Privacy policy

Privacy Policy

Last updated: February 18, 2026

At Muuni, we believe your data deserves the same care as your nails. This policy explains what we collect, why we need it, and how we protect it — plainly and honestly.

In plain terms:

  • We never sell your data. Ever.
  • Marketing emails only happen if you said yes.
  • You can request deletion of your data by emailing hello@heymuuni.com.
  • We use cookies for ads and analytics — you control which ones.
  • Questions? hello@heymuuni.com. We actually read it.

The Services are operated by:

Norse Ocean AS Org. no. 925 528 722 MVA Torolv Kveldulvsons gate 29 8800 Sandnessjøen, Norway Email: hello@heymuuni.com

Muuni is a brand operated by Norse Ocean AS. For the purposes of applicable data protection laws, Norse Ocean AS is the data controller.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Norwegian data protection laws.

1. What Personal Data We Collect

Identity and Contact Information Name, billing address, shipping address, email address, phone number.

Order and Transaction Information Products purchased, order history, payment confirmation, delivery details, returns and exchanges.

Payment Information Payments are processed securely by Shopify and integrated payment providers. We do not store full payment card details.

Account Information Login credentials (if you create an account), preferences and settings.

Marketing Information Newsletter subscription status, marketing preferences, email engagement data.

Technical and Usage Information IP address, browser type, device information, pages visited, interaction with website content.

Communication Data Messages sent to customer support, emails and inquiries.

2. How We Collect Personal Data

We collect personal data:

  • Directly from you when you place orders, subscribe to newsletters, create an account or contact us
  • Automatically via cookies and tracking technologies
  • From service providers acting on our behalf

3. Legal Basis for Processing

Under GDPR Article 6, we rely on the following legal bases:

Performance of a Contract To process orders, payments, deliveries, returns and provide customer support.

Legal Obligation To comply with accounting, tax and consumer protection laws.

Legitimate Interest To prevent fraud, secure our website, improve services and analyze business performance.

Consent For email marketing, analytics cookies, and advertising and tracking technologies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

4. Marketing Communications

We send marketing emails only where you have provided explicit consent. You may unsubscribe at any time by clicking the unsubscribe link in any of our emails, or by contacting us directly.

Service-related communications — like order confirmations and shipping updates — are not marketing and cannot be opted out of.

5. Cookies and Tracking Technologies

We use cookies and similar technologies through our consent management platform (Consentmo). You're in control of what you allow.

Strictly Necessary Cookies Required for website functionality, shopping cart and checkout.

Analytics Cookies Used to understand how the website is used and how we can improve it (Google Analytics).

Marketing Cookies Used for advertising, retargeting and campaign performance, including Meta Pixel, TikTok Pixel, and Klaviyo web tracking.

Non-essential cookies are only activated after you give consent through our cookie banner. You can modify or withdraw consent at any time via the cookie settings link on our website.

6. Profiling and Targeted Advertising

With your consent, we use tracking technologies to show you relevant ads on platforms like Facebook, Instagram and TikTok. This may involve automated processing to evaluate interests and preferences.

You have the right to object to profiling at any time.

7. Sharing of Personal Data

We share personal data only with service providers who process it on our behalf:

Shopify (ecommerce platform and hosting), payment providers, shipping and logistics providers, Klaviyo (email marketing), Meta Platforms, Google, TikTok, and IT and cloud infrastructure providers.

We do not sell personal data. All service providers are subject to data processing agreements.

8. International Transfers

Some service providers are located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on European Commission Standard Contractual Clauses (SCCs) or adequacy decisions where applicable. These safeguards ensure your data is adequately protected regardless of where it's processed.

9. Data Retention

We keep your data only as long as we need it:

  • Order and accounting data: up to 5 years, in accordance with Norwegian accounting law
  • Marketing data: until you withdraw consent
  • Inactive accounts: reviewed and deleted after a reasonable period
  • Analytics data: retained according to platform settings

When data is no longer required, it is securely deleted or anonymized.

10. Your Rights

Your data is yours. Here's how to use that.

If you reside in Norway or the EEA, you have the right to:

  • Access your personal data
  • Request correction
  • Request deletion
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us at hello@heymuuni.com. We'll respond promptly.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

11. Security

We use appropriate technical and organizational measures to protect your personal data. That said, no transmission over the internet can be guaranteed to be completely secure — but we take every reasonable precaution.

12. Age

Our Services are intended for adults. We do not knowingly collect personal data from anyone under 18 years of age.

13. Changes to This Policy

We may update this Privacy Policy to reflect legal, operational or regulatory changes. If anything important changes, we'll let you know. The current version is always here, with the date it was last updated at the top.