Privacy policy
What we collect, why, and for how long.
DRAFT: needs review The Norwegian version is the authoritative one. The English text is a translation for convenience.
1. Controller
Yogutide AS · Org. no. 937 512 139 · info@yogutide.com
We are the controller for the personal data described below. Write to info@yogutide.com about anything on this page.
2. What we collect, and why
Newsletter and founding-fan signup. Your email address, your first name if you give it, and which form you signed up through, so we know what you asked for. We use it only to send the updates you asked for. Legal basis: consent, GDPR art. 6(1)(a). You can withdraw consent at any time by writing to info@yogutide.com. Retention: until you unsubscribe, and no longer than three years after your last interaction with us.
Earlier sign-ups collected through a Google Sheet form have been moved into our own database and deleted from Google.
Orders and pre-orders. Checkout runs on Shopify. Shopify collects your name, email address, phone number, delivery and billing address, order lines and payment status. Card details are handled by the payment provider; we never see or store them. When your order is created, Shopify sends us the order number, your name, email address, phone number, delivery address, order lines, amount, currency and payment status, and we store those in our own database so we can fulfil the order, count the Wave 01 run and contact you about it. Legal basis: performance of a contract, GDPR art. 6(1)(b). Retention: order and accounting records are kept for five years as required by the Norwegian Bookkeeping Act, GDPR art. 6(1)(c).
The contact form. Your name, email address, subject and message. We store the message and answer by email. Legal basis: legitimate interest in answering enquiries, GDPR art. 6(1)(f), or performance of a contract where the enquiry concerns an order. Retention: two years, or longer if the enquiry is part of a complaint case.
Technical logs. Our hosting and error reporting record technical request data, including IP address, browser type and any error message, so we can keep the site running and fix faults. Legal basis: legitimate interest in a secure, working website, GDPR art. 6(1)(f). Retention: normally 30 days.
Analytics. We do not run Google Analytics or any advertising or tracking script on this site.
3. Who processes data for us
Shopify (checkout, payment routing and order data), Lovable Cloud with Supabase (our database and transactional email) and Lovable error reporting (technical error logs). Each is bound by a data processing agreement. Some of them process data outside the EU/EEA, on the basis of the European Commission's standard contractual clauses. The typefaces on this site are served from our own site, so no font provider receives your IP address.
We do not sell personal data, and we do not share it for advertising.
4. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to receive it in a portable format, and to withdraw consent where consent is the basis. Write to info@yogutide.com and we answer within 30 days. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).