Privacy Policy

At Norstol, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, how we store it, and what rights you have under applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Data Controller

The controller of your personal data is:

Rimarket LLC
Jurjevica 50
1310 Ribnica
Slovenia, European Union
VAT: SI41578562
Email: hello@norstol.com

2. Information We Collect

When you interact with our website or purchase products from Norstol, we may collect the following types of personal information:

  • Identification data: first name, last name.
  • Contact details: email address, phone number, billing and shipping address.
  • Transaction data: purchase details, order history, invoices.
  • Payment information: processed securely by our payment partners (we do not store full credit card details).
  • Technical data: IP address, browser type, device type, cookies, and website usage data.

3. How We Use Your Information

We use your data for the following purposes:

  • To process and deliver your orders.
  • To provide customer support and respond to your requests.
  • To send order confirmations, invoices, and updates.
  • To improve our website, products, and services.
  • To send promotional emails or newsletters, only if you have explicitly opted in.
  • To comply with legal and tax obligations.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Performance of a contract: to process and fulfill your order.
  • Legitimate interest: to improve our services, prevent fraud, and ensure website security.
  • Legal obligation: to comply with tax and accounting laws.
  • Consent: when you subscribe to our newsletter or agree to receive marketing communication.

5. Data Sharing

We respect your privacy and never sell your data. However, we may share your information with trusted third parties, including:

  • Payment service providers (e.g., Mollie) to process payments securely.
  • Shipping companies (e.g., GLS, DHL) to deliver your order.
  • IT and hosting providers who help maintain our website.
  • Professional advisors (e.g., accountants, legal advisors) to meet legal obligations.

All partners process your data only in accordance with GDPR and our instructions.

6. Data Retention

We will store your personal data only as long as necessary for the purposes stated above:

  • Order and transaction data: kept for 10 years (legal and tax obligation).
  • Customer support communication: kept for up to 3 years.
  • Marketing data: kept until you withdraw your consent.

After this period, your data will be securely deleted or anonymized.

7. Your Rights

Under GDPR, you have the following rights:

  • Right of access – to request a copy of your personal data.
  • Right to rectification – to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) – to request deletion of your data.
  • Right to restrict processing – to limit how we use your data.
  • Right to data portability – to request your data in a structured format.
  • Right to object – to stop receiving marketing emails or object to certain processing.
  • Right to withdraw consent – where consent is the legal basis.

To exercise your rights, contact us at hello@norstol.com. We will respond within 30 days.

8. Cookies

Our website uses cookies to improve user experience, track website usage, and enable essential features such as shopping cart functionality.

You can control cookie settings in your browser or disable non-essential cookies via our cookie banner.

9. Security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. Access to your data is restricted to authorized employees and service providers only.

10. Children’s Privacy

Our products are designed for children, but our website and services are directed to parents and legal guardians. We do not knowingly collect personal data from children under the age of 16. If we discover that such data has been provided, we will delete it immediately.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or in the way we process data. The latest version will always be available on our website.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Rimarket LLC
Jurjevica 50
1310 Ribnica
Slovenia, European Union
Email: hello@norstol.com