Privacy Policy

1. Introduction

Shivlorntharol ("we", "our", "us") is committed to protecting the privacy of all individuals who interact with our website at shivlorntharol.world (the "Site"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, with whom we share it, how long we retain it, and what rights you have under applicable law — including the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

By using our Site or submitting an order, you acknowledge that you have read this policy.

2. Data We Collect

2.1 Information You Provide Directly

When you submit an order form on our Site, we collect:

• Full name
• Email address
• Phone number (if provided)
• Delivery address or message content
• Your consent records (timestamp and IP hash)

2.2 Information Collected Automatically

When you visit our Site, we may automatically collect technical data such as:

• IP address (anonymised)
• Browser type and version
• Device type and operating system
• Pages visited and time spent on page
• Referring URL

This data is collected via cookies and similar technologies as described in our Cookie Policy.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Contractual necessity (Art. 6(1)(b)): To process your order and respond to your enquiry.
• Legitimate interests (Art. 6(1)(f)): To maintain site security, prevent fraud, and improve our services.
• Consent (Art. 6(1)(a)): For analytics and marketing cookies, where you have given explicit consent via the cookie banner.
• Legal obligation (Art. 6(1)(c)): Where we are required to retain certain data by Norwegian accounting or consumer protection law.

4. Purposes of Processing

Your data is used for the following purposes:

• Responding to and fulfilling your order or enquiry
• Communicating order status and delivery information
• Improving site performance and user experience (analytics, only with consent)
• Complying with legal and regulatory obligations
• Fraud prevention and site security

5. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

• Order enquiries: Up to 3 years from the date of interaction, to comply with consumer law and accounting obligations.
• Analytics data: Up to 26 months in aggregated, anonymised form.
• Consent records: Kept for as long as needed to demonstrate compliance, up to 5 years.

6. Data Sharing

We do not sell your personal data. We may share your data with:

• Logistics/shipping partners: Solely to fulfil your order.
• IT service providers: For hosting, email delivery, and site infrastructure, under data processing agreements.
• Authorities: If required by applicable law or a valid legal order.

Any third-party processors are contractually bound to process data only on our instructions and in accordance with GDPR.

7. International Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission (GDPR Art. 46(2)(c)).

8. Your Rights

Under GDPR and Norwegian law, you have the following rights regarding your personal data:

• Right of access (Art. 15): To obtain a copy of your data.
• Right to rectification (Art. 16): To correct inaccurate data.
• Right to erasure (Art. 17): To request deletion of your data where no longer necessary.
• Right to restriction (Art. 18): To limit processing in certain circumstances.
• Right to data portability (Art. 20): To receive your data in a structured, machine-readable format.
• Right to object (Art. 21): To object to processing based on legitimate interests.
• Right to withdraw consent: At any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at: infocenter-ask@shivlorntharol.world

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): www.datatilsynet.no

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. This includes HTTPS encryption, access controls, and regular security reviews.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated date at the top. We encourage you to review it periodically.

11. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us: