Privacy policy

Last updated 9 October 2026

Introduction

We value your privacy and process your personal data in accordance with the Norwegian Personal Data Act and the General Data Protection Regulation (EU) 2016/679 ("GDPR").

This policy applies when you visit chiaro.no and its subdomains (the "Website"), shop in our online store, create a customer account, sign up for our newsletter or contact us.

Chiaro is run by Hudcová Studio, a sole proprietorship with organisation number 938 358 222. Hudcová Studio is the data controller for the personal data described here.

Contact:
Hudcová Studio
Vekslerfaret 41
1396 Billingstad
Norway
Email: kontakt@chiaro.no

We do not collect personal data from persons under 16 without the consent of a parent or guardian. If you are under 16, please ask a parent or guardian to shop for you.

Please read this policy together with our Terms of Use, Terms of Sale and Cookie Policy.

What data we collect, and why

Customers and customer accounts

When you place an order, we process:

name and delivery address
email address and, if provided, phone number
order information and order history
payment status. Card details themselves are handled by the payment provider, and we do not have access to or store them.

We use the data to:

receive, process and deliver your order
send order confirmation, tracking and other information about your order
handle returns, withdrawals and complaints
respond to enquiries
meet our accounting and bookkeeping obligations

If you create a customer account, we store your email address and order history so that you can see your orders. You log in with a code sent to your email.

Newsletter and marketing

We only send newsletters and offers if you have signed up and given your consent. We then process your email address and may record whether you open and click in the emails. You can unsubscribe at any time via the link at the bottom of every email.

Website visitors

When you visit the Website, we and our providers may process technical information such as IP address, browser, device, which pages you view and how you arrive at the Website. We use cookies and similar technologies for this. Read more in our Cookie Policy. We only use statistics and marketing cookies if you have given your consent.

Your approximate location, derived from your IP address, may be used to show the correct country, language and currency. Your choice is stored in a cookie in your browser.

Enquiries

When you write to us, we process your name, email address and the content of your message so that we can reply.

Suppliers and partners

We process contact details of contact persons at suppliers and partners in order to place orders and pay invoices.

Legal basis

We process your personal data on one or more of the following bases:

It is necessary to perform a contract with you, for example to deliver an order.
It is necessary to comply with a legal obligation, for example the Norwegian Bookkeeping Act.
It is necessary for our legitimate interests, for example to prevent fraud and improve the Website.
You have given your consent, for example to newsletters and marketing cookies. You can withdraw your consent at any time.

Who do we share data with?

We do not sell personal data. We only share it with those who need it for us to provide our service:

Shopify, which provides our online store platform
payment providers, such as Vipps, Klarna and card payment via Shopify
carriers, such as Posten, PostNord and HeltHjem, who receive your name, address and contact details to deliver the parcel
Google, if you use services linked to ads, product display and statistics
accounting and IT providers where necessary
public authorities where required by law

We have agreements in place to ensure that providers process the data securely and only use it according to our instructions.

Some providers may process data outside the EEA. In such cases we ensure the transfer has a valid basis under the GDPR, for example the EU Standard Contractual Clauses or equivalent safeguards.

If the business is sold or transferred, personal data may be transferred to the new owner.

How long do we keep the data?

We only keep personal data for as long as necessary:

Order and accounting data: at least five years, under the Bookkeeping Act.
Customer service enquiries: normally up to two years.
Newsletter: until you unsubscribe.
Customer account: until you ask us to delete it, or the account has been inactive for a long time.
Statistics data: up to 24 months.

Security

We use technical and organisational measures to protect the data against misuse, loss and unauthorised access. All payments are made over an encrypted connection. If you suspect misuse, contact us at kontakt@chiaro.no.

Your rights

You have the right to:

access the data we hold about you
have inaccurate data corrected
have your data erased ("the right to be forgotten")
restrict or object to the processing
withdraw your consent at any time
receive your data in a common machine-readable format (data portability)

Send an email to kontakt@chiaro.no to exercise your rights. We will reply within one month. The deadline may be extended by two months in complex cases, and you will be notified if so.

Complaints

If you believe we are processing your personal data in breach of the rules, please contact us first so we can try to resolve the matter. You can also complain to the Norwegian Data Protection Authority (datatilsynet.no) or to the supervisory authority in the country where you live.

Changes

We may update this policy. The latest version is always available on the Website, and the date at the top shows when it was last changed.

This is a translation. In the event of any discrepancy, the Norwegian version applies.