At bodypaint.no, distributed in Norway by Cosmenor AS, we are committed to protecting your privacy and handling your personal data with care, transparency, and respect.

This Privacy Policy explains how we collect and use your information when you visit www.bodypaint.no or interact with our services.

Cosmenor AS is responsible for the processing of your personal data.

Cosmenor AS
Solbråveien 23, 1383 Asker, Norway
Org. no: 996 047 466 VAT
Email: post@cosmenor.no
Phone: +47 22 20 99 90

We collect only the information necessary to provide you with a seamless and personalized experience.

Information you provide

When you interact with us, we may collect:

• Name and contact details

• Delivery and billing address

• Payment-related information (handled securely by our partners)

• Account details and preferences

• Messages or inquiries

Information related to your purchases

• Order history and transaction details

• Delivery and order tracking information

Optional information

Depending on how you engage with us, you may also choose to share:

• Product preferences and reviews

• Participation in events, promotions, or surveys

• Information about your preferred salon partner

If you voluntarily inform us about product reactions or sensitivities, we handle such information with particular care and only for customer safety purposes.

We use your information to deliver a thoughtful and reliable customer experience:

• To process and deliver your orders

• To handle payments securely

• To provide customer support

• To communicate relevant updates, offers, and inspiration (with your consent)

• To improve our products, services, and website

• To manage promotions, events, and customer programs

• To meet our legal and regulatory obligations

We process your personal data in accordance with the General Data Protection Regulation based on:

• Your agreement with us (when you make a purchase)

• Legal obligations (such as accounting requirements)

• Our legitimate interest in improving our services

• Your consent (for marketing and optional services)

To ensure secure and flexible payments, we work with trusted partners:

• Klarna AB

• Vipps AS

• Card payment providers

These partners process payment information independently under their own privacy policies.

To deliver a modern and reliable digital experience, we collaborate with carefully selected partners:

• Our website is hosted by Wix.com Ltd.

• Technical development and maintenance are provided by Mayu Technologies

Where data is processed outside the EU/EEA, we ensure appropriate safeguards, including standard contractual protections and transfers to approved jurisdictions.

We use cookies and similar technologies to enhance your experience, remember your preferences, and understand how our website is used.

You can manage your cookie preferences at any time.

We share your data only when necessary and always with care.

This may include:

• Delivery and logistics partners

• Payment providers

• Technology and service providers

• Authorities where required by law

We never sell your personal data.

We retain your information only for as long as necessary:

• Order and accounting data: up to 5 years

• Customer service interactions: as needed

• Marketing data: until you withdraw consent

We take data security seriously and apply appropriate technical and organizational measures to protect your information.

All payment transactions are encrypted, and access to personal data is restricted.

While no system is entirely risk-free, we continuously work to safeguard your information.

You remain in control of your personal data. Under the General Data Protection Regulation, you have the right to:

• Access the information we hold about you

• Correct inaccurate or incomplete data

• Request deletion of your data

• Restrict or object to certain types of processing

• Receive your data in a portable format

• Withdraw consent at any time (without affecting prior processing)

We do not carry out automated decision-making that has legal or significant effects. To exercise your rights, please contact us at post@cosmenor.no.
We will respond within one month and may ask you to verify your identity.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The latest version will always be available on our website.