Last updated: April 2026

Privacy policy

This privacy policy explains which personal data we process, why we process it, and which rights you have. We take your privacy seriously and process all personal data in accordance with the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR).

Data controller

Datafolka AS is the data controller for the company's processing of personal data.

• Organisation number: 997 939 980
• Address: Kvitsoeygata 30, 4014 Stavanger, Norway
• Email: roy@datafolka.no
• Phone: +47 958 68 662

The managing director is the data controller and can be reached at the email address above for privacy questions.

What is personal data?

Personal data is any information that can be linked directly or indirectly to an identifiable natural person. Examples include name, email address, phone number, IP address and postal address.

What personal data do we collect?

Contact form

When you send us an enquiry via the contact form on the website, we collect the following:

• Name
• Email address
• Phone number (optional)
• Company name (optional)
• The content of your message

Online store

When you make a purchase in our store, we collect the data necessary to complete the order:

• Name and delivery address
• Email address and phone number
• Payment information (handled by Stripe – we do not store card data)
• Order history

Cookies

We use cookies to improve the user experience. See our cookie page for full details.

Purpose and legal basis

We process personal data for the following purposes and on the following legal bases:

• Customer follow-up and communication: Based on legitimate interest (GDPR art. 6(1)(f)). We have a legitimate interest in answering enquiries and following up with customers.
• Completing purchases: Necessary to perform the contract with you (GDPR art. 6(1)(b)).
• Marketing: We only send marketing if you have given your consent (GDPR art. 6(1)(a)). You can withdraw consent at any time.

Sub-processors and data sharing

We share personal data with the following third parties to deliver our services:

• Vercel – Website hosting
• Stripe – Payment processing for the store
• Formspree – Contact form processing

We do not share personal data with any third parties beyond those listed above. Data processing agreements have been entered into with all sub-processors in accordance with GDPR art. 28.

Storage and deletion

We store personal data only as long as necessary for the purpose it was collected for:

• Customer data is stored for the duration of the customer relationship and deleted when no longer needed.
• Contact form data is deleted after 12 months.
• Accounting information is stored in accordance with the Norwegian Bookkeeping Act (5 years).

You can request that we delete your personal data at any time by contacting us.

Your rights

You have the following rights under the GDPR and the Norwegian Personal Data Act:

• Access: You can request access to the personal data we hold about you.
• Rectification: You can request that inaccurate data be corrected.
• Erasure: You can request that we delete your personal data.
• Restriction: You can request that processing of your data be restricted.
• Data portability: You can request your data in a machine-readable format.
• Withdraw consent: Where processing is based on consent, you can withdraw it at any time.
• Complaint: You have the right to lodge a complaint with the Norwegian Data Protection Authority if you believe we do not process your data lawfully.

The Norwegian Data Protection Authority can be reached at datatilsynet.no.

Security

We take security seriously and have implemented the following measures to protect your data:

• All communication between your browser and our servers is encrypted with SSL/TLS.
• Personal data is stored on secure servers with restricted access.
• Only authorised personnel have access to personal data.
• We carry out regular security assessments of our systems.

Contact us

If you have questions about how we process personal data, or wish to exercise your rights, you can contact us:

• Email: roy@datafolka.no
• Phone: +47 958 68 662
• Address: Kvitsoeygata 30, 4014 Stavanger, Norway

We respond to privacy enquiries within 30 days.