Privacy policy

Privacy Policy

Last updated: August 13, 2026

HG Creations Privacy Policy

This Privacy Policy explains how HG Creations Haydar Ghafoor ("HG Creations", "we", "us", or "our") collects, uses, stores, and shares personal information when you visit our website, contact us, or purchase products from us.

We process personal information in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and Norwegian data protection law.

1. Who We Are

HG Creations Haydar Ghafoor is the data controller responsible for the processing of personal information described in this Privacy Policy, except where another party acts as an independent controller.

Business name: HG Creations Haydar Ghafoor
Organisation number: 937 984 871
Address: Stovnerveien 57A, 0982 Oslo, Norway
Email: support@hgcreations.no
Phone: +47 40 15 55 00

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us using the details above.

2. Personal Information We Collect

Depending on how you interact with our website and services, we may collect:

  • Name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

  • Order and transaction information

  • Payment-related information

  • Order history

  • Communications and customer support messages

  • IP address

  • Device and browser information

  • Cookie and similar technology data

  • Information about how you interact with our website

Payment card information is generally processed directly by our payment providers and is not stored by HG Creations in full.

3. How and Why We Use Your Information

We process personal information only where we have an appropriate legal basis.

Orders and Contracts

We process information such as your name, contact details, shipping information, and order information where necessary to:

  • Process your order

  • Receive and process payment

  • Deliver your products

  • Communicate with you regarding your order

  • Handle returns, complaints, and customer service matters

The legal basis for this processing is generally that it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Legal Obligations

We may process and retain certain information where necessary to comply with legal obligations, including accounting, tax, consumer protection, and other applicable legal requirements.

The legal basis for this processing is compliance with a legal obligation.

Security and Fraud Prevention

We may process information where necessary to detect or prevent fraud, misuse, security incidents, or other harmful activity.

Where applicable, this processing is based on our legitimate interests in protecting our customers, our website, and our business.

Website Operation and Improvement

We may process technical and usage information where necessary to operate, maintain, secure, and improve our website and services.

Depending on the processing involved, this may be based on our legitimate interests or your consent where consent is required by law.

Marketing

Where required by law, we will only send electronic marketing to you where we have obtained the necessary consent or otherwise have a lawful basis to do so.

You may unsubscribe from marketing emails at any time using the unsubscribe link included in the message or by contacting us.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Information Required to Place an Order

Certain personal information is necessary for us to process and fulfil your order, including information required for payment, delivery, and communication.

If you do not provide information that is necessary to enter into or perform the purchase contract, we may be unable to process or fulfil your order.

Other information may be optional and will be identified as such where appropriate.

5. Payment Information

Payments are processed through payment service providers made available through or connected to our store.

HG Creations does not store your full payment card details.

Payment providers may process information necessary to complete transactions, prevent fraud, comply with legal obligations, and provide their services.

Some payment providers may act as independent data controllers for certain processing activities. Their own privacy policies may therefore also apply.

6. Shipping and Delivery

To fulfil your order, we may share information necessary for delivery with shipping and logistics providers.

This may include:

  • Name

  • Shipping address

  • Telephone number where necessary

  • Email address where necessary

  • Order or delivery reference information

We only provide information reasonably necessary for the relevant delivery service.

7. Shopify

Our online store is powered by Shopify.

Shopify processes certain personal information in connection with providing our online store infrastructure and related services, including hosting, order processing, security, and fraud prevention.

For certain processing of customer information, Shopify acts as a data processor on behalf of HG Creations. For certain Shopify services and features, Shopify may process personal information as an independent data controller in accordance with its own privacy terms.

For more information about Shopify's processing of personal information, please refer to Shopify's Privacy Policy.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website and store to function properly. Other technologies may be used for purposes such as preferences, analytics, performance, or marketing.

Where consent is required by applicable law, non-essential cookies and similar technologies will not be used until the required consent has been obtained.

Our website uses a cookie consent banner provided through Shopify. The banner and its regional availability are managed through Shopify's automated privacy settings based on applicable regional requirements and Shopify's current recommendations.

Where the cookie banner is available, you can accept or decline non-essential cookies and manage your available cookie preferences.

You may change available privacy and cookie choices through the privacy or cookie preference tools provided on our website.

