1. Introduction
Beststrcommodity ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website beststrcommodity.world and use our services.
We comply with the General Data Protection Regulation (GDPR) and applicable Norwegian data protection legislation (including the Norwegian Personal Data Act). Where processing requires your consent (for example, certain cookies/marketing), we will ask for it and you can withdraw it at any time.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Beststrcommodity
- Address: Står til venstre for inngangen til butikken, 6265 Vatne, Norway
- Email: hello@beststrcommodity.world
- Country: Norway
If you have privacy-related questions, want to exercise your rights, or want to raise a concern, you can contact us using the email above.
3. Information We Collect
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number (optional), and postal address when you place an order or contact us
- Order Information: Details about products you purchase, delivery information, and payment details
- Communication Data: Messages, inquiries, and correspondence you send to us
- Technical Data: IP address, browser type, device information, and browsing activity through cookies (see our Cookie Policy)
- Consent Records: Records of consents you have provided
We generally collect personal data directly from you (for example, when you place an order or contact us) and automatically when you use the website (for example, technical data collected via cookies or similar technologies).
4. How We Use Your Information
We use your personal data for the following purposes:
- To process and fulfill your orders
- To communicate with you about your orders and respond to inquiries
- To send you important updates about our services
- To improve our website, products, and services
- To comply with legal obligations
- To protect our rights and prevent fraud
If you choose not to provide certain information (for example, delivery details), we may be unable to provide the requested product or service.
5. Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our contract with you (e.g., order processing)
- Consent: Where you have given explicit consent for specific processing activities
- Legitimate Interests: Processing necessary for our legitimate business interests, provided they do not override your rights
- Legal Obligation: Processing required to comply with applicable laws
Where we rely on legitimate interests, we consider and balance our interests against your rights and freedoms, and you have the right to object (see Section 9).
6. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third-party companies that help us operate our business (e.g., payment processors, shipping and logistics partners, website hosting/infrastructure providers, IT support, analytics/advertising providers where you have consented)
- Legal Authorities: When required by law or to protect our legal rights
- Business Transfers: In connection with any merger, sale, or acquisition of our business
We do not sell your personal data to third parties for marketing purposes.
Where required, we enter into data processing agreements with service providers and require appropriate security and confidentiality measures.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order and transaction data: 5 years (for legal and accounting purposes)
- Marketing consent records: Until consent is withdrawn
- Customer inquiries: 2 years from last contact
- Website analytics data: 26 months
In some cases, we may retain data for a longer period if required to comply with legal obligations, resolve disputes, or enforce agreements.
8. Automated Decision-Making
We do not use your personal data for automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you.
9. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (subject to legal exceptions)
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Request transfer of your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at hello@beststrcommodity.world.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmission
- Secure data storage with access controls
- Regular security assessments and updates
- Employee training on data protection
11. International Data Transfers
If we or our service providers transfer your personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as an adequacy decision, Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms.
12. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.
13. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.
Datatilsynet contact details (Norway):
- Address: Postboks 458 Sentrum, 0105 Oslo, Norway
- Visiting address: Trelastgata 3, 0191 Oslo, Norway
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
15. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
- Email: hello@beststrcommodity.world
- Address: Står til venstre for inngangen til butikken, 6265 Vatne, Norway