Who is responsible
Heatkin, heatkin.com. Email: info@heatkin.com.
What we collect and why
- Orders: name, email, phone number, delivery address and the items you order. We use it to process and deliver your order, send confirmations and handle returns and complaints (contract, GDPR art. 6(1)(b)).
- Account (optional): your email address and a password stored as a secure hash, so you can see your orders.
- Accounting: we keep order and payment records for 5 years as required by Norwegian bookkeeping law.
Who we share data with
- Stripe processes your payment. Card details go directly to Stripe.
- Our supplier and carriers receive your name, address, phone number and email so the parcel can be delivered. This may involve transfer of data outside the EU/EEA.
- Our email and hosting providers to send order emails and run the website.
We do not sell your data.
Cookies
We use only necessary cookies (cart, checkout and login). No advertising or analytics cookies.
Your rights
You can ask to access, correct or delete your data, restrict or object to processing, and receive a copy. Email us to use these rights. You can complain to the Norwegian Data Protection Authority (Datatilsynet).