Privacy policy

Welcome to Parsley & Me and our website and shop at www.parsleyandme.com. This Privacy and Cookie Policy describes our practices for collecting, using, protecting and disclosing the Personal Data we collect from you when you visit our website and use our services.

General Information

What law applies?

In principle, we will only use your Personal Data in accordance with the applicable data protection laws, in particular Norway`s Personal Data Act (personopplysningsloven) (“PDA”) and the EU`s counterpart the General Data Protection Regulation (“GDPR”).

What is Personal Data?

Personal Data is any information relating to personal or material circumstances that relates to an identified or identifiable individual. This includes, for example, your name, date of birth, e-mail address, postal address, or telephone number as well as online identifiers such as your IP address. 

What is processing?

"Processing" means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means. The term is broad and covers virtually any handling of data.

Who is responsible for data processing?

A “data controller” is a person or organization who alone or jointly determines the purposes for which, and the manner in which, any personal data is, or is likely to be, processed. In this sense, Skjoldmøy AS of Høvikvegen 136, 6694 Foldfjorden, Norway (“Parsley & Me”, “we”, “us”, “our”) is the data controller. If you have any questions about data protection at Parsley & Me in general, you can reach us by email using info@parsleyandme.com or call us on +47 477 63 181.

What are the legal bases of processing?

In accordance with the PDA and the GDPR, we have to have at least one of the following legal bases to process your Personal Data:

  • Consent – This is where we have asked you to provide explicit permission to process your data for a particular purpose.
  • Contract – This is where we process your information to fulfill a contractual arrangement we have made with you or reply to your messages, e-mails, posts, calls, etc.
  • Legitimate Interests – This is where we rely on our interests as a reason for processing, generally this is to provide you with the best products and service in the most secure and appropriate way. Of course, before relying on any of those legitimate interests we balance them against your interests and make sure they are compelling enough and will not cause any unwarranted harm.
  • Legal Obligation – This is where we have a statutory or other legal obligation to process the information, such as for archiving or the investigation of crime.

Data We Collect Automatically

Log data

When you access and use our website, we collect the Personal Data that your browser automatically transmits to our server. This is technically necessary for us to display our website and to ensure its stability and security. In this sense, we collect the following data: i) IP address of the requesting computer, ii) Date and time of access, iii) name and URL of the file accessed, iv) website from which the access was made (referrer URL), v) browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The legal basis is our legitimate interest.

Hosting of our website and shop

We use the hosting services of Shopify International Limited, (150 Elgin Street 8th Floor Ottawa, ON K2P 1L4 Canada), for the purpose of hosting and displaying our website and shop. Shopify does so on the basis of processing on our behalf, and that also means that all data collected on our website and shop is processed on Shopify's servers. The basis for processing is our legitimate interest, and the initiation and/or fulfillment of a contract.

Links to other websites

Please note that if you use a link from our website to a third-party website, that third-party may also set new cookies that are not covered by this policy. In such cases, we recommend that you read the cookie policy on the third-party website itself.

hCaptcha

We use hCaptcha by Intuition Machines Inc, (350 Alabama St, #10, San Francisco, CA 94110, USA). The purpose of hCaptcha is to check whether the data input on our websites is made by a human being or by an automated programme. hCaptcha also protects our users from SPAM when using our contact form. For this purpose, hCaptcha analyzes the behavior of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as you enter our website. For the analysis, hCaptcha evaluates various information (e.g., IP address, time spent by the website visitor on the website or mouse movements made by the user). The basis for processing is our legitimate interest.

Cookies

Why do we have a cookie policy?

In accordance with Norway’s Electronic Communications Act § 2-7b and the EU`s Privacy and Electronic Communications Directive (“PECD”), we need to inform you about the cookies we use and obtain your consent when using certain types of cookies namely Functional, Performance, Analytics and Advertising Cookies.

What is a cookie?

Cookies are text files containing small amounts of information which are downloaded to your device (e.g. computer, smartphone, electronic device which accesses the internet) when you visit a website. Cookies can be useful because they allow a website to recognize a user’s device, preferences and generally help to improve your online experience.

What types of cookies do we use?

There are three types of cookies that we use, Necessary Cookies, Analytics Cookies and Marketing Cookies. These cookies perform different functions as explained below above the relevant cookies sections.

  • Necessary Cookies:
    Necessary cookies are essential in order to provide you with the services you request on our website and in order that we can comply with legal obligations. We do not need to ask for your consent in order to use these cookies as without them we would not be able to provide the services requested by you. These are always active on the Website.

  • Analytics cookies:
    Analytics cookies collect information about things like how many people visit our Website, what parts of the Website people look at and how many new visitors we have to the Website. These cookies help us to monitor how effective our Website is and to improve it, tailoring it to our visitors. Analytics cookies are only used if you consent to it in our Cookie Consent Tool.

