Privacy Policy
Last updated: 13/01/2026
This Privacy Policy explains how Nancy Yema collects, uses, stores, and protects personal data in accordance with Norwegian privacy laws and the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for processing your personal data is:
Nancy Yema
Gevingåsen 42
7517 Hell, Norway
Email: nancy@yema.no
Telephone: +47 452 78 844
Organization number: 932 871 629
2. Personal Data We Collect
We collect and process only the personal data necessary to provide our services, including:
- Full name
- Address
- Email address
- Telephone number
- Order and purchase details
- Payment method (note: we do not store payment card details)
Payment processing is handled securely by third-party providers such as Vipps and Klarna.
3. Purpose of Data Processing
Your personal data is processed for the following purposes:
- Processing and fulfilling orders
- Delivering products
- Sending order confirmations, invoices, and delivery updates
- Handling returns, complaints, and customer service inquiries
- Fulfilling legal and accounting obligations
We do not use your personal data for purposes beyond those stated above.
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Performance of a contract (order fulfillment)
- Compliance with legal obligations
- Legitimate interest in operating and improving our business
5. Sharing of Personal Data
Personal data may be shared only with trusted third parties when necessary, including:
- Payment providers (Vipps, Klarna)
- Shipping and logistics providers (e.g., postal services)
These parties receive only the information necessary to perform their services and are required to handle data securely.
We do not sell, rent, or share personal data with unauthorized third parties.
6. Storage and Security of Data
We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.
Personal data is stored only for as long as necessary to fulfill the purposes for which it was collected or as required by law.
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data, where legally permissible
- Object to or restrict processing of your data
- Request data portability
Requests related to your rights can be sent to
nancy@yema.no
8. Cookies
Our website may use cookies to ensure proper functionality and improve user experience. Cookies do not contain information that directly identifies you.
You can manage or disable cookies through your browser settings.
9. Confidentiality
All customer information is treated with strict confidentiality and handled with care. Access to personal data is limited to authorized persons only.
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy as required by changes in legislation or business practices. Any updates will be published on our website.
11. Contact Information
If you have questions about this Privacy Policy or how your personal data is handled, please contact us at nancy@yema.no.