Privacy policy

Last updated: 29 September 2026

This policy explains what personal data Color Vision AS collects, why, how long it is kept, who it is shared with, and the rights you have.

Who is responsible

Color Vision AS is the data controller for the personal data described here.
Organisation number: 916 206 682
Address: Nye Sandviksveien 69B, 5032 Bergen, Norway
Contact: hello@colorvisionofficial.com

What is collected, why, and on what legal basis

Orders and customer accounts. Name, delivery and billing address, email, phone number and order history, used to process, deliver and follow up your order, returns and your account. Card details are handled by the payment provider and are never stored by Color Vision. Legal basis: performance of a contract (GDPR article 6(1)(b)).

Made-to-measure orders. The body measurements you provide, used to make your garment and shared with the atelier in Italy that makes it. Legal basis: performance of a contract.

Accounting. Order and payment records, kept to meet the Norwegian Bookkeeping Act. Legal basis: legal obligation (article 6(1)(c)).

Newsletter. Your email address, the time you signed up and confirmed, and whether you open or click the emails. Legal basis: your consent (article 6(1)(a)). You can withdraw it at any time with the unsubscribe link in every email, or by writing to hello@colorvisionofficial.com.

Customer service. What you write when you get in touch, used to answer you. Legal basis: legitimate interest in responding to your enquiry (article 6(1)(f)).

Website use and cookies. Cookies that are strictly necessary for the basket, checkout and security are always set. Personalisation, analytics and marketing cookies, including those used to show you relevant advertising, are only set if you accept them in the cookie banner, and you can change your choice at any time. Legal basis: consent for personalisation, analytics and marketing cookies, and legitimate interest for strictly necessary cookies.

Security and fraud prevention. Technical data such as IP address and device information, used to protect the store and its customers. Legal basis: legitimate interest.

Who your data is shared with

Personal data is never sold. It is shared only with service providers that process it on Color Vision's behalf and under a data processing agreement:

  • Shopify: online store, checkout and payments (Shopify Payments)
  • Klarna, Vipps MobilePay and PayPal: payments, when you choose them. These providers may also process your data under their own privacy policies, for example for credit checks
  • Mailchimp (Intuit): newsletter
  • HubSpot: customer relationship management and website analytics
  • Bring and DHL Express: delivery (name, address, phone and email)
  • Ametlab SRL, Italy: production of made-to-measure garments (measurements only)
  • Accounting system provider: bookkeeping
  • Meta (Facebook and Instagram), Google and Pinterest: advertising, only if you have accepted marketing cookies

Transfers outside Europe

Shopify, Mailchimp, HubSpot and the advertising platforms may process data in the United States or Canada. These transfers are protected by an EU adequacy decision (Canada), the EU-US Data Privacy Framework, or the EU standard contractual clauses.

How long data is kept

  • Order and accounting records: five years after the end of the financial year, as required by the Bookkeeping Act
  • Customer account: until you delete it or ask for it to be deleted
  • Measurements: kept so future pieces can be made to fit, and deleted on request
  • Newsletter: until you unsubscribe. After that, your email address is kept on a suppression list only, so no further emails are sent
  • Customer service correspondence: no longer than three years after your enquiry is closed
  • Cookies: according to your choices in the cookie banner

Your rights

You have the right to access the personal data held about you (free of charge), to have it corrected, to have it deleted, to restrict its processing, and to receive it in a portable format. You can object to processing based on legitimate interest, and you can always object to direct marketing. Where processing is based on consent, you can withdraw it at any time; this does not affect processing that took place before.

Send requests to hello@colorvisionofficial.com. You will receive an answer within one month.

If you believe your data is handled unlawfully, you can complain to the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.

Security

Your data is stored with the providers listed above, which use encryption and access controls. Access within Color Vision is limited to those who need it to do their work.

Changes to this policy

This policy is updated when practices or the law change. The date at the top shows the latest version.