Privacy Policy

Baila Oslo cares about your privacy. This policy explains what personal data we collect, why, and what rights you have. We process your data in accordance with Norwegian data protection law and the GDPR.

Data controller

Baila Oslo, Oslo, Norway, is the data controller for the personal data processed in the online store. If you have questions about privacy, contact us at hei@baila.no.

What data we collect

• Contact and order information: name, email address, shipping and billing address, phone number, and order history.
• Payment information: handled securely by our payment provider via Shopify. We do not store full card details.
• Technical information: IP address, browser type, and site usage, collected via cookies.

Purpose and legal basis

• Processing and delivering orders, and providing customer service - basis: fulfillment of the purchase agreement.
• Sending newsletters and offers if you sign up - basis: your consent, which you can withdraw at any time.
• Operating, securing, and improving the site - basis: legitimate interest and, for optional analytics, consent.
• Complying with legal requirements, such as bookkeeping.

Data processors and sharing

We share data with providers who help us run the store, including Shopify (e-commerce and payment) and Vercel (site hosting). These process data on our behalf under data processing agreements. Some providers may process data outside the EEA; such transfers are secured with lawful safeguards (for example, the EU's standard contractual clauses). We never sell your personal data.

Cookies

We use essential cookies to make the store work, and optional analytics cookies to better understand usage. You choose which optional cookies to accept via the consent banner, and can change your choice at any time.

Retention period

We keep your data as long as necessary for the purposes above, or as long as required by law (for example, retention of order and accounting records).

Your rights

You have the right to access, correct, and delete your personal data, as well as the right to restrict or object to processing, and to data portability. You may also withdraw consent. Contact us at hei@baila.no. If you believe we're processing your data incorrectly, you may file a complaint with the Norwegian Data Protection Authority (Datatilsynet).