Privacy Policy

1. Introduction

Welcome to Fraxylonrythepir ("we," "our," or "us"). We are committed to protecting your privacy and personal data in compliance with the General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and other applicable Norwegian and EEA data protection rules.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (fraxylonrythepir.world) or purchase our products.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: Fraxylonrythepir
• Address: Lindbergveita 19, 7500 Stjørdal, Norway
• Email: cooperation@fraxylonrythepir.world
• Country: Norway

If your business is registered in the Norwegian Business Register (Foretaksregisteret), you should display your organization number (organisasjonsnummer) on the website and in commercial documents; update this section when the number is available.

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide Directly

• Contact information: Name, email address, phone number (optional)
• Order information: Shipping address, billing information
• Communication data: Messages you send us through our contact form
• Consent records: Your consent preferences for marketing and cookies

3.2 Information Collected Automatically

Basic technical data may be processed by our hosting infrastructure when you load pages. Detailed usage analytics (for example, page analytics tools) apply only if we implement such tools and you have given consent where required; see our Cookie Policy for the current setup.

• Technical data: Such as IP address, browser type, operating system (typically processed when you access the site)
• Usage data: May include pages visited or similar metrics only if analytics are enabled and permitted
• Consent and preference data: Stored locally to remember your cookie choices (see Cookie Policy)

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

4.1 Contract Performance (Art. 6(1)(b) GDPR)

• Processing and fulfilling your orders
• Communicating about your order status
• Processing payments and refunds
• Providing customer support

4.2 Legitimate Interests (Art. 6(1)(f) GDPR)

• Improving our website and services
• Preventing fraud and ensuring security
• Maintaining internal records

4.3 Consent (Art. 6(1)(a) GDPR)

• Sending marketing communications (only with your explicit consent)
• Non-essential cookies or similar technologies, including analytics or advertising tools, when we use them and you have opted in

4.4 Legal Obligations (Art. 6(1)(c) GDPR)

• Complying with tax and accounting requirements
• Responding to legal requests from authorities

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order data: 7 years (for tax and accounting purposes)
• Customer support communications: 3 years after last contact
• Marketing consent records: Until you withdraw consent, plus 3 years
• Website analytics data: As described in our analytics provider’s settings when such tools are used (typically up to a limited retention period); not collected until those tools are active and permitted
• Cookie consent records: 12 months

After the retention period expires, we will securely delete or anonymize your data.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access (Art. 15): You can request a copy of your personal data we hold.
• Right to Rectification (Art. 16): You can request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17): You can request deletion of your data under certain circumstances.
• Right to Restriction (Art. 18): You can request limitation of processing under certain circumstances.
• Right to Data Portability (Art. 20): You can request your data in a structured, machine-readable format.
• Right to Object (Art. 21): You can object to processing based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent (Art. 7): You can withdraw consent at any time without affecting prior processing.
• Right to Lodge a Complaint: You can file a complaint with a supervisory authority (in Norway: Datatilsynet).

To exercise any of these rights, please contact us at cooperation@fraxylonrythepir.world. We will respond without undue delay and, as a general rule, within one month (this may be extended by up to two further months in complex cases, in which case we will inform you).

Right to lodge a complaint (Norway): You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), Postboks 458 Sentrum, 0105 Oslo, Norway: www.datatilsynet.no. This is without prejudice to seeking a remedy before the courts.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• SSL/TLS encryption for all data transmission
• Secure servers with regular security updates
• Access controls limiting data access to authorized personnel only
• Regular security assessments and monitoring
• Employee training on data protection practices

8. Data Sharing and Recipients

We may share your personal data with the following categories of recipients:

• Payment processors: To process your transactions securely
• Shipping providers: To deliver your orders
• IT service providers: For website hosting and maintenance
• Analytics providers: Only if we use such services and the transfer is covered by your consent or another lawful basis

We require all third parties to respect the security of your data and to process it in accordance with applicable law. We do not sell your personal data to third parties.

9. Automated Decisions and Profiling

We do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you, unless we are required to inform you otherwise and provide a suitable legal basis.

10. International Data Transfers

Your personal data may be transferred to countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding Corporate Rules (where applicable)

11. Cookies

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Significant changes will be communicated to you directly where possible.