9. Sharing Personal Information

We may share personal information with third parties where necessary to operate our business, provide our services, or comply with legal obligations.

Recipients may include:

  • Shopify

  • Payment providers

  • Shipping and logistics providers

  • IT, hosting, and technical service providers

  • Analytics or marketing providers where applicable and lawfully enabled

  • Professional advisers where necessary

  • Public authorities or other parties where disclosure is required by law

We do not sell personal information.

Where third parties process personal information on our behalf, we require appropriate data protection arrangements where required by law.

10. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected or for as long as required by applicable law.

Retention periods depend on the type of information and why it is processed.

For example:

  • Order and transaction information may be retained for the period required under applicable accounting, tax, and consumer protection laws.

  • Customer service communications may be retained for as long as reasonably necessary to resolve enquiries, complaints, disputes, or legal claims.

  • Information processed on the basis of consent may generally be retained until consent is withdrawn or the information is no longer necessary for the relevant purpose, subject to any overriding legal retention requirements.

  • Technical and security information may be retained for periods reasonably necessary for security, fraud prevention, and operation of our services.

Certain accounting records are subject to statutory retention requirements under Norwegian law.

When personal information is no longer necessary and there is no legal requirement or legitimate reason to retain it, it will be deleted or anonymised.

11. Your Privacy Rights

Subject to the conditions and limitations provided by applicable law, you may have the right to:

  • Request access to your personal information

  • Request correction of inaccurate or incomplete personal information

  • Request deletion of your personal information

  • Request restriction of processing

  • Object to certain processing based on legitimate interests

  • Withdraw consent where processing is based on consent

  • Request data portability where applicable

  • Lodge a complaint with a data protection authority

These rights are not absolute and may be limited where we are required or permitted by law to continue processing or retaining information.

To exercise your rights, contact us at support@hgcreations.no.

We may need to verify your identity before fulfilling certain requests.

12. Complaints

If you believe that HG Creations has processed your personal information in violation of applicable data protection law, you may contact us so that we can investigate the matter.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or, where applicable, another competent supervisory authority.

13. International Data Transfers

Some service providers used by HG Creations, including Shopify and its service providers, may process personal information outside Norway or the European Economic Area (EEA).

Where personal information is transferred outside the EEA, transfers will be made in accordance with applicable data protection law and using an appropriate transfer mechanism where required.

Depending on the destination and provider, this may include an adequacy decision recognised by the European Commission or appropriate contractual safeguards such as the European Commission's Standard Contractual Clauses.

You may contact us if you would like further information about the safeguards applicable to transfers of your personal information.

14. Automated Processing and Fraud Prevention

Our e-commerce, payment, or fraud-prevention providers may use automated systems to identify potentially fraudulent, suspicious, or high-risk transactions.

Where automated decision-making or profiling is subject to specific legal requirements, information and rights required by applicable data protection law will apply.

HG Creations does not independently use personal information to make solely automated decisions that produce legal or similarly significant effects unless disclosed to you and permitted by applicable law.

15. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction.

We also rely on service providers, including Shopify and payment providers, that maintain their own security measures.

However, no system for transmitting or storing electronic information can be guaranteed to be completely secure.

16. Children's Privacy

Our website and products are not specifically directed at children for the purpose of collecting personal information.

We do not knowingly collect personal information from children in circumstances where parental consent or another legal basis would be required and has not been obtained.

If you believe that a child has provided personal information to us improperly, please contact us.

17. Third-Party Services

Our website may contain integrations, links, or features provided by third parties.

Where a third party processes personal information as an independent data controller, its own privacy policy and terms apply to that processing.

We encourage you to review the privacy information provided by relevant third-party services.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our services, business practices, service providers, or legal obligations change.

When we update this policy, we will revise the Last updated date at the top of this page.

Where required by law, we will provide additional notice or obtain consent before materially changing how we process personal information.

19. Contact Us

For questions about this Privacy Policy, our processing of personal information, or your privacy rights, contact:

HG Creations Haydar Ghafoor
Organisation number: 937 984 871
Address: Stovnerveien 57A, 0982 Oslo, Norway
Email: support@hgcreations.no
Phone: +47 40 15 55 00