to save your purchase history there.

We may retain personal information longer if you have provided consent for this but will always delete it when consent is withdrawn unless we are required to retain personal information longer due to legal or regulatory requirements.

Your rights to access, deletion, rectification, and portability cannot be exercised once the retention period has expired.

Your Rights

Upon request, you have the right to access your personal information we store or process at any time. You also have the right to correct any inaccuracies in your personal information and the right to data portability in a readable format. Under certain circumstances, you may request us to limit the processing of your data or request deletion of your personal information. You may withdraw your consent to our processing of your personal data at any time without affecting the lawfulness of processing based on consent before withdrawal.

You may object to our processing of your personal data, and by law, you have the right to lodge a complaint regarding our processing of your personal data. The supervisory authority is Datatilsynet, responsible for overseeing data protection legislation in Norway.

If you have complaints about our processing of your personal information, please contact us. Contact information is provided at the top of this privacy policy.

Changes

We reserve the right to make changes to this Privacy Policy at any time. Therefore, we recommend you check this page regularly. The date of the last modification is listed at the bottom of this page.

If changes impact processing activities performed based on the user’s consent, we will obtain new consent from you.