Last updated 1 July 2026
Privacy policy
How Comfyballs collects, uses, and protects your personal data when you shop with us.
Data controller
New Tonic AS, org. no. 927370301, Kjørbokollen 30 1337 SANDVIKA NORWAY, is the data controller for personal data processed through this store.
What we collect
The table below lists the categories of personal data we process, why, and for how long.
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Account data | Name, email, password hash | Create and secure your account | Until account deletion, plus 30 days |
| Order data | Billing and shipping address, order history | Fulfil orders and handle returns | 5 years, per the Bookkeeping Act (Bokføringsloven) |
| Payment data | Card token, payment status | Process payment and prevent fraud | Duration of the transaction; card tokens are held by our payment provider, not us |
| Usage data | Device, browser, pages viewed, cookies | Improve the store and measure traffic | 14 months |
| Marketing data | Newsletter opt-in, email click activity | Send the newsletter you subscribed to | Until you unsubscribe |
Your rights under GDPR
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — ask us to delete your data ("right to be forgotten")
- Restriction — limit how we use your data while a dispute is resolved
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest, including profiling
- Withdraw consent — withdraw marketing consent at any time, free of charge
Complaints
If you believe we have not handled your data correctly, you can lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority, at datatilsynet.no.
Contact
Privacy questions: privacy@comfyballs.example