VALRYGG studio

VALRYGG Studio respects your privacy.

This Privacy Policy explains how we collect, use, store and share personal information when you visit valryggstudio.com, purchase from us, subscribe to our communications or otherwise interact with us.

This policy is intended to address applicable privacy requirements in Norway, the European Economic Area, the United Kingdom and the United States.

Who is responsible for your information?

VALRYGG Studio AS is the data controller responsible for the processing described in this policy.

VALRYGG Studio AS
Organisation number: 923998837

Business address: Skagavegen 138, 8724 Saura

Email: hello@valryggstudio.com

Information we collect
Depending on how you interact with us, we may collect:

• 
  Contact information, including your name, email address, telephone number, billing address and delivery address.
  
• 
  Order information, including products purchased, order value, delivery details and transaction history.
  
• 
  Payment-related information. Payments are processed by our payment providers, and VALRYGG Studio does not ordinarily receive or store complete card details.
  
• 
  Account information if you create a customer account.
  
• 
  Communications you send to us, including enquiries, feedback and return requests.
  
• 
  Marketing preferences, including whether you have chosen to receive our emails.
  
• 
  Technical and usage information, including your IP address, browser, device type, pages viewed, referring website and interactions with our store.
  
• 
  Cookie, analytics and advertising information, subject to your choices where consent or an opt-out is required.
  
• 
  Information used to prevent fraud and protect our website, customers and business.
  
  We primarily collect information directly from you. We may also receive information from Shopify, payment providers, delivery companies, analytics providers, advertising platforms and other service providers used to operate the store.
  
  How we use your information
  
• We process personal information for the following purposes:
  
  

Processing, fulfilling and delivering your order

Legal basis in the EEA and UK: Performance of our contract with you.

Taking payment and managing returns, refunds and customer service

Legal basis in the EEA and UK: Performance of our contract with you and compliance with legal obligations.

Responding to questions and enquiries

Legal basis in the EEA and UK: Our legitimate interest in communicating with customers and visitors.

Maintaining accounting, tax and transaction records

Legal basis in the EEA and UK: Compliance with legal obligations.

Preventing fraud and protecting the website and business

Legal basis in the EEA and UK: Our legitimate interests and, where applicable, legal obligations.

Improving the store and understanding its use

Legal basis in the EEA and UK: Your consent where required, or our legitimate interests where permitted.

Sending newsletters and marketing

Legal basis in the EEA and UK: Your consent, or another lawful basis where permitted.

Providing personalised or targeted advertising

Legal basis in the EEA and UK: Your consent where required.

Establishing, exercising or defending legal claims

Legal basis in the EEA and UK: Our legitimate interests and legal obligations.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

Orders and payments

Our online store is hosted by Shopify. Shopify processes information needed to provide the storefront, checkout and related ecommerce services.

Payments are handled by the payment methods displayed at checkout. The relevant payment provider processes your payment information according to its own privacy terms.

You can read Shopify’s Consumer Privacy Policy at:

https://www.shopify.com/legal/privacy/consumers

How we disclose information

We may disclose personal information to trusted providers when necessary to operate the business, including:

• 
  Shopify and ecommerce service providers.
  
• 
  Payment processors.
  
• 
  Delivery, postal and logistics providers.
  
• 
  Email and newsletter platforms.
  
• 
  Website hosting, security and technical-support providers.
  
• 
  Analytics and advertising providers, subject to your privacy choices.
  
• 
  Accountants, auditors, lawyers and other professional advisers.
  
• 
  Public authorities when disclosure is required by law.
  
  These providers may receive only the information reasonably necessary to perform their services.
  
  We may also disclose information when necessary to comply with legal obligations, protect our rights or investigate suspected fraud or security incidents.
  
  If VALRYGG Studio is reorganised, sold or transferred, relevant information may be disclosed to professional advisers and a prospective or new owner, subject to appropriate safeguards.
  
  Targeted advertising, sale and sharing
  
  VALRYGG Studio does not sell personal information for money.
  
  However, some US privacy laws define “sale,” “sharing” or “targeted advertising” broadly. If advertising, analytics or Shopify personalisation services are enabled, the disclosure of identifiers, device information and website activity to advertising or technology partners may be considered a sale, sharing or processing for targeted advertising under those laws.
  
