PRIVACY POLICY

Last updated: 15 November2025

This Privacy Policy explains how Toém Beauty ("we", "us", or "our") collects, uses, and protects your personal information when you visit and interact with our website www.toembeauty.com ("the Site"). We are committed to handling your data with transparency, respect and in accordance with applicable data protection laws.

1. Who We Are

North Atelier AS
Organization number: 931 322 664
Registered address: Skarholmvegen 133, 5302 Strusshamn, Norway

For the purposes of applicable data protection laws, North Atelier AS is the data controller of your personal data.

2. What Information We Collect

When you visit our Site or interact with us, we may collect the following types of information:

Personal data: such as your name, email address, postal address, phone number, and payment details
Order and transaction details: including purchased products and delivery preferences
Technical data: such as IP address, browser type, and device information
Usage data: including browsing history, page interactions, and preferences
Marketing preferences and communications

We only collect personal data that is necessary to fulfill your order, improve your experience, or comply with legal obligations.

We primarily collect personal data directly from you. In some cases, we may receive data from trusted service providers who process personal data on our behalf.

3. How We Use Your Information

We use your personal data for the following purposes:

To process and deliver your orders
To manage your customer account and provide customer service
To personalize your shopping experience
To send transactional and marketing communications (if you have opted in)
To improve our website, products, and services
To comply with legal and regulatory requirements

We will never sell your personal data to third parties.

4. Legal Basis for Processing

We process your data on one or more of the following legal grounds:

Your consent (e.g., for marketing communications)
The necessity of processing for contract performance (e.g., fulfilling an order)
Legal obligations (e.g., for tax or accounting purposes)
Legitimate interests, provided that these do not override your fundamental rights

5. How We Share Your Information

We may share your data with trusted third parties who assist us in providing our services, such as:

Payment providers (e.g., Klarna, Vipps,)
Shipping partners (e.g., Bring)
Email marketing platforms (if opted in)
IT and analytics service providers

These providers are only given access to the data necessary for their specific tasks and are required to handle it securely and in accordance with data protection laws.

Some of these service providers are located outside the European Economic Area (EEA). In such cases, we ensure your personal data is protected through safeguards such as the European Commission’s Standard Contractual Clauses.

6. Cookies and Tracking Technologies

Our Site uses cookies to enhance your browsing experience, analyze traffic, and support marketing efforts. For more information, please refer to our Cookie Policy.

7. Your Data Protection Rights

You have the right to:

Access the personal data we hold about you
Request correction or deletion of your data
Object to or restrict certain types of processing
Withdraw your consent at any time
Request a copy of your data in a portable format

To exercise your rights, please contact us.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, including any legal, accounting, or reporting requirements.

9. Security Measures

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us.