Draft, pending legal review. This text may change before it is approved.
Who is responsible
Hovlio, organisation number 937 103 050, is responsible for the personal information that is handled in the online store. You can send questions about privacy to account@zellap.com.
What information we collect
- When you place an order: your name, email address, phone number and delivery address, any message you write, and what you bought, what it cost and how you paid.
- In your account: the email address you log in with, and your name, phone and address if you add them. You log in with a link sent by email, without a password.
- When you tell us about a cancellation or a fault, or ask a question: the text you write, and which items the case concerns.
- When you open a case with customer service: your name, email address, any order number, the subject and the messages in the case, and the photos you attach.
- Payment: we can see that a payment went through and how much it was, but never your card number.
We do not collect more information than your order and your account need.
What we use the information for
- To handle and deliver your order, send you confirmation, tracking and updates, and contact you about it. This is needed to carry out our agreement with you.
- To give you an account with your orders, tracking and enquiries.
- To keep accounting records, as accounting law requires.
- To handle cancellations, complaints and claims.
- To answer a case you open with customer service.
We do not sell your information.
Who receives the information
We share only what each recipient needs to do its job. The companies that handle information on our behalf are bound by data processing agreements.
| Recipient | What they get | Why |
|---|---|---|
| Stripe | Payment details, email and amount | Handles the payment. Your card details go directly to Stripe and are not stored by us. Stripe is itself responsible for part of the handling, for example to prevent fraud, and has its own privacy policy. |
| DSers, AliExpress and the suppliers that ship your item | Name, delivery address and phone number | Order the item, pack it and send it directly to you. The supplier and the carrier need this information to deliver. |
| Resend | Email address and the content of the emails | Sends order confirmations, login links, tracking and replies to your enquiries. |
| Vercel | Technical data about your visit, such as your IP address, and the photos you attach to a case | Runs the website and stores the photos. |
| Neon | Everything that is stored about orders, customers and enquiries | The database we store the information in. |
Where your information goes
Items are shipped by suppliers in other countries, for example China. Your name, address and phone number are sent there so that the item can be delivered. The rules that protect personal information in those countries may be different from the rules where you live. The other recipients in the table may also handle information in other countries.
How long we keep the information
- Orders and payments: for as long as accounting law requires, currently five years after the end of the financial year. After that they are deleted.
- Enquiries: while the case is open and the complaint period runs, for up to five years.
- Customer service cases: name, email address, order number, messages and photos are deleted 24 months after the case is closed.
- Your account: until you ask us to delete it. Order information that we must keep for accounting is not deleted until the time limit has passed.
- Login links: they are valid for a short time and can be used only once.
Cookies and storage in your browser
The shop uses storage that it needs in order to work: your cart is saved in your browser (localStorage), your choice in the consent banner is remembered, your choice between private and business shopping is remembered in a cookie, and if you are logged in to your account, a cookie keeps you logged in.
We also count, anonymously, how many people use the shop: which pages and items are viewed, how many times something is added to the cart, and how many people place an order. These are daily totals, without cookies. We do not store your IP address, anything on your device, or anything else that can identify you, and we do not store your search texts or filter choices. .
Your rights
You can ask us what information we have about you, and ask us to correct or delete it. You can also ask us to limit how we use it, object to how we use it, and get a copy of the information you have given us in a machine-readable format. Deletion can be limited where we must keep accounting records. Contact us to use your rights. We reply within one month.
If you think we handle your information in breach of the rules that apply, you can complain to the Norwegian Data Protection Authority (Datatilsynet).