Privacy Policy

The Merkaba online store on the website www.merkabahealing.no, with organization number 834937042 located in Norway, processes personal information provided by the Customer in order to fulfill and confirm the terms of service, process electronic orders and shipping, and enable communication for a period permitted by law.

General Provisions

1. The personal data controller, in accordance with the GDPR (hereinafter referred to as the "Regulation"), is Merkaba Lina Adam, organization number 834937042, located in Norway (hereinafter referred to as the "Controller");

2. The Controller's contact information is: email: post@merkabahealing.no, phone: +47 98475879.

3. Personal information includes all information related to an identifiable or physical person.
   
   

Source of Personal Information

1. The Controller processes personal information received with the Customer's consent and collected from the contract in order to complete the purchase and the electronic order created in the online store.

2. The Controller processes only identifiable information and contact details of the Customer that are necessary to fulfill the purchase contract;

3. The Controller processes personal information for shipping, accounting, and communication between the parties to the contract for a period permitted by law.
   
   

Purpose of Processing Personal Information

The Controller processes the Customer's personal information for the following purposes:

1. Registration on the website www.merkabahealing.no in accordance with Chapter 4, Section 2 of the Regulation;

2. To fulfill the electronic order created by the Customer (name, postal address, email address, telephone number);

3. To comply with legal obligations arising from the contractual relationship between the Customer and the Controller;

4. Personal information is necessary to fulfill the purchase contract. The contract cannot be concluded without personal information.
   
   

Retention Period for Personal Information

1. The Controller stores personal information for a period necessary to fulfill rights and obligations arising from the contractual relationship between the Controller and the Customer, and for 3 years following the termination of the contractual relationship;

2. The Controller must delete all personal information upon the expiration of the retention period.
   
   

Recipients and Processors of Personal Information

Third parties who process the Customer's personal information are subcontractors of the Controller. The services provided by these subcontractors are necessary for fulfilling the purchase contract and processing the electronic order between the Controller and the Customer.

The Controller's subcontractors are:

• Webnode AG (online store system);

• Shipping company;

• Google Analytics (website statistics);
  
  

Customer Rights

In accordance with the Regulation, the Customer is entitled to:

1. The right to access their personal information;

2. The right to correct their personal information;

3. The right to delete their personal information;

4. The right to object to the processing of their personal information;

5. The right to data portability;

6. The right to withdraw consent to the processing of their personal information in writing or via email to: post@merkabahealing.no;

7. The right to submit a complaint to the supervisory authority if there is suspicion of a violation of the Regulation.
   
   

Security of Personal Information

1. The Controller declares that all necessary technical and organizational measures have been taken to protect personal information;

2. The Controller has taken technical precautions to secure data storage, including securing access to computers with a password, using antivirus software, and performing regular checks on relevant devices.
   
   

Final Provisions

1. By placing an electronic order on the website www.merkabahealing.no, the Customer confirms that they are informed of all terms regarding the protection of personal information and accepts them in full.

2. The Customer accepts these rules by checking the box in the order form.

3. The Controller may update these Rules at any time. The new, updated version must be published on his/her website.

These Rules take effect on 01.12.2025.