Privacy Policy

Last updated: 1st January 2025

This Privacy Policy explains how Hellen Grundy (“we”, “our”, “us”) collects, uses, and protects your personal data when you visit our website and purchase our fine art products.

We are committed to protecting your privacy and handling your personal data in compliance with the General Data Protection Regulation (GDPR) and Norwegian privacy laws.

1. Data Controller

Hellen Grundy - Hellengrundy.com

Organisation number:

Registered address: Visteveien 58, 4071 Randaberg Norway.

Email: contact@hellengrundy.com

Phone: + 47 41315041

2. Personal Data We Collect

We collect the following types of personal data:

  • Order information – name, billing and delivery address, email, phone number, order details.

  • Payment information – processed securely by our payment providers; we do not store full card details.

  • Account information (if applicable) – username, password.

  • Communication data – emails or messages sent to us.

  • Technical data – IP address, browser type, device information, and cookies.

3. How We Use Your Data

We use your personal data for:

  • Processing and fulfilling orders.

  • Providing customer service and responding to enquiries.

  • Sending order confirmations and shipping updates.

  • Maintaining website security and preventing fraud.

  • Improving our website and services (analytics).

  • Sending marketing emails only if you have given explicit consent.

4. Legal Basis for Processing

We process your data based on:

  • Contract – to fulfil your order.

  • Legal obligation – to keep accounting records (Norwegian tax law).

  • Consent – for marketing and non-essential cookies.

  • Legitimate interests – to improve services and prevent fraud.

5. Sharing Your Data

We share personal data only with:

  • Payment processors (e.g., PayPal, Stripe, Klarna) to process your payment.

  • Delivery companies to ship your order.

  • IT and hosting providers who support our website.

  • Analytics providers (e.g., Google Analytics) – only with your cookie consent.

We never sell your personal data.

6. International Transfers

If we transfer your data outside the EEA, we ensure it is protected with GDPR-compliant safeguards (e.g., Standard Contractual Clauses).

7. Data Retention

  • Order records – kept for 5 years (Norwegian accounting rules).

  • Customer communications – kept for up to 2 years.

  • Marketing data – kept until you withdraw consent.

8. Your Rights

You have the right to:

  • Access your personal data.

  • Correct inaccurate data.

  • Request deletion (“right to be forgotten”).

  • Restrict processing.

  • Withdraw consent at any time.

  • Receive a copy of your data (data portability).

  • Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

To exercise your rights, email us at [Contact Email].

9. Cookies

We use cookies as described in our Cookie Policy. You can manage cookie preferences via our Cookie Settings link.

10. Data Security

We use secure HTTPS connections, strong encryption, and restricted access to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the “last updated” date.

12. Contact

If you have questions about your data or this policy, contact:

Hellen Grundy

Email: cintact@hellengrundy.com

Address: Visteveien 58, 4071 Randaberg, Norway.