LAST UPDATED: SEPTEMBER, 2025

This Privacy Policy outlines how VIDAR EYEWEAR, owned by Popart Design AS, collects, uses, processes, and protects your personal data.

We are committed to safeguarding your privacy and ensuring transparency in compliance with Norwegian data protection laws and the General Data Protection Regulation (GDPR).

CONTACT INFORMATION

Popart Design AS

Gaupemyrheia 35  

4790 Lillesand, Norway  

Vat identification number: 935208254

For questions or to exercise your data privacy rights, contact us at support@popartdesign.no

LOCAL LANGUAGE AND ACCESSIBILITY 

This policy is available in English. Request translations where required at support@popartdesign.no

PERSONAL DATA WE COLLECT

We collect and process the following categories of personal data:

• Identification Data: Full name, email address, phone number, billing/shipping address.
• Transaction Data: Payment details (e.g., card type, transaction amount), order history, and transaction records.
• Technical Data: IP address, browser type/version, device information, cookie data, and website interaction metrics (e.g., visit duration).
• Marketing Data: Email subscription status, marketing preferences, and interactions with promotional content.

PURPOSE OF DATA PROCESSING

We process your personal data for the following purposes:

• Fulfilling orders, processing payments, and delivering products.
• Responding to customer inquiries and providing support.
• Improving website functionality and user experience.
• Analysing website usage to enhance marketing strategies.
• Sending newsletters or promotional emails (with your explicit consent).
• Ensuring website security and preventing fraudulent activities.

If we plan to use your data for new purposes, we will notify you and, where required, obtain your consent.

LEGAL BASIS FOR DATA PROCESSING

We process personal data based on these legal grounds:

• Contractual Necessity: To fulfil your orders and deliver services (e.g., processing payments, shipping products).
• Consent: For marketing communications and non-essential cookies.
• Legal Obligations: To comply with Norwegian laws, such as bookkeeping regulations.
• Legitimate Interests: For website optimisation, fraud prevention, and analytics, provided your rights are not overridden.

Where providing data is mandatory (e.g., for order fulfilment), we will inform you of the consequences of not providing it.

DATA RETEENTION

We retain personal data only as long as necessary:

• Transaction Data: Kept for 5 years to comply with Norwegian bookkeeping laws.
• Marketing Data: Retained until you withdraw consent or the data is no longer relevant.
• Technical Data: Stored for up to 24 months from your last interaction.

Data no longer needed is securely deleted or anonymised.

SHARING PERSONAL DATA

We share your data with trusted third parties only to provide our services:

• E-commerce Platforms: Shopify for website hosting and payment processing.
• Analytics & Marketing Providers: Tools like Google Analytics, Google Ads, or Mailchimp for usage insights and promotions.
• Shipping Partners: Logistics providers for order delivery.

Third parties are contractually obligated to protect your data and comply with privacy laws. We do not sell your data or share it for third-party marketing.

INTERNATIONAL DATA TRANSFERS

Your data is primarily stored and processed within the European Economic Area (EEA). If transferred outside the EEA (e.g., to Shopify or Google servers), we ensure compliance through:

• Transfers to countries with adequate data protection (as recognised by the European Commission).
• Standard Contractual Clauses (SCCs) approved by the EU.
• Other safeguards as required by GDPR.

For customers located in the United States, your personal data may be transferred to and processed in countries outside of your jurisdiction, including Norway and other EEA countries, where privacy protections may differ. We ensure appropriate safeguards are in place as required by applicable data protection laws.

Shopify, our online store provider, employs a combination of contractual clauses and operational measures to comply with regional data transfer laws, including those in China, Thailand, Japan, and the UAE. They ensure compliance through Data Processing Addendums (DPAs), appropriate safeguards, and security protocols. 

DATA SECURITY

We use robust measures to protect your data, including:

• SSL encryption for website and data transfers (indicated by the padlock icon in your browser).
• Secure payment processing systems.
• Restricted internal access to personal data.
• Regular audits of security practices.

COOKIES

We use cookies to improve your browsing experience, deliver targeted ads, and analyse website traffic. You can manage cookie preferences via our website’s cookie settings. Disabling cookies may limit some website features.

YOUR DATA PRIVACY RIGHTS

Under GDPR and Norwegian law, you have the following rights:

• Access: Request details about the personal data we hold.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal exceptions (e.g., ongoing orders or legal obligations).
• Restriction: Request limited processing under certain conditions.
• Portability: Receive your data in a structured, machine-readable format or have it transferred to another provider.
• Objection: Object to data processing for marketing or legitimate interests.
  
  Withdraw Consent: Opt out of marketing or cookie usage at any time.

To exercise these rights, email support@popartdesign.no 

If you believe we’ve mishandled your data, you may contact the Norwegian Data Protection Authority (Datatilsynet).

DATA BREACH NOTIFICATIONS

If a data breach occurs that may impact your personal data, we will notify you and the Norwegian Data Protection Authority within 72 hours, as required by GDPR, and take steps to mitigate risks.

AUTOMATED DECISION-MAKING

We do not use your data for automated decision-making or profiling that significantly affects you. If this changes, we will inform you and provide an option to object.

AGE RESTRICTIONS

Customers under 18 must have parental or guardian consent to place orders or provide personal data.

In accordance with the U.S. Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 without verifiable parental consent.

RESALE POLICY

Items purchased from VIDAR EYEWEAR are for personal, non-commercial use only. We reserve the right to refuse orders that violate this policy.

COPYRIGHT

All website content is owned or licensed by Popart Design AS. You may use it for personal, non-commercial purposes only. Unauthorised redistribution is prohibited.

GOVERNING LAW

This Privacy Policy is governed by Norwegian law, with jurisdiction in Norwegian courts.

NOTICE TO U.S. CUSTOMERS (INCLUDING CALIFORNIA RESIDENTS)

If you are a U.S. resident, please note the following additional privacy disclosures:

We may collect, use, and disclose your personal information as outlined in this Privacy Policy. If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what categories of personal information we collect and the sources from which we collect it.
• Know the purpose for which we use your personal data.
• Know whether your personal data is sold or disclosed, and to whom.
• Access your personal information.
• Request deletion of your personal information.
• Not be discriminated against for exercising your privacy rights.

We do not sell your personal data. We only share your information with trusted service providers as necessary to operate our business (see "Sharing Personal Data").

To exercise your rights under CCPA (if applicable), please email us at support@popartdesign.no 

We may need to verify your identity before processing your request.

CHANGES TO THIS POLICY

We may update this policy periodically. The latest version will be posted on our website with the updated date. Please review it regularly.