Privacy Policy
This Privacy Policy explains how Naavian processes personal data when you visit www.naavian.no, shop in our online store, contact us, or otherwise use our services.
Naavian processes personal data in accordance with applicable data protection legislation, including the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR).
-
Data Controller and Contact Information
KEYZ Netthandel AS, org. no. 936 410 057, is the data controller for the personal data processed in connection with Naavian, the online store, and our services.
If you have any questions about how we process your personal data, or if you wish to exercise your privacy rights, you can contact us at:
Email: support@naavian.no
-
What Personal Data We Collect
We collect and process personal data when it is necessary to operate the online store, complete orders, provide customer service, send relevant information, and improve our services.
2.1 Information You Provide to Us
When you shop with us, contact us, or sign up for our newsletter, we may process the following information:
- Name
- Address
- Email address
- Phone number
- Shipping address
- Billing address
- Order number and order history
- Information about products you have purchased or returned
- Information you provide when contacting customer service
- Consent and preferences for newsletters and marketing
2.2 Payment Information
Payments are processed by our payment providers. We do not store full card numbers or sensitive payment information.
We use payment providers such as Vipps, Klarna, and PayPal to offer secure payment solutions in our online store.
We may receive limited payment information, such as payment status, selected payment method, transaction reference, and information necessary to handle orders, refunds, and customer service.
The payment providers also process personal data in accordance with their own privacy policies.
2.3 Information Collected Automatically
When you visit our website, certain technical information may be collected automatically, such as:
IP address
Browser type
Device type
Operating system
Pages you visit
Time of visit
Referring website
Shopping cart activity
Information from cookies, pixels, and similar technologies
-
How We Use Personal Data
We process personal data for the following purposes:
3.1 Order Processing and Delivery
We use personal data to receive, process, and deliver your order. This includes order confirmation, payment, packing, delivery, returns, refunds, and other necessary follow-up related to your purchase.
Our online store is operated through Shopify. Shopify is used as our e-commerce platform to manage products, orders, customer data, payments, and other functions necessary to operate the online store.
Legal basis: Necessary to perform a contract, cf. GDPR Article 6(1)(b).
3.2 Customer Service
When you contact us, we process the information you provide in order to respond to your inquiry and help you with orders, returns, complaints, or other questions.
We use Webhuset as our provider for domain and email services. This means that personal data you send to us by email may be processed through our email solution.
Legal basis: Legitimate interest, cf. GDPR Article 6(1)(f), and in some cases necessary to perform a contract, cf. GDPR Article 6(1)(b).
3.3 Returns, Complaints, and Refunds
We process necessary information to handle returns, the right of withdrawal, complaints, exchanges, documentation, refunds, and any contact with payment or shipping providers.
Legal basis: Necessary to perform a contract, cf. GDPR Article 6(1)(b), legal obligation, cf. GDPR Article 6(1)(c), and legitimate interest, cf. GDPR Article 6(1)(f).
3.4 Newsletters and Marketing
If you sign up for our newsletter or consent to marketing, we may use your email address to send you news, offers, inspiration, product information, and campaigns from Naavian.
We may use tools and platforms such as SocialBee, Meta, TikTok, Google, Canva, and CapCut in connection with marketing, content production, publishing, advertising, and analysis of marketing activities.
You can unsubscribe from the newsletter at any time by using the unsubscribe link in the email or by contacting us.
Legal basis: Consent, cf. GDPR Article 6(1)(a).
3.5 Analytics and Website Improvement
We may use information about how the website is used to understand traffic, improve the user experience, optimize the online store, and develop better products and services.
We may use analytics tools such as Hotjar, Google, Meta, and TikTok to understand how visitors use the website, measure the effect of marketing, and improve the user experience. Such processing takes place where permitted under applicable law, and where consent is required, we obtain consent first.
Where analytics are based on cookies or similar technologies that are not strictly necessary, we obtain consent where required.
Legal basis: Consent, cf. GDPR Article 6(1)(a), or legitimate interest, cf. GDPR Article 6(1)(f), where the processing is limited, necessary, and does not override your privacy interests.
3.6 Security and Prevention of Misuse
We may process technical information to protect the website, prevent fraud, misuse, unauthorized transactions, and other security incidents.
Legal basis: Legitimate interest, cf. GDPR Article 6(1)(f).
