Gardenstore AS (Norwegian orders)  

Edvard Griegs vei 1, 1410 Kolbotn

Organisation number: NO 920 857 507 MVA

Email: contact@bagin.com

 

Gardenstore Int. AB (International orders)

Simbagatan 20, 131 54 Nacka

Organisation number: 559441-2636

Email: contact@bagin.com

 

For any questions about how we handle your personal data, please contact us at the address above.

When you place an order

–      Name and delivery address

–      Email address and phone number

–      Order history and purchase details

–      Payment information (processed by payment provider — we do not store card details)

When you browse the store

–      IP address and device/browser information

–      Browsing behaviour and pages visited (via cookies)

–      Referral source (e.g. how you found us)

When you sign up for marketing

–      Email address

–      Marketing preferences and consent records

We process your personal data on the following legal bases:

–      Contract (GDPR Art. 6(1)(b)): to fulfil your order, manage returns, and provide customer service

–      Legal obligation (GDPR Art. 6(1)(c)): to comply with accounting, tax, and consumer protection law

–      Consent (GDPR Art. 6(1)(a)): for email marketing and non-essential cookies

–      Legitimate interests (GDPR Art. 6(1)(f)): for fraud prevention and improving our services

–      Processing and fulfilling orders

–      Sending order and shipping confirmations

–      Handling returns, refunds, and complaints

–      Sending marketing emails (with your consent)

–      Improving our website and customer experience

–      Complying with legal obligations (e.g. accounting records)

–      Fraud prevention and security

We share your data with the following third parties who process data on our behalf:

E-commerce platform

Shopify Inc. (Canada) — our store is hosted on Shopify. Shopify stores and processes order data as a data processor. See Shopify's Privacy Policy at shopify.com/legal/privacy.

Email marketing

Klaviyo — used for transactional and marketing emails (where you have consented).

Payment processing

Shopify Payments and Dintero — payment data is processed directly by the payment provider under PCI-DSS standards. We do not store your card details.

Analytics and advertising

Google Analytics / Meta Pixel — used to measure website traffic and advertising performance, subject to your cookie consent.

Shipping and logistics

Bring / PostNord — your name and delivery address are shared with our shipping partner to fulfil your order.

We retain your personal data for as long as necessary for the purpose it was collected:

–      Order data: 5 years (required by Norwegian accounting law — bokføringsloven)

–      Customer accounts: until you request deletion

–      Marketing consent: until you withdraw consent

–      Cookie data: according to individual cookie lifetimes (see Cookie Policy)

Under GDPR, you have the following rights:

–      Right of access — you may request a copy of your personal data

–      Right to rectification — you may request correction of inaccurate data

–      Right to erasure — you may request deletion of your data (subject to legal retention obligations)

–      Right to restriction — you may request that we limit our processing

–      Right to data portability — you may request your data in a structured, machine-readable format

–      Right to object — you may object to processing based on legitimate interests

–      Right to withdraw consent — you may withdraw marketing consent at any time

To exercise any of these rights, contact us at [privacy@yourstore.com]. We will respond within 30 days. You may also lodge a complaint with the Norwegian Data Protection Authority: Datatilsynet, datatilsynet.no.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data transfers are encrypted via SSL/TLS.

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice on our website. The date of the latest revision is shown at the bottom of this page.

Last updated: 25.03.2026