Privacy policy

PRIVACY POLICY

 

Your privacy is important to us, and we handle and protect your data accordingly. Below, we have outlined all the ways we use your information and why it is necessary to do so.

This website is operated by LOPAS AS (org. no. 929 025 539), Ørnetua 12, 6009 Ålesund, Norway, trading as CoraMisa. In this Privacy Policy, LOPAS AS / CoraMisa is referred to as "CoraMisa", "we", or "us". We are the data controller for the personal data described below.

HOW YOUR INFORMATION IS USED

NAME AND CONTACT DETAILS
We ask for your name, address, and e-mail address for several reasons. This allows us to:
* Deliver your purchase to the correct person and address.
* Inform you of order details, delays, and other important notices via e-mail.
* Keep you updated on new products, restocks, discount codes, or projects via e-mail, if you've opted in. You can cancel this at any time via the unsubscribe link in any email, or by contacting us.

PAYMENT INFORMATION
Parts of your payment information are collected during the payment transaction, processed via Shopify Payments and/or PayPal. This allows us to:
* Process payment for items bought.
* Process refunds for returns.
* Detect and prevent fraud against either yourself or CoraMisa.
* Optionally store payment information to your account for a faster checkout, if you choose to create one.
We never see or store your full card details ourselves — this is handled directly by our payment providers.

COOKIES AND WEBSITE ANALYTICS
Some cookies are strictly necessary for the website and checkout to function (e.g. your cart, login session) — these run automatically and don't require consent.
We also use Hotjar to understand how visitors use our website (e.g. anonymised click and scroll behaviour). Hotjar only runs after you actively accept it in our cookie banner — if you decline, it never loads. You can change your choice at any time via the cookie settings link in the site footer, or your browser settings.

YOUR GENERAL INFORMATION AND WHO WE SHARE IT WITH
CoraMisa will never sell any of your personal data to third parties. This includes your name, address, email address, and payment information.
There are, however, cases where we're required to share your data, with companies that only use it to help us serve you:
* Shopify — our website, checkout, and store platform.
* Shopify Payments and PayPal — payment processing.
* Our fulfilment partner, a third-party logistics (3PL) warehouse in the Netherlands, which receives the order data needed to pack and ship your order.
* Klaviyo — our email marketing platform, if you've opted in to marketing emails.
* Hotjar (part of Contentsquare) — website analytics, only after cookie consent.
* Judge.me and Trustpilot — our product review platforms, if you choose to leave a review.
* The Shop app (Shopify's own order-tracking app), if you use it to track your order.
* Credit reference agencies, law enforcement, and fraud prevention agencies, where necessary to prevent or investigate fraud.

INTERNATIONAL DATA TRANSFERS
Some of the companies above are located outside the EU/EEA — for example, Klaviyo (United States). Where this happens, we rely on legally recognised safeguards, such as the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses, to protect your data.

HOW LONG WE KEEP YOUR DATA
* Order and invoice data: kept for as long as required by Norwegian accounting law (currently up to 5 years).
* Marketing data: kept until you unsubscribe or withdraw consent.
* Reviews: kept for as long as your review remains published, or until you ask us to remove it.

YOUR RIGHTS
You have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to how we use it, and to withdraw any consent you've given, at any time. To exercise any of these rights, contact us at contact@coramisa.com.
If you're not satisfied with our response, you have the right to complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no). If you live in the EU/EEA, you can also complain to your own country's data protection authority.

CHILDREN'S PRIVACY
Our website is not directed at children, and we do not knowingly collect personal data from anyone under 16.

CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The version published on our website at any given time applies.

CONTACT US
Questions about this Privacy Policy or your data can be sent to contact@coramisa.com.