Privacy and Cookie Policy
Effective Date: 11. December 2024
​
At www.offshegoes.net, we take your privacy seriously. This policy explains how we collect, use, and protect your personal data, particularly when making purchases through our webshop, powered by Wix, and using Stripe for payment processing.
1. About Us
-
Company Name: Off She Goes by Runa Grydeland
-
Organization Number: 929 300 696
-
Address: P.O Box 32, 5902 Isdalstø, Norway
-
Email: info@offshegoes.net
Data Controller: Off She Goes by Runa Grydeland is the data controller responsible for processing your personal data in compliance with GDPR.
2. Information We Collect
We collect the following types of personal data:
a. During Purchases
-
Full name, email address, phone number, and shipping/billing address.
-
Payment information (e.g., card details processed by Stripe).
b. Website Usage
-
IP address, browser type, operating system, and browsing behavior (via cookies and analytics tools).
c. Communication
-
Any data you provide when contacting us (e.g., inquiries or returns).
3. Why We Collect Your Data
We process your data to:
Process Your Orders
-
Fulfill your purchases and ship products.
-
Send you order confirmations, shipping updates, and receipts.
Handle Payments
-
Securely process your payment through Stripe.
​
Improve Your Experience
-
Personalize your interaction with our website.
-
Analyze website usage to enhance services.
Legal Compliance
-
Comply with tax regulations and other legal obligations.
Legal Basis for Data Processing:
-
Contractual necessity: To process and deliver your orders.
-
Legal obligation: For compliance with tax and accounting requirements.
-
Consent: For marketing and analytics cookies or newsletters.
4. Payment Processing with Stripe
We use Stripe as our payment processor. When you make a purchase, your payment information is securely transmitted to Stripe.
Data Handled by Stripe:
-
Stripe processes your payment details, including card information, to complete the transaction.
Data Security:
-
Stripe is PCI DSS-compliant, ensuring the highest level of security for card transactions.​
​
Privacy Policy:
To learn more about how Stripe handles your data, please review their Privacy Policy.
Automated Decision-Making:
We may use automated decision-making tools provided by Stripe to detect and prevent fraudulent transactions. These processes are necessary for the security of our payment system.
Data Transfers:
Stripe may transfer your data outside the EEA, with safeguards such as Standard Contractual Clauses to ensure your data is handled securely.
5. Sharing Your Data
We only share your data with trusted third parties when necessary to:
-
Process payments (e.g., Stripe).
-
Ship your orders (e.g., shipping carriers).
-
Comply with legal obligations.
​
All third parties must comply with GDPR and process your data securely.
6. Your Rights Under GDPR
You have the right to:
-
Access: Request a copy of your data.
-
Rectify: Correct any incorrect or outdated data.
-
Delete: Request deletion of your data (where legally permissible).
-
Restrict: Limit how your data is processed.
-
Portability: Transfer your data to another service provider.
-
Object: Opt-out of marketing communications or data processing for legitimate interests.
​
To exercise your rights, please contact us at info@offshegoes.net.
7. Cookies
We use cookies to enhance your browsing and shopping experience.
Types of Cookies We Use
-
Essential Cookies: Necessary for website functionality, such as managing your shopping cart and processing payments.
-
Analytics Cookies: Help us understand website traffic and improve usability (e.g., Google Analytics).
-
Marketing Cookies: Enable personalized advertisements and promotions (e.g., Facebook Pixel).
Cookie Consent Banner:
Our website uses a cookie consent banner to ensure you can choose which cookies to accept. Only essential cookies will be used if you decline or ignore the banner.
Managing Cookies
You can manage or disable cookies through your browser settings. However, disabling certain cookies may impact website functionality.
​
To opt out of being tracked by Google Analytics across all websites, visit this link.
8. Data Retention
-
Order Information: Retained for 3.5 years to comply with Norwegian tax and accounting regulations.
-
Payment Data: Retained by Stripe per their Retention Policy.
-
Wix Data: Stored according to their Data Retention Policy.
9. Security Measures
We take steps to protect your data, including:
-
Using SSL encryption for secure data transmission.
-
Partnering with PCI DSS-compliant processors like Stripe.
-
Regularly monitoring our systems for vulnerabilities.
10. Changes to This Policy
We may update this policy from time to time. Updates will be posted on our website, and significant changes will be communicated to you directly.
11. Contact Us
If you have any questions about this policy or how we handle your data, please contact us:
-
Company Name: Off She Goes by Runa Grydeland
-
Organization Number: 929 300 696
-
Address: P.O Box 32, 5902 Isdalstø, Norway
-
Email: info@offshegoes.net