Privacy

What we store

Name, address, email and mobile number (optional) — what you type in at checkout — and what you ordered: how many boxes, and whether any of them belong to a refill plan. No account, because there is none — and nothing else but what you yourself choose to add on My page.

If you add family members on My page, we store what you type: a label, a size and a preferred length and colour — never more, and especially not about children. If you order for a member, the label is kept on that order. You can edit and remove members whenever you like.

If you choose to save a delivery address on My page, checkout is prefilled with it when you are signed in — only because you saved it there, and you can change or remove it whenever you like. If you change your email address, we hold the new address while we wait for the code we sent there — the code works for a quarter of an hour, and within a day at the latest the address is either yours, or forgotten.

If you asked for a refill reminder for an order, we store that choice and when it is due — a number and a date on the order, nothing more.

If you have a refill plan, we store what it refills — how many boxes and how often — the discount you were promised, and the delivery address the next box goes to. The plan is tied to you as a customer, which is why you can only have one at a time. The payment agreement itself sits with Vipps MobilePay AS, or — if you pay for the plan by card — as a saved card with Stripe Payments Europe, Ltd. We store only a reference to it. If you end the plan, it stops, the address on it is deleted, and a saved card is deleted at Stripe.

Your order history belongs to the email address you bought with. We show it only to someone who demonstrates they have access to that address — and no account is created for that.

If you write to us through the contact form, we receive your name, your email address and what you wrote. The message is not stored in our database at all — it sits in our inbox and with our email provider until we delete it. We use the address only to reply to you.

Payment is handled by Vipps MobilePay AS, or by Stripe Payments Europe, Ltd. when you pay by card. We never see your card number, and it is not stored with us — if you have a refill plan paid by card, Stripe is the one that keeps the card. The payment pages are their own, and they set their own cookies there.

If you ask us to let you know when the box is back in stock, we store your email address, which box it concerns, when you asked and which sentence you agreed to — because that is what allows us to send the one email (the Norwegian Marketing Control Act, § 15). We send one email when the box is back, and delete your address at the same moment. If you ask us to delete your data before then, the request is deleted with it — whether or not you have ever bought from us.

Who we share it with

To get the box to you and the receipt out, we share what is needed with four recipients: Vipps MobilePay AS for paying with Vipps, Stripe Payments Europe, Ltd. for paying by card, the carrier that brings the parcel, and Brevo, which sends receipts, tracking, contact-form replies and the emails from My page — codes and confirmations — on our behalf. The carrier and Brevo process the data on our instructions and for nothing else. The payment providers are themselves responsible for what the law requires of them, such as preventing fraud and money laundering, and Stripe may transfer data to the USA under the EU's standard contractual clauses and the EU–US framework.

The email goes through a European provider, and the data stays inside the EU/EEA.

What we use it for

If you turned on a refill reminder, we send that one email — and never more. You can change it or turn it off at any time on My page.

Every such reminder carries a link that stops them. Press it and we turn off all your reminders, and we set none on later purchases — not even if the checkout box is ticked. You do not need to sign in, and we remember that you said no until you choose an interval again yourself.

If you have a refill plan, we tell you at least 5 days before each charge, with what is coming and what it costs. That is not marketing — it is notice of a payment you agreed to, and you can skip it or cancel right up until it goes.

That email contains a personal link that lets you skip or cancel without signing in. It covers that one plan, shows no address, and can only ever stop a refill — never start or change anything. To change the contents or the address, you use Min side.

Delivering your order, sending your receipt and tracking, and answering you when you get in touch. We send no newsletter you did not ask for, and we never sell your data on.

For how long

Order data is kept for [RETENTION PERIOD], because the accounting rules require it. After that it is deleted.

What you yourself have added on My page — family members and a saved delivery address — is kept until you remove it yourself or delete your data. It is not bookkeeping, and is deleted for good.

A refill plan lives for as long as it runs. If you end it — or delete your data — it stops, and the address on it is deleted. What remains is that there was a plan, with its count and interval, because the orders it made refer to it. Those orders are bookkeeping, and follow the period above.

Cookies

The site sets three cookies, and none of them is one you have to consent to. One remembers whether you read the site in Norwegian or English, and is set only when you press the language switch yourself. Another is set only when you sign in to My page with the code or link we sent you: it remembers that you are signed in on this device for up to 180 days, and is removed when you press “Sign out”. The third belongs to sign-in on our own admin pages, and is never set for you as a customer.

We use no cookies for marketing or for tracking across sites, which is why the site has no banner to click away either. Your choices during the purchase live in the web address and in your browser's own storage — the form you fill in, and the cart if you use one — not in a cookie. None of it is sent to us until you order.

Your rights

You can ask to see, correct or delete your data at any time. Write to hei@sokkero.no and we reply within [RESPONSE TIME].

On My page you can also do it yourself: change your email address, and delete your data with one press — “Delete my data”. That removes sizes, family, saved address and the view of your orders at once; what the accounting rules require us to keep is kept internally.

You can always say no to refill reminders: the link at the foot of every reminder, or one press on “No reminder” on the order page or My page.

If you believe we are handling your data wrongly, you may complain to the Norwegian Data Protection Authority (Datatilsynet).