Privacy policy

Data controller

Heidi's Krabbe (R-20-ES Heidi Hovland), Varbergveien 31, 4371 Egersund, Norway.

What we collect

The site has no account, cart or form. Visiting it asks nothing of you.

• Usage statistics from Google Analytics – only if you accept.
• Server logs with IP address, time and page.
• Your cookie choice, stored in your browser.

Cookies

Your choice is stored as “heidis-cookie-consent” in your browser and never sent to us. If you accept, Google Analytics 4 measures visits and page views. We never use cookies for advertising.

Change your choice at any time: Cookie settings

Third parties

We never sell data. These process it for us:

• Vercel – hosting and server logs.
• Google – analytics, and the map on the contact section, which receives your IP address.
• Meta – messages on Messenger and Instagram. Our links open Meta's pages, under Meta's privacy rules.

Orders

If you order by phone, Messenger or Instagram, we handle your name, contact details and the order itself – only to complete the agreement.

Grounds and retention

• Analytics: consent (GDPR article 6(1)(a)). Deleted after 14 months.
• Orders: contract (6(1)(b)). Kept as long as the agreement requires.
• Operation and security: legitimate interest (6(1)(f)). Logs deleted quickly.

Your rights

You can ask for access, correction, deletion, restriction or portability, object to the processing and withdraw consent. Get in touch and we will sort it out. Complaints go to the Norwegian Data Protection Authority.