Privacy Policy

This policy explains what personal data Genion collects, why we collect it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and equivalent laws.

Data controller: Genion, based in Norway. Contact: hello@genion.co.

1. What we collect and why

We only collect what we need to run the store and support you:

• Order data — name, shipping and billing address, email, phone (if provided), items ordered. Used to fulfil your order. Legal basis: performance of a contract.
• Payment data — handled entirely by Shopify Payments and the relevant card networks. We do not see or store your card number.
• Account data (if you create one) — email and password hash. Legal basis: contract / your consent.
• Support messages — anything you send us by email or contact form. Legal basis: legitimate interest in helping you.
• Site analytics — anonymised page views and device info, used to improve the site. Legal basis: consent (where required) or legitimate interest.
• Marketing emails — only if you opt in. You can unsubscribe from every email we send.

2. Who processes your data

Checkout, payments and order storage are processed by Shopify Inc. on our behalf. Shipping data is shared with our fulfilment and shipping carriers only to deliver your order. Email is sent through a standard transactional email provider. We do not sell your personal data.

3. How long we keep it

• Order and invoice records: kept for as long as required by Norwegian tax and accounting law (typically 5 years).
• Account data: kept until you delete your account.
• Support emails: up to 24 months after the last message.
• Marketing subscribers: until you unsubscribe.
• Analytics: aggregated and anonymised, typically up to 14 months.

4. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your data ("right to be forgotten"), where we're not legally required to keep it.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time (without affecting past processing).
• Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local authority.

To exercise any of these rights, email hello@genion.co. We'll respond within 30 days.

5. Cookies

We use a small number of cookies and similar technologies:

• Strictly necessary — cart, checkout, and security. These can't be switched off; without them the store doesn't work.
• Analytics — anonymous stats about which pages people visit, so we can improve the site. Only set with your consent where required.
• Marketing — used to measure ad performance. Only set with your consent.

You can clear or block cookies at any time in your browser settings. If you're in the EU/EEA/UK, you'll see a consent banner the first time you visit and can update your choices from there.

6. International transfers

Some of our processors (including Shopify) may store data outside the EU/EEA. Where they do, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

7. Security

We use HTTPS across the site and rely on Shopify's PCI-DSS compliant infrastructure for payments. No system is 100% secure, but we take reasonable steps to protect your data.

8. Changes

If we make significant changes to this policy we'll update the date above and, where appropriate, notify you by email.