Privacy Policy

At Mocha the Cat, your privacy is important to us. This Privacy Policy explains how your personal information is collected, used, and shared when you visit or make a purchase from this website.

This online store is hosted by Shopify, which provides the ecommerce platform that allows us to sell our products to you.

1. Information We Collect

When you visit the website, place an order, contact us, or sign up for marketing communications, we may collect certain personal information.

This may include:

• Your name

• Billing address

• Shipping address

• Email address

• Telephone number, if provided

• Order and purchase information

• Payment-related information

• Communications you send to us

• IP address

• Browser and device information

• Information about how you interact with the website

• Cookie and similar technology information

We only collect information that is necessary to operate the shop, fulfil orders, communicate with customers, improve the website, comply with legal obligations, and provide services you have requested.

2. How We Use Your Information

We may use your personal information to:

• Process and fulfil your orders

• Arrange shipping and delivery

• Send order confirmations and shipping updates

• Communicate with you about your order

• Respond to questions or customer service requests

• Process returns and refunds

• Detect or prevent fraud and misuse

• Maintain accounting and tax records

• Improve the website and customer experience

• Send marketing emails if you have chosen to receive them

• Comply with applicable legal and regulatory requirements

We do not use your personal information for purposes that are unrelated to operating the business without an appropriate legal basis.

3. Legal Basis for Processing

Where the GDPR applies, we process your personal information under one or more of the following legal bases:

Contract
When your information is necessary to process an order, take payment, ship your products, handle returns, or otherwise fulfil our agreement with you.

Legal obligation
When we need to retain or process information to comply with accounting, tax, consumer protection, or other legal requirements.

Legitimate interests
When necessary to operate, protect, and improve the business and website, provided those interests do not override your privacy rights.

Consent
When you have specifically agreed to certain processing, such as receiving marketing emails or accepting certain optional cookies.

Where processing is based on consent, you may withdraw your consent at any time.

4. Shopify

Our online store is powered by Shopify.

Shopify processes certain personal information when you visit the store, place an order, use Shopify services such as Shop Pay, or otherwise interact with the website.

Shopify may process information such as your contact details, transaction information, device information, IP address, and information about your interactions with Shopify-powered stores.

For more information about how Shopify processes personal information, please see Shopify's Consumer Privacy Policy.

5. Payment Providers

Payments are processed through Shopify and/or the payment method you choose during checkout.

We do not receive or store your complete credit or debit card number.

Payment providers may process your personal information according to their own privacy policies and legal obligations.

6. Shipping Providers

When you place an order, we may share information necessary to deliver your package with postal and shipping providers.

This can include:

• Your name

• Shipping address

• Telephone number, where required

• Email address, where required for delivery notifications

• Information necessary for customs documentation

Orders are generally shipped using Posten Norge (Norway Post).

For international orders, relevant information may also be shared with customs authorities, postal operators, and delivery partners in the destination country where necessary to deliver your order or comply with customs requirements.

7. Email Marketing

If you choose to subscribe to our newsletter or other marketing emails, we may use your email address to send you news, product launches, special offers, shop updates, and other marketing communications.

Marketing emails are only sent where we have an appropriate legal basis to do so.

You can unsubscribe at any time by clicking the unsubscribe link at the bottom of a marketing email.

Unsubscribing from marketing emails will not prevent you from receiving essential transactional emails relating to an order you have placed.

8. Cookies and Similar Technologies

This website uses cookies and similar technologies.

Cookies may be used to:

• Keep the website functioning properly

• Remember your preferences

• Enable shopping cart and checkout features

• Understand how visitors use the website

• Measure website performance

• Prevent fraud and improve security

• Support analytics, advertising, or marketing where permitted

Some cookies are necessary for the website to function and cannot be switched off.

Where required by law, optional analytics, advertising, or marketing cookies will only be used after you have given your consent.

You can manage your cookie preferences using the cookie/privacy settings available on the website.

9. Analytics and Advertising

We may use Shopify or other service providers to understand how visitors use the website and to measure the effectiveness of marketing.

Depending on the services enabled on the website, these providers may collect information such as:

• IP address

• Device and browser information

• Pages viewed

• Products viewed

• Approximate location

• How you arrived at the website

• Interactions with advertisements or marketing campaigns

Where required, these technologies will only be activated after you have provided the appropriate consent.

10. When Your Information May Be Shared

We do not sell your personal information in the ordinary meaning of selling customer lists or contact details.

However, we may share information with service providers where necessary to operate the business.

These may include:

• Shopify

• Payment processors

• Shipping and postal providers

• Email marketing providers

• Website analytics providers

• Accounting or bookkeeping services

• IT and website service providers

• Government, tax, customs, or law-enforcement authorities where legally required

Service providers generally receive only the information necessary to perform their services.

11. International Data Transfers

Some of the companies that help operate this website may process personal information outside Norway or the European Economic Area (EEA).

For example, Shopify and some of its service providers operate internationally.

Where personal information is transferred outside the EEA, appropriate safeguards are used where required by applicable data protection law.

12. How Long We Keep Your Information

We keep personal information only for as long as necessary for the purposes for which it was collected.

Order and transaction information may need to be kept for several years to comply with Norwegian accounting, tax, and other legal requirements.

Customer service communications may also be retained where reasonably necessary to handle orders, disputes, legal obligations, or business records.

Marketing information is generally retained until you unsubscribe or withdraw your consent, unless there is another lawful reason to retain certain information.

13. Your Privacy Rights

If the GDPR or similar privacy legislation applies to you, you may have the right to:

• Request access to the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your information in certain circumstances

• Request restriction of processing

• Object to certain processing

• Request a copy of certain information in a portable format

• Withdraw consent where processing is based on consent

• Object to direct marketing at any time

These rights are not absolute and certain legal obligations may require us to retain some information.

If you would like to exercise any of these rights, please contact us using the contact details provided below.

14. Complaints

If you are concerned about how your personal information is being handled, please contact us first so we can try to resolve the issue.

You also have the right to submit a complaint to your local data protection authority.

In Norway, the relevant authority is Datatilsynet (The Norwegian Data Protection Authority).

15. Children's Privacy

This website and its products are not specifically directed at children for the purpose of collecting personal information.

We do not knowingly collect personal information directly from children where parental or guardian consent would be legally required.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the website, business practices, service providers, or legal requirements.

The most recent version will always be published on this page, together with the date it was last updated.

17. Contact

If you have questions about this Privacy Policy, would like to exercise your privacy rights, or have questions about how your personal information is handled, please contact us through the contact form on this website.