  Where required, you may opt out by selecting “Your Privacy Choices” in the website footer or by adjusting the cookie and privacy settings displayed on the website.
• 
  We also recognise qualifying browser-based opt-out preference signals, such as Global Privacy Control, where required by law and supported by our ecommerce platform.
  
  Cookies and similar technologies
  
  We use cookies and similar technologies to:
• 
  Operate essential store and checkout functions.
  
• 
  Remember your preferences.
  
• 
  Maintain security and prevent fraud.
  
• 
  Understand how visitors use the website.
  
• 
  Measure marketing and advertising performance.
  
• 
  Personalise content or advertising where enabled.
  
  Essential cookies are necessary for the website to function.
  
  In the EEA and UK, non-essential analytics, personalisation and advertising cookies are used only after you have given consent where required.
  
  In the United States, you may opt out of cookies used for targeted advertising or activities legally considered a sale or sharing through “Your Privacy Choices.”
  
  You can also manage cookies through your browser. Blocking essential cookies may affect the functionality of the store.
  
  Marketing communications
  
  We send marketing emails only where we have an appropriate legal basis.
  
  You can unsubscribe at any time by using the unsubscribe link at the bottom of an email or by contacting us.
  
  Unsubscribing from marketing will not prevent us from sending essential communications about an order, payment, delivery or customer-service matter.
  
  International transfers
  
  Some of our providers, including Shopify and certain technology or marketing providers, may process information outside Norway, the EEA or the country where you live.
  
  When personal information protected by European data-protection law is transferred to a country that has not been recognised as providing adequate protection, we use an appropriate legal transfer mechanism. This may include the European Commission’s Standard Contractual Clauses together with supplementary safeguards where necessary.
  
  How long we retain information
  
  We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

This includes:

• 
  Order, payment and accounting records for the period required by tax, accounting and consumer legislation.
  
• 
  Customer-service correspondence for as long as needed to resolve the matter and manage possible legal claims.
  
• 
  Marketing information until you unsubscribe, withdraw consent or the information is no longer required.
  
• 
  Technical, cookie and analytics information according to the retention periods of the relevant tools and your privacy settings.
  
• 
  Privacy requests for as long as necessary to demonstrate compliance with applicable law.
  

The retention period is determined by the purpose of processing, the nature and sensitivity of the information, legal requirements and the need to establish or defend legal claims.

When information is no longer required, it is deleted, anonymised or securely restricted.

European privacy rights

If European data-protection law applies to you, you may have the right to:

• 
  Request access to your personal information.
  
• 
  Ask us to correct inaccurate or incomplete information.
  
• 
  Request deletion of your information.
  
• 
  Request restriction of processing.
  
• 
  Object to processing based on legitimate interests.
  
• 
  Object at any time to direct marketing.
  
• 
  Withdraw consent at any time.
  
• 
  Receive certain information in a structured, commonly used and machine-readable format.
  
• 
  Request that eligible information be transferred to another provider.
  
• 
  Lodge a complaint with a data-protection authority.
  
  To exercise these rights, contact us at hello@valryggstudio.com.
  
  We may need to verify your identity before completing your request.
  
  You may lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet:

https://www.datatilsynet.no/

If you live elsewhere in the EEA or UK, you may also contact the data-protection authority where you live or work.

United States privacy notice

This section supplements the rest of this Privacy Policy for residents of US states with applicable consumer privacy laws.

Categories of personal information

During the preceding 12 months, we may have collected the following categories of personal information:

Identifiers

Examples include your name, email address, IP address, telephone number and postal address.

Sources may include you, Shopify and our service providers.

This information may be disclosed to Shopify, payment providers, delivery providers, technical providers and marketing providers.

Customer and commercial information

Examples include your orders, purchased products, transaction history and customer-service records.

Sources may include you and our service providers.

This information may be disclosed to Shopify, payment providers, delivery providers and professional-service providers.

Internet or electronic activity

Examples include device data, browser information, pages viewed and website interactions.

Sources may include your device, cookies and technology providers.

This information may be disclosed to hosting, security, analytics and advertising providers.

Approximate geolocation information

This may include an approximate location inferred from your IP address.

Sources may include your device and technology providers.

