Privacy Policy

Nate’s Pickles AS (“we”, “us”) is the data controller for personal information processed through natespickles.no. This policy explains what we collect, why, who we share it with, and the rights you have under the GDPR and Norwegian Personal Data Act (personopplysningsloven).

Questions? hei@natespickles.no.

What we collect

• Account info: email address (for magic-link sign-in)
• Customer profile: business name, organisation number, contact name + role, phone, delivery and billing addresses — captured at checkout
• Order history: what you bought, when, where it shipped, payment method (Two invoice), order status
• Subscription history: standing orders you set up, changes you made, delivery dates
• Communications: tasting requests, wholesale inquiries, claims you file
• Operational: IP address at sign-in, basic browser information for security purposes

We do not store payment card numbers or Two credit data — those live with the payment provider.

Why we collect it

• Fulfill your order (legal basis: performance of a contract — GDPR Art. 6(1)(b))
• Authenticate you on return visits (same basis)
• Send transactional emails — order confirmations, shipment status, subscription notifications (same basis)
• Norwegian bookkeeping law requires us to retain order and financial records for 5 years (legal obligation — Art. 6(1)(c), Bokføringsloven § 13)
• Analytics only if you accept analytics cookies — gated by consent (Art. 6(1)(a))

Who we share it with

We use a small set of processors. Each has signed a Data Processing Agreement with us and stores EU data in EU regions where possible.

• Vercel (United States, with EU regions) — hosting
• Neon (Frankfurt) — Postgres database
• Resend (EU region) — transactional email delivery
• Two (Norway/EU) — invoicing, credit underwriting
• Sentry (EU region) — error monitoring, with PII scrubbing
• PostHog (EU region, eu.posthog.com) — analytics, loaded only if you accept analytics cookies
• Vercel Blob (EU region) — file storage (e.g. claim photo uploads)

We do not sell your data. We do not share it for marketing purposes. We share with the payment providers and the accounting tool (Fiken / Tripletex, when wired) because we have to issue you invoices and receipts.

How long we keep it

• Orders, invoices, receipts: 5 years after the order (Norwegian Bokføringsloven)
• Customer profile + subscriptions: until you ask us to delete, or 24 months after your last order
• Tasting requests / wholesale inquiries: 12 months after final status (passed / converted)
• Claims: 3 years for liability record-keeping
• Web analytics events: 90 days
• Server logs: 30 days

Your rights

Under the GDPR you have the right to:

• Access the data we hold about you — use the export tool while signed in, or email us
• Correct inaccurate data — use your profile page
• Delete your account — use the delete tool. Order history stays in our books anonymized (Bokføringsloven).
• Objectto processing for marketing — we don’t send marketing in v1, but you can ask anyway
• Port your data — the export tool returns JSON
• Complainto Datatilsynet (the Norwegian Data Protection Authority) if you think we’ve mishandled your data

Cookies

See our Cookie Policy for the cookies we set and how to control them.

International transfers

Some processors (Vercel, Resend, Sentry, PostHog) are headquartered in the United States. We require EU regions where available and rely on Standard Contractual Clauses (SCCs) signed with each for any data transfer outside the EEA.

Children

Our service is for businesses and adults purchasing food products. We do not knowingly collect data from anyone under 16.

Changes

We’ll update the “Last updated” date at the top of this page when we change anything material. For subscription customers we’ll email you about changes that affect you.

Contact

Email hei@natespickles.no. Org. nr. (to be filled in once Nate’s Pickles AS is registered). Postal address: Oslo, Norway.