1. What personal data is collected

Depending on how you use the website, ALM Creative AS may collect the following categories of personal data:

• Order information, such as your name, billing address, delivery address, email address, phone number, order details, and purchase history.

• Payment information, to the extent required to process payments through payment providers. Full card details are typically processed by the payment provider rather than stored directly by ALM Creative AS.

• Communications, such as messages sent by email, through contact forms, or through social media.

• Technical and website usage information, such as IP address, browser type, device information, pages visited, referral data, and interactions with the website, including information collected through cookies or similar technologies.

• Marketing information, such as whether you have subscribed to a newsletter or consented to receive marketing communications.

2. How personal data is collected

Personal data may be collected:

• directly from you when you place an order, contact the business, sign up to receive updates, or otherwise submit information;

• automatically when you use the website, including through cookies, analytics tools, and similar technologies; and

• from service providers involved in operating the website, processing payments, delivering orders, or managing communications.

3. Why personal data is used

ALM Creative AS uses personal data for the following purposes:

• to process and fulfil orders;

• to send order confirmations, shipping updates, and customer service communications;

• to respond to enquiries and provide support;

• to manage payments, prevent fraud, and maintain website security;

• to comply with legal, accounting, tax, and regulatory obligations;

• to improve the website, products, and customer experience; and

• where you have given consent, to send newsletters, updates, or other marketing communications.

4. Legal basis for processing

Where the GDPR applies, personal data is processed on one or more of the following legal bases:

• Performance of a contract: where processing is necessary to process and fulfil your order or respond to your request before entering into a contract.

• Legal obligation: where processing is necessary to comply with legal or regulatory requirements, including accounting and tax obligations.

• Legitimate interests: where processing is necessary for legitimate business interests, such as operating the website, preventing fraud, improving products and services, and handling customer communications, provided those interests are not overridden by your rights and interests.

• Consent: where you have given consent, for example to receive marketing emails or for certain cookies and similar technologies where consent is required.

You may withdraw consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Payment processing

Payments made through the website are processed by third-party payment providers, such as Stripe or other payment services made available at checkout.

ALM Creative AS does not generally store full payment card details. Payment providers process your payment information in accordance with their own privacy notices and security standards.

6. Shipping and order fulfilment

To fulfil and deliver orders, ALM Creative AS may share relevant personal data with third parties such as shipping carriers, fulfilment providers, and logistics services. This typically includes your name, delivery address, contact details, and order information to the extent necessary to complete delivery.

7. Website hosting, platform providers, and service providers

The Toolboks website may use third-party providers to host and operate the website and store, process payments, manage communications, analyse website traffic, or provide technical services. These providers may include, for example, Squarespace, payment processors, email providers, analytics providers, and delivery partners.

Personal data is shared with such providers only to the extent necessary for them to perform services on behalf of ALM Creative AS or where they act as independent controllers for their own services.

8. Cookies and similar technologies

The website may use cookies and similar technologies to enable core website functions, remember preferences, analyse website traffic, and improve the user experience.

Where required by law, non-essential cookies will be used only after valid consent has been obtained.

You can usually manage cookies through your browser settings, and where available through the site’s cookie banner or consent settings. For more detailed information about the cookies and technologies used on the site, ALM Creative AS may provide a separate cookie notice or cookie settings tool.

9. Marketing communications

If you subscribe to a newsletter or otherwise consent to receive marketing communications, ALM Creative AS may use your email address or other contact details to send product updates, launch news, or related communications.

You can opt out of marketing communications at any time by using the unsubscribe link in the message or by contacting hi@toolboks.space.

10. How long personal data is kept

Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy, including to fulfil orders, provide support, comply with legal obligations, resolve disputes, and enforce agreements.

Order and transaction records may be retained for as long as required under applicable accounting, tax, and bookkeeping laws. Communications and support records may be retained for a reasonable period where relevant to customer service or legal claims.

Where personal data is processed on the basis of consent, it will generally be kept until consent is withdrawn or the data is no longer needed for the relevant purpose.

11. Sharing of personal data

ALM Creative AS does not sell personal data.

Personal data may be shared with:

• website and e-commerce platform providers;

• payment processors;

• shipping and logistics providers;

• email and communication service providers;

• analytics and technical service providers;

• professional advisers, where necessary; and

• public authorities or other third parties where required by law or necessary to protect legal rights.

12. International transfers

Some service providers used by ALM Creative AS may process or store personal data outside Norway or the EEA.

Where personal data is transferred outside Norway or the EEA, ALM Creative AS will take steps required by applicable data protection law to ensure that appropriate safeguards are in place, such as the use of adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

13. Your rights

If you are located in Norway, the EEA, or another jurisdiction with applicable data protection rights, you may have the right to:

• request access to the personal data held about you;

• request correction of inaccurate or incomplete personal data;

• request deletion of your personal data, subject to legal exceptions;

• request restriction of processing in certain circumstances;

• object to certain processing, including processing based on legitimate interests and direct marketing;

• request data portability where applicable; and

• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact hi@toolboks.space.

You may also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or another competent supervisory authority.

14. Security

ALM Creative AS takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure, and absolute security cannot be guaranteed.

15. Third-party links

The website may contain links to third-party websites, services, or social media platforms. ALM Creative AS is not responsible for the privacy practices of those third parties. You should review their privacy notices before providing personal data to them.

16. Children

The website and products are not directed specifically to children, and ALM Creative AS does not knowingly collect personal data from children in violation of applicable law.

If you believe that personal data has been provided by a child in a way that violates applicable law, please contact hi@toolboks.space so that appropriate steps can be taken.

17. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, website functionality, business operations, or data processing practices.

The latest version will be published on the website with the updated effective date.

18. Contact

If you have questions about this Privacy Policy or how personal data is processed, please contact:

ALM Creative AS
Øverliveien 97
1290 Oslo
Norway

Email: hi@toolboks.space
Phone: +47 966 23 188