3.7 Legal Obligations
We process and store certain information when necessary to comply with legal obligations, for example under accounting rules, tax regulations, or lawful requests from public authorities.
Legal basis: Legal obligation, cf. GDPR Article 6(1)(c).
-
Cookies and Similar Technologies
Naavian uses cookies and similar technologies on the website.
Cookies may be used to:
- make the website function
- store items in the shopping cart
- remember choices and settings
- analyze how the website is used
- improve the user experience
- measure the effect of marketing
- show relevant marketing where you have consented to this
We use the following main categories of cookies:
Necessary cookies
These are necessary for the website and online store to function, for example shopping cart, payment, security, and basic functionality.
Functional cookies
These may be used to remember choices and settings, such as language or preferences.
Analytics cookies
These help us understand how visitors use the website, so we can improve content, products, and the user experience. This may include tools such as Hotjar and Google.
Marketing cookies
These may be used for advertising, retargeting, and campaign measurement, where you have given your consent. This may include advertising and measurement through Meta, TikTok, and Google.
You can manage or withdraw your consent through our consent solution on the website, where available. You can also change cookie settings in your browser. If you block certain cookies, some parts of the website may function less effectively.
-
Who We Share Personal Data With
We do not sell your personal data.
We may share personal data with third parties when necessary to operate the online store and deliver our services. This may include:
- E-commerce platform and technical providers, such as Shopify
- Payment providers, such as Vipps, Klarna, and PayPal
- Domain and email provider, such as Webhuset
- Shipping and logistics providers
- Customer service and email system providers
- Analytics and marketing tools, such as Hotjar, Google, Meta, TikTok, and
- SocialBee, where this is permitted and/or based on consent
- Tools for content production and marketing, such as Canva and CapCut
- Accountants, advisers, or other professional service providers
- Public authorities where we are legally required to do so
When we use providers that process personal data on our behalf, we enter into necessary data processing agreements where required, to ensure that the information is processed securely and in accordance with applicable regulations.
Some providers, such as payment providers and advertising platforms, may also process personal data as independent data controllers in accordance with their own privacy policies.
-
Transfer of Personal Data Outside the EU/EEA
Some of our providers may process personal data outside Norway or the EU/EEA.
This may, for example, apply to certain services related to the e-commerce platform, analytics, advertising, marketing, payment solutions, or technical systems.
If personal data is transferred to countries outside the EU/EEA, we ensure that the transfer takes place in accordance with applicable data protection rules. This may, for example, be done through the use of the European Commission’s Standard Contractual Clauses or other valid transfer mechanisms.
-
How Long We Store Personal Data
We store personal data for as long as necessary for the purposes for which it was collected, or for as long as we are legally required to store it.
Information related to purchases and payments is stored for as long as necessary to fulfill our agreement with you, handle returns, complaints, and customer service, and comply with legal obligations such as accounting requirements.
Information related to newsletters is stored for as long as you subscribe to the newsletter. If you unsubscribe, we will stop using your email address for newsletters.
Information processed through analytics and marketing tools is stored in accordance with the purpose, your consent, and the applicable settings and terms of the providers.
When the information is no longer necessary, it will be deleted or anonymized.
-
Your Rights
You have several rights under data protection legislation.
You may have the right to:
Access
You can request information about what personal data we process about you.
Rectification
You can ask us to correct inaccurate or incomplete information.
Erasure
You can ask us to delete personal data when we no longer have a valid basis for storing it.
Restriction
You can ask us to restrict the processing of your personal data in certain cases.
Data portability
You can request to receive personal data you have provided to us in a structured and machine-readable format, where the conditions for this are met.
Objection
You can object to processing based on our legitimate interest, including certain forms of marketing.
Withdraw consent
If the processing is based on consent, you can withdraw your consent at any time. This does not affect the lawfulness of processing that took place before the consent was withdrawn.
Complaint
If you believe that we process your personal data in violation of the regulations, you can contact us. You also have the right to lodge a complaint with the Norwegian Data Protection Authority.
To exercise your rights, you can contact us at:
support@naavian.no
-
Security
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, misuse, or destruction.
Only people and providers who need the information to perform their tasks are given access to relevant personal data.
-
Changes to This Privacy Policy
We may update this Privacy Policy if we change how we process personal data, or if the regulations change.
The latest version will always be available on our website.
Last updated: 09.08.2026