Privacy policy

Last updated: December 2025

1. Introduction

This Privacy Policy explains how MICRO KAFFI AS ("we", "us", "our") collects, uses, and protects your personal data. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

2. Data Controller

The data controller responsible for your personal data is:

  • Company: MICRO KAFFI AS

  • Organisation Number: 926 434 888

  • Address: Langgata 8, 4013 Stavanger, Norway

  • Email: post@microkaffi.com

  • Phone: +47 921 79 342

3. What Personal Data We Collect

We collect the following categories of personal data when you make a purchase or interact with our website:

Identity and Contact Data:

  • Name

  • Email address

  • Phone number

  • Shipping address

  • Billing address

Transaction Data:

  • Order history

  • Payment information (processed securely by our payment provider; we do not store full card details)

Technical Data:

  • IP address

  • Browser type and version

  • Device information

  • Cookies and similar technologies

4. How We Use Your Data

We process your personal data for the following purposes:

PURPOSE LEGAL BASIS
Processing and fulfilling your orders Performance of contract
Sending order confirmations and shipping updates Performance of contract
Customer service and support Legitimate interest
Sending marketing emails (only with your consent) Consent
Improving our website and services Legitimate interest
Preventing fraud Legitimate interest
Complying with legal obligations (e.g., accounting) Legal obligation

5. Data Sharing

We share your personal data only with trusted third parties who help us operate our business:

  • Shopify: Our e-commerce platform provider

  • Payment processors: To process payments securely (Visa, Mastercard)

  • Shipping providers: To deliver your orders (e.g., Posten, Bring)

  • Email service providers: To send order confirmations and marketing (with consent)

We do not sell your personal data to third parties.

All our service providers are contractually bound to protect your data and may only process it according to our instructions.

6. International Transfers

Your data may be processed outside the European Economic Area (EEA) by some of our service providers (e.g., Shopify operates servers in Canada and the USA).

Such transfers are protected by:

  • EU Standard Contractual Clauses

  • Adequacy decisions by the European Commission where applicable

  • Other appropriate safeguards as required by GDPR

7. Data Retention

We retain your personal data for the following periods:

  • Order and transaction data: 5 years (Norwegian accounting requirements under Bokføringsloven)

  • Marketing preferences: Until you withdraw consent

  • Technical data (logs, cookies): Up to 12 months

  • Customer service communications: 2 years

After these periods, your data will be securely deleted or anonymised.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you

  • Right to Rectification: Request correction of inaccurate or incomplete data

  • Right to Erasure: Request deletion of your data ("right to be forgotten")

  • Right to Restrict Processing: Request limitation of how we use your data

  • Right to Data Portability: Receive your data in a structured, commonly used format

  • Right to Object: Object to processing based on legitimate interest

  • Right to Withdraw Consent: Withdraw marketing consent at any time

To exercise any of these rights, contact us at post@microkaffi.com. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies to:

  • Essential cookies: Enable core website functionality (shopping cart, checkout)

  • Preference cookies: Remember your settings and preferences

  • Analytics cookies: Understand how visitors use our website (with consent)

  • Marketing cookies: Deliver relevant advertisements (with consent)

You can manage cookie preferences through:

For more information, see our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • SSL/TLS encryption for all data transmission

  • Secure payment processing (PCI DSS compliant)

  • Access controls and authentication

  • Regular security reviews

11. Children's Privacy

Our website is not intended for children under 18 years of age. We do not knowingly collect personal data from children.

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website with the "Last updated" date at the top. Significant changes will be communicated via email.

This privacy policy applies to all personal data processed by MICRO KAFFI AS through www.microkaffi.com.