  • Marketing/Advertising Cookies:
    Marketing cookies help us provide you with personalized and relevant services or advertising, and track the effectiveness of our digital marketing activities. They are capable of tracking your browser across other websites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. Advertising cookies are only used if you consent to it in the Cookie Consent Tool.

Consent

Necessary Cookies will always be active on your device, but we ask for your consent to place Analytics and Advertising Cookies and other similar technologies on your device. If at any time you want to change your cookie settings, including withdrawing your consent to this processing, we would encourage you to do this via the links below. You may need to refresh the page before the changes to the settings take effect.

The cookies we use

⦁ Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, US, und Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics also uses cookies to enable our website to analyze how users use our website across multiple devices. The information generated by the cookies about your use of our website is transmitted to and stored by Google, including transmission to the United States. The following data is processed through the use of Google Analytics:

  • 3 bytes of the IP address of the called system of the website visitor (anonymized IP address),
  • the website called up,
  • the website from which the user reached the accessed page of our website (referrer),
  • the subpages accessed from the website,
  • the time spent on the website
  • the frequency with which the website is accessed.

Google states that it will not associate your IP address with any other data held by Google. The use of this service is based on your consent.

⦁ Shopify Analytics

We use Shopify Analytics by Shopify: Shopify Analytics uses cookies, which are text files placed on your device, to help the website analyze how users use our website. The information generated by these cookies, such as the time, place, and frequency of your website visit, including your IP address, is transmitted to Shopify and stored there. In this case, your IP address will already be shortened by Shopify and thus anonymized.

Shopify will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Shopify may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Shopify's behalf. The use of this service is based on your consent.

How to block cookies and the consequences of this

If you want to block all cookies, you may be able to do this through the settings in your browser for each browser you use and each device you use to access the internet (Google Chrome, Mozilla Firefox, Microsoft Edge, Opera, Safari).

We also offer a Cookie Consent Tool when you first visit our website. This tool allows you to specify your preference about cookies. You can accept or reject them or access this Cookie Policy before giving your consent to cookies or rejecting them. This permits you to make an informed decision about the cookies we use. You are free to accept or reject cookies, but note that after rejecting them, browsing our website might be less user-friendly and the relevant content might be affected.

In addition, if you do not wish to participate in advertising personalization or retargeting/tracking you can object to behavioral advertising at the following websites: Your Online Choices, Digital Advertising Alliance of Canada, Network Advertising Initiative, AdChoices the European Interactive Digital Advertising Alliance (Europe only), and Google Ad Settings.

Data We Collect Directly

Contacting us

If you contact us, we store and process the following data from you: Name, e-mail address, telephone number as well as other Personal Data that you provide when contacting us. This data is collected and processed exclusively for the purpose of contacting you and processing your request and then deleted, provided there is no legal obligation to retain it. The legal bases for processing are contract and our legitimate interest.

Shopping with us

We process your first name, last name, e-mail address, billing and shipping address for the delivery of your order and the data related to your contract with us to handle the contractual relationship. The legal basis for processing is the provision of a contractual service.

Account Registration

It is also possible for you to register for an account. For this purpose, you can choose a password together with your email address, both of which will enable you to log in more easily without having to enter your data again when you make a future purchase or access our other content such as the blog or forum. We will hold your data as long as you have your account with us. The legal basis for processing is the provision or initiation of a contractual service and your consent.

When making a purchase

To make a purchase, you may need to provide a valid payment method (e.g., credit card). Your payment information will be collected and processed by our authorized payment vendor PayPal (Europe) (S.a.r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg). We do not directly collect or store credit or debit card numbers ourselves in the ordinary course of processing transactions. The legal basis for the provision of a payment system is the establishment and implementation of the contract.

Administration, financial accounting, office organization, contact management

We process data in the context of administrative tasks as well as organization of our business, and compliance with legal obligations, such as archiving. In this regard, we process the same data that we process in the course of providing our services including your donations. The processing bases are our legal obligations and our legitimate interest.

Promotional use of your data

We use your data within the legally permissible scope for marketing purposes, e.g., to draw your attention to special promotions and discount offers. In addition, we may draw your attention to comparable offers by email, e.g., we may inform you about exclusive sales, promotions, or special events. The legal basis for processing is our legitimate interest.

Aggregated Data

We may also process some information from aggregated data such as statistical or demographic data for any purpose including improving our website and services. Aggregated Data could be derived from your Personal Data but is not considered Personal Data in law as this data will not directly or indirectly reveal your identity. However, if we combine or connect Aggregated Data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this privacy policy.

arketing

Insofar as you have given us your separate consent to process your data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.

You may give us your consent in a number of ways including by selecting a box on a form where we seek your permission to send you marketing information, or sometimes your consent is implied from your interactions or contractual relationship with us. Where your consent is implied, it is on the basis that you would have a reasonable expectation of receiving a marketing communication based on your interactions or contractual relationship with us.

