Privacy policy
Privacy Policy
- Data Controller
- Personal Data Stored
- Purpose of Processing
- Legal Basis for Processing
- Collection of Personal Data
- Disclosure of Information to Third Parties
- Deletion of Personal Data
- Rights of the Data Subject
- Information Security
- International Transfers
- Cookies
Last updated: June 11, 2026
This statement provides information about the data processing we carry out and determines the purpose and means of the processing, as well as data processing we perform on behalf of our customers based on their instructions. By providing us with your personal information, you agree to the practices and terms described in this privacy policy.
If you have objections regarding our data processing, you also have the right to complain to the Data Protection Authority (Datatilsynet).
1. Data Controller
Therese Stokkan, hereinafter referred to as “we”/“us”, is the data controller for the company’s processing of personal data.
Contact Information:
Email: kontakt@theresestokkan.no
2. Personal Data Stored
We store the following personal data about our customers: name, address, telephone number, and email address. We also store purchase history and behavioural patterns on our website, i.e. information about how each customer navigates on the site.
3. Purpose of Processing
We process the data in order to fulfil our obligations under our agreement with you. We also use the data to provide you with information, offers, and services in connection with your purchase via email, telephone, and postal mailings.
As a customer, you may receive emails about your customer relationship, for example in relation to orders you have placed. This is defined as legitimate interest and no consent will be requested for this.
We also use email for marketing and communication. If you have given consent, you will periodically receive newsletters from us. You may unsubscribe from newsletters at any time by clicking the unsubscribe link at the bottom of the emails.
4. Legal Basis for Processing
Information such as name, address, phone number, and email address is used to fulfil the purchase agreement. The legal basis for this processing is Article 6(b) of the General Data Protection Regulation (GDPR). Where you have given consent, the data will also be used to provide you with information, offers, and services in connection with your purchase via email, telephone, and SMS. The legal basis for this processing is Article 6(a) of the GDPR. You may opt out of receiving such information from us at any time.
5. Collection of Personal Data
Information is registered and stored when you register on www.theresestokkan.no, when you contact sales and support via email, or when you use our services.
We also automatically collect certain information about your interaction with the services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage data may include information about how you access and use our website and your account, including device information, browser information, information about your network connection, your IP address, and other information about your interaction with the services. Read more about the use of cookies below.
Visitors from certain US states may require the restriction of the collection and sharing of their information, see Data Collection Opt-Out Page.
6. Disclosure of Information to Third Parties
We will not share, sell, transfer or otherwise disclose personal data to others unless we are legally obligated to do so. In order to fulfil our obligations under the agreement, necessary data may be disclosed to our partners. See the complete list below.
Third-Party Providers
We use services provided by third-party providers. Below is an overview of subcontractors where information may be stored.
Shopify
This website is powered by Shopify. Shopify collects personal data when you visit this website, including:
- Information about your browser, network, and device
- Web pages visited prior to arriving at this website
- Web pages viewed while on this website
- Your IP address
Shopify needs these data to operate this website, and to protect and improve the platform and services. Shopify analyses the data in anonymised form.
Purchases
When you purchase something on this website, we collect personal data from you to fulfil the order and enhance our payment experience and customer service. We may collect information such as your:
- Billing and shipping address
- Details related to your purchase
- Email address
- Name
- Phone number
We share this information with Shopify, our online store provider, so that they can provide website services to us.
When you go through checkout, this website may automatically complete your shipping and billing address by sharing what you type with Google Places API and returning suggestions to improve the checkout experience.
Web Forms
When you submit information to this website via a web form (signing up for an email list), we collect the data requested in the web form in order to track and respond to your submissions. We share this information with Shopify, our online store host provider, so that they can provide website services to us.
Email Marketing
If you have given explicit prior consent, we may send you marketing emails. You may unsubscribe from these at any time by clicking the link at the end of the email. We share your contact information with Omnisend, our email marketing provider, so they can send these emails on our behalf.
Order-related Emails
We may send you an email with notifications about your order. For example, we may send an email to notify you that:
- You have made a purchase
- Your order has been shipped
It is not possible to unsubscribe from these notifications.
We share your contact information with Shopify, our website provider, so they can send these emails to you on our behalf.
Fonts
This website uses font files from Google Fonts and Adobe Fonts. To display this website correctly to you, servers where the font files are stored may receive personal information about you, including:
- Information about your browser, network, or device
- Your IP address
Domeneshop
We use Domeneshop as an email provider. Information such as name, address, phone number, email address, and order details will be stored on their servers.
Payment Solutions
We use payment solutions from Shopify (including Shop Pay, Google Pay, and Apple Pay), Klarna, and Vipps.
Posten
We send parcels via Posten and therefore share information related to shipping such as name, phone number, and address. See Posten’s information on the processing of personal data for Norgespakke.
Fiken AS
Fiken is our accounting system, and data necessary for bookkeeping will be stored here. This typically includes name/address/order/invoice.
At checkout, this website may automatically complete your shipping and billing address by sharing what you type with Google Places API and returning suggestions to improve your payment experience.
We also use Google reCAPTCHA v2 for form submission on our website to prevent unwanted traffic (spam) from robots.
These services are subject to Google’s Privacy Policy and Terms.
7. Deletion of Personal Data
Information that we are required to retain under the Accounting Act will be stored for up to 5 years, in accordance with the law’s requirements.
8. Rights of the Data Subject
We process your personal data in accordance with the Personal Data Act and applicable regulations. Please note that you may request access to and transfer of your personal data, as well as request correction or deletion of data. Complaints regarding processing in violation of regulations may be submitted to the Data Protection Authority.
9. Information Security
We safeguard your personal data through both physical and virtual access control, as well as encryption of sensitive parts of submitted data.
Please note that no security measures are perfect or impermeable, and we cannot guarantee "perfect security." In addition, information you send to us may not be secure during transmission. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.
10. International Transfers
Please note that we may transfer, store, and process your personal data outside the country you reside in.
If we transfer your personal data outside the EEA or the UK, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the relevant authorities in the UK, where applicable, unless the data transfer is to a country deemed to provide an adequate level of protection.
11. Cookies
Like many websites, we use cookies on our site. For specific information about the cookies we use relating to the operation of our online store with Shopify, see https://www.shopify.com/legal/cookies. We use cookies to enhance and improve our website and services (including remembering your actions and preferences), to conduct analytics and better understand user interaction with the services (in our legitimate interest of managing, improving, and optimizing the services). We may also allow third parties and service providers to use cookies on our website to customise services, products, and advertising on our website and other websites.
Most browsers automatically accept cookies by default, but you can choose to configure your browser to remove or reject cookies through your browser controls. Please note that removing or blocking cookies may have a negative impact on your user experience and may cause some services, including certain features and general functionality, to not function properly or no longer be available. In addition, blocking cookies does not necessarily prevent us from sharing information with third parties such as our advertising partners.