This information may be disclosed to security, analytics and advertising providers.

Audio, electronic or visual information

This may include photographs or other content that you voluntarily send us.

The source of this information is normally you.

This information may be disclosed to customer-service or technical providers where necessary to respond to your request.

Inferences

This may include possible preferences inferred from purchases or website activity.

Sources may include your activity, Shopify and other technology providers.

This information may be disclosed to Shopify, analytics providers and advertising providers.

Sensitive personal information

This may include account credentials and payment information processed to complete a transaction.

Sources may include you, Shopify and payment providers.

This information may be processed by Shopify, payment providers and fraud-prevention providers.

We use these categories to fulfil orders, provide customer service, process payments, maintain security, prevent fraud, improve the store, comply with law and conduct marketing as described in this policy.

We do not use or disclose sensitive personal information to infer characteristics about you or for purposes other than providing requested services, maintaining security, preventing fraud and other legally permitted purposes.

US privacy rights

Depending on your state of residence and subject to applicable exceptions, you may have the right to:

• 
  Know whether we process your personal information.
  
• 
  Request access to personal information we hold about you.
  
• 
  Request correction of inaccurate information.
  
• 
  Request deletion of personal information.
  
• 
  Receive a portable copy of eligible information.
  
• 
  Obtain information about the categories of information collected, its sources, our purposes and the categories of recipients.
  
• 
  Opt out of the sale or sharing of personal information.
  
• 
  Opt out of processing for targeted advertising.
  
• 
  Opt out of certain profiling that produces legal or similarly significant effects.
  
• 
  Limit certain uses or disclosures of sensitive personal information.
  
• 
  Appeal a decision we make regarding your privacy request.
  
• 
  Receive equal service and not be discriminated against for exercising a privacy right.
  

VALRYGG Studio does not currently use personal information for profiling that produces legal or similarly significant effects.

Exercising your US privacy rights

You can submit a request by:

Emailing hello@valryggstudio.com

Using “Your Privacy Choices” in the website footer for sale, sharing and targeted-advertising opt-outs

Enabling a legally recognised opt-out preference signal, such as Global Privacy Control.

Please describe your request and provide enough information for us to identify the relevant records.We may need to verify your identity before completing an access, correction, deletion or portability request.

We will use information submitted with a privacy request only to verify and process that request. Where legally permitted, we may decline or limit a request and will explain the reason.

Authorised agents

Where permitted by applicable law, you may appoint an authorised agent to submit a request for you.

We may require evidence of the agent’s authority and may ask you to verify your identity or confirm that you authorised the request.

Appeals

If we decline your request and your state provides a right to appeal, you may appeal by emailing [insert privacy/contact email] with the subject line “Privacy Appeal.”

We will respond within the period required by applicable law and explain any further options available to you.

California-specific disclosures

California residents may request information about the categories of personal information collected, used, disclosed, sold or shared during the preceding 12 months.

VALRYGG Studio does not sell personal information for monetary payment. As explained above, certain advertising or analytics disclosures may nevertheless be considered “sharing” or “sale” under California law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

We do not offer financial incentives or different prices in exchange for personal information.

California residents may use an authorised agent and will not receive discriminatory treatment for exercising rights provided by applicable law.

Nevada residents

Nevada residents may submit a verified request to opt out of covered sales of personal information.

VALRYGG Studio does not currently sell covered information for monetary consideration as defined by Nevada law. Requests may nevertheless be sent to Hello@valryggstudio.com

Children’s privacy

Our store is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

We do not knowingly sell or share the personal information of anyone under 16 for targeted advertising.

If you believe a child has provided us with personal information, please contact us so we can investigate and take appropriate action.

Information security

We use reasonable organisational and technical measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

No online system is completely secure, but we work with established providers and limit access according to business need.

Third-party websites

Our website may contain links to third-party websites or services.

Their processing of personal information is governed by their own privacy policies. VALRYGG Studio is not responsible for third-party privacy practices.

Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change.

The current version will be published on this page with the latest revision date. Where required, we will provide additional notice of material changes.

Contact

For privacy questions, requests or appeals, contact:

VALRYGG Studio AS

Organisation number:923998837

Email:hello@valryggstudio.com
Address: Skagavegen 138, 8724 Saura