Direct Marketing generally takes the form of email but may also include other less traditional or emerging channels. These forms of contact will be managed by us, or by our contracted service providers. Every directly addressed marketing sent or made by us or on our behalf will include a means by which you may unsubscribe or opt out.

Advertising

We would like to show you interesting advertising outside of our website and use various third-party tools and cookies for this purpose. These collect and process information about your activities on our website - for example, which products you are interested in or which pages you visit. By knowing what you are looking for and how you use our website, we can adapt our advertising to your needs. And thus increase the likelihood that you will also be shown suitable and interesting advertising outside our website.

We also analyze this data to evaluate the relevance of the advertisements and to optimize the advertisements for you. Through the tools, your browser regularly establishes a connection to the server of the tool provider when you visit our website. For some tools, we have no direct influence on what data is processed by the providers. The following personal data may be processed by third-party providers i) HTTP header information (e.g., IP address, web browser, website URL, date and time); ii) measuring pixel-specific data (e.g., pixel ID and cookie ID); and iii) additional information about visits to our website (e.g., orders placed, products clicked on). The legal bases for processing are our legitimate interest and your consent in case of cookies. For further information, please refer to our Cookie Policy.

Social Media

General

We are present on social media (Facebook, Instagram, YouTube (Google LLC), TikTok, and X (formerly Twitter) and if you contact or connect with us via social media websites, we and the relevant social media website are jointly responsible for the processing of your data and enter into a so-called joint controller agreement. The legal basis is our legitimate interest, your consent or, in some cases, the initiation of a contract.

When you visit our profiles and interact with us and others

When you visit our social media profiles, we, as the operator of the profile, process your actions and interactions with our profile (e.g., the content of your messages, enquiries, posts or comments that you send to us or leave on our profile or when you like or share our posts) as well as your publicly viewable profile data (e.g., your name and profile picture).

Which Personal Data from your profile is publicly viewable depends on your profile settings, which you can adjust yourself in the settings of your social media account.

Please take care not to transmit or share sensitive data or confidential information (e.g., application documents, bank or payment data) via social media platforms; we recommend that you use a more secure means of transmission (e.g. email).

Principles Of Processing Personal Data

Storage and Retention

As far as necessary, we process and store your Personal Data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract.

In addition, we are subject to various storage and documentation obligations, which result from the minimum statutory retention periods in accordance with Norway’s Commercial and Fiscal Code, among others. The retention and documentation periods specified vary between two to ten years.

Security

Our website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us. We have also implemented numerous security measures (“technical and organizational measures”) for example encryption or need to know access, to ensure the most complete protection of Personal Data processed through our website.

Sharing and Disclosure

We will not disclose or otherwise distribute your Personal Data to third parties unless this is a) necessary for the performance of our services including our Nepal based Manufacturer and their selected shipping forwarder and, b) you have consented to the disclosure, c) or if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or other legal proceedings; or proceedings at home or abroad or to fulfill our legitimate interests.

International Transfer

We may transfer your Personal Data to other companies as necessary for the purposes described in this Privacy Policy. In order to provide adequate protection for your Personal Data when it is transferred, we have contractual arrangements regarding such transfers. We take all reasonable technical and organizational measures to protect the Personal Data we transfer.

Your Rights And Privileges

Privacy rights

Under the PDA and the GDPR, you can exercise the following rights:

  • Right to information
  • Right to rectification
  • Right to deletion
  • Right to data portability
  • Right of objection
  • Right to withdraw consent
  • Right to complain to a supervisory authority
  • Right not to be subject to a decision based solely on automated processing.

If you have any questions about the nature of the Personal Data we hold about you, or if you wish to exercise any of your rights, please contact us.

Updating your information and withdrawing your consent

If you believe that the information we hold about you is inaccurate or request its rectification, deletion, or object to legitimate interest processing, please do so by contacting us.

Access Request

In the event you want to make a Data Subject Access Request, please contact us. We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days, we will tell you why and when we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we will tell you why.

Complaint to a supervisory authority

You have the right to complain about our processing of Personal Data to a supervisory authority responsible for data protection. The supervisory authority in Norway is: The Norwegian Data Protection Authority (Datatilsynet), Trelastgata 3, 0191 Oslo, Norway, (www.datatilsynet.no).

However, we would appreciate the opportunity to address your concerns before you contact Datatilsynet.

What we do not do

  • We do not request Personal Data from minors and children;
  • We do not process special category data without obtaining prior specific consent; and
  • We do not use Automated decision-making including profiling;

Validity And Questions

This Privacy Policy was last updated on Wednesday, 7th of August 2024, and is the current and valid version. However, from time to time changes or a revision to this policy may be necessary.

If you feel that the above is not sufficient or if you have any queries as regards the collection, processing or use of your information we are looking forward to hearing from you. We will make every effort to reply as soon as possible and take into consideration any suggestions from your end.