Privacy policy
Chili Chocolate AS (org. no. 816708052) is the data controller for the personal data processed in the online shop Chili Chocolate. This policy explains what information we collect, why we collect it, and what rights you have.
What information we process
- Purchases: name, address, email, phone number and what you have bought. The legal basis is our contract with you (GDPR Article 6(1)(b)) and the Norwegian Bookkeeping Act.
- Payment: payment is handled by Kustom. We do not receive card numbers.
- Shipping: name, address and contact details are shared with the carrier through Profrakt so that the parcel can be delivered.
- Newsletter: email address, if you sign up. The legal basis is consent, which you can withdraw at any time.
- Back-in-stock alerts: email address and product, until the alert has been sent.
- Cookies and analytics: see cookies.
How long we keep the information
Order information is kept for five years after the end of the financial year, as the Bookkeeping Act requires. Other information is deleted when it is no longer needed for its purpose.
Data processors
We use suppliers who process information on our behalf: Kustom (payment), Profrakt and the carriers (delivery), Resend (email) and Google (analytics, only with consent). We have data processing agreements with them.
Your rights
You have the right to access, correction, deletion, restriction and data portability, and the right to object to processing. Contact us at post@chilichocolate.no. You can also complain to Datatilsynet (the Norwegian Data Protection Authority).
Contact
Chili Chocolate AS, Søregata 27, 4006 Stavanger. Email: post@chilichocolate.no. Phone: 926 87 647.