1. Data Controller

The data controller responsible for the processing of personal data in connection with this online store is:

Karolina Koprowska-Podgorska
Organisation number / Org.nr: 922714061
Dr. Dedichens vei 76
0675 Oslo, Norway
E-mail: kundeservice@byluna.shop
Phone: +47 929 75 323

2. What Personal Data We Collect

We may collect and process personal data when you visit our website, place an order, create an account, contact us, subscribe to marketing communication or use our services.

  • name and surname,
  • billing and shipping address,
  • e-mail address and phone number,
  • order details and purchase history,
  • payment status and invoice information,
  • IP address, device information and browser data,
  • cookie identifiers and website behaviour data,
  • messages sent through contact forms or customer service.

3. Why We Process Personal Data

We process personal data for the following purposes:

  • to process and deliver orders,
  • to handle payments, invoices and accounting obligations,
  • to provide customer service,
  • to respond to messages and enquiries,
  • to manage returns, complaints and warranty-related matters,
  • to improve the website, products and customer experience,
  • to prevent fraud, abuse and technical issues,
  • to send marketing communication, if you have given consent.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Contract: when processing is necessary to complete your order or provide customer service.
  • Legal obligation: when we are required to store accounting, tax or transaction information.
  • Legitimate interest: when we improve our services, secure the website or handle customer communication.
  • Consent: for marketing communication, analytics cookies and selected tracking tools such as Microsoft Clarity.

5. Payments

Payments are handled through secure third-party payment providers. We do not store full payment card details on our website.

Payment providers may process data such as payment method, transaction status, billing details and fraud-prevention information in order to complete the transaction.

6. Shipping and Delivery

To deliver your order, we may share necessary personal data with shipping and logistics providers.

This may include your name, delivery address, phone number, e-mail address and order reference.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to make the store work correctly, improve performance, remember preferences, analyse website traffic and support marketing activities.

Some cookies are necessary for the website to function, for example cart, checkout and account-related cookies. Other cookies, such as analytics and marketing cookies, are used only when you give consent where required.

8. Microsoft Clarity

We may use Microsoft Clarity to understand how visitors interact with our website. This helps us improve the design, usability and shopping experience.

Microsoft Clarity may collect information such as clicks, scrolling behaviour, visited pages, device information, browser type, approximate location and session interactions. This may be presented as heatmaps and session recordings.

We do not use Microsoft Clarity to intentionally collect sensitive personal data. Contact form fields, checkout fields and other sensitive areas should be masked or excluded where possible.

Microsoft Clarity should only run after the user has accepted analytics cookies or similar tracking consent, where such consent is required.

9. Marketing Communication

We may send marketing communication by e-mail or SMS only if you have given prior consent.

You can withdraw your consent at any time by using the unsubscribe link in the message or by contacting us directly.

10. Who We Share Data With

We may share personal data with trusted service providers when necessary to operate the online store and provide our services.

  • hosting and IT service providers,
  • payment providers,
  • shipping and delivery companies,
  • accounting and invoicing providers,
  • e-mail and customer communication tools,
  • analytics and website optimisation tools, including Microsoft Clarity, if used with consent.

We do not sell personal data to third parties.

11. International Transfers

Some service providers may process personal data outside Norway or the European Economic Area. If this happens, we ensure that appropriate safeguards are in place, such as standard contractual clauses or other legally approved transfer mechanisms.

12. How Long We Store Data

We store personal data only for as long as necessary for the purpose for which it was collected, or as required by law.

  • Order and accounting data may be stored for the period required by applicable accounting and tax laws.
  • Customer service messages are stored as long as necessary to handle the enquiry.
  • Marketing data is stored until consent is withdrawn.
  • Cookie and analytics data is stored according to the settings of the relevant tool and consent preferences.

13. Your Rights

You have the right to:

  • request access to your personal data,
  • request correction of incorrect or incomplete data,
  • request deletion of your personal data, where legally possible,
  • request restriction of processing,
  • object to processing based on legitimate interest,
  • withdraw consent at any time,
  • request data portability, where applicable.

To exercise your rights, please contact us using the contact details provided above.

14. Complaints

If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet
Website: www.datatilsynet.no

15. Data Security

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

Access to personal data is limited to persons and service providers who need it to perform their tasks.

16. Changes to This Policy

We may update this policy when necessary, for example due to changes in legal requirements, website functionality, tools or business operations.

The latest version will always be available on this website.