Privacy Policy

1. Data Controller

Norn Works is the data controller responsible for the processing of your personal data under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

Contact:
Email: worksnorn@gmail.com
Address: Sweden, Västanvik Skrikgärdsvägen 6

2. Personal Data We Collect

We may collect the following types of personal data:

• Contact information: name, email address, phone number, billing/shipping address

• Order information: product details, payment confirmation, order history

• Payment information: processed securely through third-party payment providers (we do not store credit card details)

• Website usage data: IP address, browser type, device information, pages visited, cookies

• Communications: emails, inquiries, customer support interactions

3. How We Use Your Data

We use your data for the following purposes:

• To process and fulfill your orders

• To deliver customer support and respond to inquiries

• To send transactional emails (e.g., order confirmations, shipping updates)

• To comply with legal obligations (e.g., accounting, tax laws)

• To improve our website and user experience

• To send marketing emails (only with your explicit consent)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual necessity: to fulfill your order

• Legal obligation: to comply with tax and regulatory requirements

• Consent: for marketing communications

• Legitimate interests: to improve our services and prevent fraud

5. Data Sharing

We do not sell your personal data. We may share it with:

• Service providers: e.g., payment processors, logistics companies, email services

• Government authorities: where required by law or in response to legal processes

• IT and analytics providers: to support our website and improve services

All third parties are contractually obligated to handle your data securely and in accordance with this Privacy Policy and applicable laws.

6. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or reliance on adequacy decisions.

7. Data Retention

We retain your personal data only as long as necessary to:

• Fulfill your order

• Comply with legal requirements

• Resolve disputes

• Enforce our agreements

Typically, we retain order-related information for 7 years for tax and accounting purposes.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: to request a copy of your data

• Correction: to update inaccurate data

• Erasure: to request deletion of your data

• Restriction: to limit processing in certain cases

• Portability: to receive your data in a structured format

• Objection: to processing for direct marketing

• Withdraw consent: at any time for data processed on the basis of consent

To exercise any of these rights, please contact us at worksnorn@gmail.com.

9. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyze traffic. You can manage your cookie preferences via your browser settings.

For more details, please refer to our [Cookie Policy] (if applicable).

10. Security

We implement technical and organizational measures to protect your data, including encryption, secure servers, and access controls. However, no internet-based service is 100% secure, and we encourage you to take reasonable precautions.

11. Children’s Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect data from children without verified parental consent.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email (if applicable) or via a notice on our website.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us:

Norn Works
Email: worksnorn@gmail.com
Address: Sweden Västanvik Skrikgärdsvägen 6

If you are located in the EU and believe your rights have been violated, you may file a complaint with your local Data Protection Authority.