Privacy Policy

Privacy Policy

Last updated: 29 August 2025

1. Introduction

At Hellen Grundy, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website, place an order, or contact us.

This policy complies with:

  • The General Data Protection Regulation (GDPR) (EU) 2016/679
  • The Norwegian Personal Data Act (Personopplysningsloven)
  • Applicable EU and EEA privacy regulations
  • By using our website or providing your information, you agree to the terms described in this Privacy Policy.

2. Who We Are

  • Business Name: Hellen Grundy
  • Address: Visteveien 58, 4071 Randaberg, Norway
  • Email: contact@hellengrundy.com
  • Organization Number: 935988608
  • We are the data controller responsible for handling your personal data.

3. What Personal Data We Collect

  • We collect the following information when you interact with our website:

3.1 Information You Provide

  • Name
  • Billing and delivery address
  • Email address
  • Phone number (optional, if provided)
  • Order and payment details
  • Messages and inquiries via email or contact forms

3.2 Information Collected Automatically

  • When you visit our website, we may automatically collect certain technical information, such as:
  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on the site
  • Cookies and analytics data (see Section 9)
  • We only collect the data necessary to process your order, improve our services, and comply with legal obligations.

4. How We Use Your Data

We use your personal data for the following purposes:

  • To process and deliver your orders
  • To communicate with you regarding your purchase
  • To handle returns, refunds, and customer support
  • To comply with Norwegian accounting and tax regulations
  • To improve website functionality and shopping experience
  • To send order confirmations and important service updates
  • To detect and prevent fraudulent or illegal activities

We do not sell or rent your data to third parties.

5. Sharing of Personal Data

We only share your personal data with trusted third parties where necessary to fulfill your order or comply with legal obligations. These include:

  • Print-Companies — to produce and deliver your artwork
  • Payment processors — to handle secure payments
  • Shipping providers — to deliver your order
  • IT and website service providers — to maintain and secure our website
  • Authorities or regulators — where required by law
  • All third-party providers are required to comply with GDPR and handle your data securely.

6. International Transfers

  • Since we ship internationally, your data may be processed by fulfillment and delivery partners outside Norway and the EU/EEA.
  • When this happens, we ensure that appropriate safeguards are in place to protect your personal information, in line with GDPR requirements.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes stated in this policy:

  • Order and payment records: Kept for 5 years to comply with Norwegian accounting and tax laws.
  • Customer inquiries: Retained for up to 12 months after your last contact.
  • Marketing data (if applicable): Retained until you withdraw your consent.
  • Once data is no longer needed, it is securely deleted or anonymized.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access – Request a copy of your personal data.
  • Right to rectification – Correct inaccurate or incomplete data.
  • Right to erasure (“Right to be forgotten”) – Request deletion of your data when legally possible.
  • Right to restrict processing – Limit how we use your data.
  • Right to data portability – Receive your data in a commonly used, machine-readable format.
  • Right to object – Object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent – If we process your data based on consent, you may withdraw it at any time.

To exercise your rights, contact us at contact@hellengrundy.com. We will respond within 30 days as required by GDPR.

9. Cookies and Tracking Technologies

We use cookies to enhance your browsing and shopping experience. Cookies may be used for:

  • Basic website functionality
  • Analytics to understand site performance
  • Remembering your preferences

You can manage or disable cookies through your browser settings. For more details, see our Cookie Policy.

10. Security of Your Data

  • We take appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, or alteration.
  • However, no online transmission or storage method is 100% secure, and we cannot guarantee absolute security.

11. Third-Party Links

  • Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external sites and encourage you to review their policies before providing personal data.

12. Changes to This Privacy Policy

  • We may update this Privacy Policy from time to time. The latest version will always be available on our website, and the “Last updated” date at the top indicates when the policy was last revised.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under GDPR, please contact us:

Hellen Grundy

Visteveien 58

4071 Randaberg, Norway

Email: contact@hellengrundy.com

If you are dissatisfied with our handling of your personal data, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):

https://www.datatilsynet.no