Privacy

1. Introduction
This privacy policy explains how Noromega AS collects, uses, and protects personal data when you visit or shop in our online store. Processing is carried out in accordance with applicable data protection legislation and the EU General Data Protection Regulation (GDPR).

2. Data Controller
Noromega AS is the data controller for personal data processed through the online store.

Contact information:
Email: info@vitalispharma.no

3. How Personal Data Is Collected
We collect personal data when you:

complete a purchase in the online store
contact us via email or contact form
use the website, where technical data is collected automatically through cookies

4. What Personal Data Is Processed
Depending on your use of the online store, the following information may be processed:

name
delivery and billing address
email address
phone number
order and purchase history
technical data such as IP address, browser type, and device information

Payment information is processed by an external payment provider and is not stored by Noromega.

We do not process health data or other sensitive personal data.

5. Purpose of Processing
Personal data is processed only when necessary to:

complete and deliver orders
manage payment and invoicing
provide customer service and respond to inquiries
comply with legal obligations, including accounting requirements
ensure technical operation, functionality, and security of the website
improve the online store based on aggregated and anonymized usage patterns

6. Legal Basis
Processing is based on:

performance of a contract in connection with purchases
compliance with legal obligations
legitimate interest related to operation, security, and improvement of the service

Where processing is based on consent, it can be withdrawn at any time.

7. Data Processors and Sharing of Information
The online store is built and operated on an external e-commerce platform provided by Wix.com Ltd, which acts as a data processor.

Personal data may be shared with:

payment providers
carriers and logistics partners
public authorities where required by law

Information is never sold or used for third-party marketing.

8. Storage Period
Personal data is stored only as long as necessary for the purposes for which it was collected, or as long as required by applicable law.

9. Cookies
The online store uses cookies to ensure functionality, security, and stable operation.

The platform provider Wix may use:

necessary cookies
functional cookies
analytical cookies

These are used for technical operation and improvement of the website, not for personal identification or targeted marketing.

You can manage or block cookies through your browser settings. Please note that some functions of the online store may then be limited.

10. Communication
We use contact information only for:

order confirmations and delivery information
customer service and responding to inquiries

We do not send marketing communications without valid consent.

11. Your Rights
You have the right to:

access the personal data we process about you
request correction of inaccurate information
request deletion where applicable conditions are met
request restriction of processing
object to processing based on legitimate interest
withdraw consent

Requests can be directed to the contact information provided above.

You also have the right to lodge a complaint with the relevant data protection authority.

12. Changes to This Policy
We reserve the right to update this privacy policy as needed.
The updated version will always be available on the website.