top of page

Privacy Policy

Last Updated: September 25, 2026 

​

Welcome to our website. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, use our services, or interact with our digital and experiential design agency. 

​

This policy is designed to comply with the EU/EEA General Data Protection Regulation (GDPR) via the Norwegian Personal Data Act, as well as applicable US state privacy laws (including the California Consumer Privacy Act/CCPA). 

​

1. The Data Controller (Who We Are)

For the purposes of the GDPR, the data controller responsible for your personal data is:

  • Company Name: Gogstad Creative Group

  • Brand Name: Studio Kismet

  • Location: Sandefjord, Norway

  • Contact Email: henriettegogstad@gmail.com

​

2. What Personal Data We Collect

We collect information that you voluntarily provide to us, alongside technical data generated automatically when you interact with our website. 

  • Identity & Contact Data: Name, email address, phone number, and billing addresses (collected via inquiry forms or our digital product checkout). 

  • Financial Data: Payment card details and transaction history, processed securely via our third-party payment processors. 

  • Technical & Usage Data: IP address, browser type, location data, and behavioral data regarding how you use and navigate our website (collected via essential and analytical cookies). 

​

​

​

​

 

4. Data Sharing & Third-Party Processors

We do not sell, trade, or rent your personal data to third parties. We only share your data with trusted service providers who help us run our agency, including: 

  • Web Hosting & Platform Infrastructure: Wix, Canva, Etsy, Instagram.

  • E-Commerce Platforms & Gateways: Etsy, Fiken/Conta Accounting integrations.

  • Analytics Tools: Google Analytics.

All third-party partners are legally bound via Data Processing Agreements (DPAs) to keep your data secure and use it strictly under our instruction. 

​

5. International Data Transfers (Norway to the US)

Because we work with international clients and utilize software platforms hosted in the United States, your personal data may be transferred to, and stored in, the US.

  • When we transfer data outside the EEA (Norway), we ensure a similar level of protection is maintained by using Standard Contractual Clauses (SCCs) approved by the European Commission, or by ensuring the destination provider adheres to the EU-U.S. Data Privacy Framework. 

​

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or business reporting requirements. 

​

7. Your European Privacy Rights (GDPR)

If you are located within the EU/EEA (including Norway), you hold the following statutory rights regarding your personal data: 

  • Right of Access: You can request a copy of the personal data we hold about you.

  • Right to Rectification: You can request that we correct inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your data under certain conditions.

  • Right to Object / Restrict Processing: You can object to our processing of your data for direct marketing.

  • Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time. 

​

To exercise these rights, please email us directly at our contact email address listed above. You also have the right to lodge a formal complaint with the Norwegian Data Protection Authority (Datatilsynet). 

​

8. Your US State Privacy Rights (CCPA/CPRA - California & US States)

If you are a resident of California or a US state with omnibus privacy laws, you hold specific consumer rights: 

  • Right to Know / Access: The right to request a disclosure of what personal data we collect, use, and share.

  • Right to Delete: The right to request the deletion of personal data collected "from or about" you.

  • Right to Correct: The right to request correction of inaccurate data.

  • Right to Opt-Out of Sale or Sharing: We explicitly declare that we do not sell your personal data or share it for cross-context behavioral advertising.

  • Non-Discrimination: We will never discriminate against you (such as charging different rates or providing lower quality service) for exercising your privacy rights. 

​

9. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience, analyze site traffic, and support marketing functions. You can manage your preferences or opt out of non-essential tracking cookies via the interactive consent banner displayed upon your first visit to our site. 

​

10. Changes to This Privacy Policy

We reserve the right to update this policy as regulations change or our service offerings expand. Any updates will be posted transparently on this page with an adjusted "Last Updated" date.

bottom of page