Confidentialité

We keep as little about you as we can, and only to get a table to your living room. Here is what, why and for how long.

Who is responsible

The controller for your personal data is:

Company

annoncée prochainement

Organisation number

annoncée prochainement

Address

to be announced, Norway

Email

annoncée prochainement

What we keep, and why

When	What	Why, and the legal basis	How long
You pre-order	Name, email, phone, billing address, what you ordered, the amounts paid, your Founders number. Stripe also keeps the card brand and last four digits.	To take and deliver your order and to reach you about it (a contract, GDPR art. 6(1)(b)). To keep our books (a legal duty, art. 6(1)(c)).	For as long as the order runs, then as long as the Norwegian Bookkeeping Act (bokføringsloven) requires.
You ask us to tell you when pre-orders open, or join the Slim waitlist	Your name, your email and which one you're interested in (Flatboy or Slim).	To send you that news (your consent, art. 6(1)(a)). Nothing else, and never sold.	Until you ask us to remove it, or we no longer need it for that. Exact period to be announced.
You visit the site	Your IP address and browser details in our host's standard server logs. To stop abuse, our server also holds your IP address in memory for up to 10 minutes when you submit a form.	To keep the site running and safe (our legitimate interest, art. 6(1)(f)).	The host's log retention; the in-memory copy is gone within 10 minutes.
You say yes to cookies	Visit and ad measurement by Google Analytics and the Meta pixel, only if we turn them on and only after your yes.	To learn what works (your consent, art. 6(1)(a)). See cookies.	See cookies.

We don't make automated decisions about you, and we don't sell your data.

Who helps us

• Stripe handles payments. For customers in Norway and the EU, that is Stripe Payments Europe, Ltd. (Ireland). Stripe is also responsible in its own right for some of what it keeps, for example to prevent fraud and to follow financial law.
• Vercel hosts this website.
• Where the list is kept: in our own private storage at Vercel (Vercel Inc., data held in Frankfurt, Germany), readable only by us.
• Resend envoie nos e-mails (le reçu quand vous rejoignez la liste, et les nouvelles de votre commande), depuis sa région UE en Irlande. Chaque e-mail contient un lien pour vous retirer de la liste.
• Google and Meta, only if analytics or ads are turned on and you say yes.
• YouTube (Google) affiche le film Flatboy sur la page d'accueil, dans son lecteur respectueux de la vie privée (youtube-nocookie.com), qui se charge quand vous faites défiler jusqu'à lui.

Some of these companies are based in the United States. Where your data leaves the EU/EEA, they rely on the EU–US Data Privacy Framework or the EU's standard contractual clauses.

Your rights

Under the GDPR you can:

• ask what we hold about you, and get a copy;
• have it corrected, or deleted when we no longer need it;
• restrict or object to how we use it;
• take it with you in a common format;
• take back your consent at any time (for the email list or cookies). That doesn't undo what was done before.

Email us (address to be announced) and we'll answer within one month. If you think we've got it wrong, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or the authority where you live in the EU/EEA.

Changes

If we change how we use your data, we'll update this page and the date at the top.