Privacy policy
Who we are
Monde Group, organisation number 935386268, of Hinderlivegen, 5550 Sveio, Norway, trading as Opsando, is the data controller for the personal information described in this policy.
This means we decide what personal information is collected about you and why. If you have questions about how we handle your information, or want to exercise any of your rights, contact us at privacy@opsando.com.
Because we are established in Norway, our handling of your personal information is governed by the EU General Data Protection Regulation (GDPR) as implemented in Norwegian law, together with any data protection law applying in your own country.
What we collect
Depending on how you use our website, we may collect:
Contact and delivery details. Your name, email address, phone number, billing address and delivery address.
Order information. The devices you view, add to your cart and buy, your order history, returns, and warranty claims.
Payment information. Payment confirmation, the payment method used, and transaction references. We do not see or store your full card number, and we never see your mobile money PIN. Card and mobile money details are handled directly by our payment providers.
Account information. Your username and password, if you create an account.
Business information. If you apply for a business account, your business name, address, tax identification number and registration details.
Communications. What you tell us when you email us, including photographs and videos you send with a warranty claim.
Technical information. Your IP address, device and browser type, and how you navigate our website.
Why we use it, and our legal basis
Under GDPR we must have a lawful basis for each purpose. Ours are:
To fulfil your order. Processing payment, arranging shipping, handling customs clearance, and dealing with returns and warranty claims. Legal basis: performance of our contract with you.
To manage your account and answer your questions. Providing customer support and maintaining your account. Legal basis: performance of our contract, or our legitimate interest in responding to enquiries.
To verify business accounts. Checking business registration and tax details before approving wholesale access. Legal basis: performance of our contract, and our legitimate interest in preventing misuse of wholesale pricing.
To meet legal obligations. Keeping accounting and transaction records, and providing information required by customs and tax authorities. Legal basis: compliance with a legal obligation.
To prevent fraud and protect our business. Verifying orders, investigating suspected fraudulent activity, and securing our website. Legal basis: our legitimate interest in protecting our business and our customers.
To improve our website. Understanding how the site is used so we can make it work better. Legal basis: your consent, where required, or our legitimate interest.
To send marketing. Emailing you about products and offers, where you have asked to hear from us. Legal basis: your consent. You can withdraw it at any time using the unsubscribe link in any marketing email, and doing so will not affect emails about your orders.
Who we share it with
We share your personal information only where necessary, with:
Shopify, which hosts our website and processes orders on our behalf. Shopify's own privacy practices are described at https://www.shopify.com/legal/privacy.
DPO Pay, which processes card and mobile money payments. Payment details are handled on DPO's own secure page and we do not receive your card number or PIN.
UPS, which delivers your order. We share your name, delivery address and phone number so your shipment can be delivered.
Our clearing agent in Zambia, OPSANDO BUSINESS SOLUTIONS LIMITED, business registration number 120261039572, which handles customs clearance, local returns and local fulfilment. We share your name, delivery details and order information for these purposes.
Customs and tax authorities in Norway and your destination country, where required by law for import and export declarations.
Professional advisers and service providers, such as accountants and IT providers, where they need access to carry out work for us.
We do not sell your personal information.
If our business is sold or reorganised, your information may transfer to the new owner, who would remain bound by this policy or an equivalent one.
Sending your information abroad
Your order cannot be delivered without sending some of your information outside Norway and the European Economic Area, specifically to your own country for delivery and customs clearance.
Where we transfer personal information outside the EEA, we rely on an adequacy decision by the European Commission where one exists, or on the European Commission's Standard Contractual Clauses together with appropriate safeguards where it does not.
How long we keep it
Order and transaction records: five years from the end of the financial year, as required by the Norwegian Bookkeeping Act.
Warranty claim records: five years, so we can identify repeat claims and honour our obligations.
Account information: for as long as your account is open. If you ask us to close it, we delete your account information except where we must keep records for the reasons above.
Marketing consent records: until you withdraw consent, plus a record of the withdrawal so we can honour it.
Customer support emails: five years.
Website analytics data: 3 months.
Your rights
Under GDPR you have the right to:
- Access the personal information we hold about you, and receive a copy
- Correct information that is inaccurate or incomplete
- Delete your information, where we have no continuing reason to keep it
- Restrict how we use your information while a concern is being resolved
- Object to processing based on our legitimate interests, and to direct marketing at any time
- Portability, meaning a copy of the information you gave us in a machine-readable format
- Withdraw consent at any time, where we rely on consent
To exercise any of these, email privacy@opsando.com. We will respond within one month. We may need to verify your identity first.
These rights are not absolute. Where we cannot act on a request, for example because we must retain records under accounting law, we will explain why.
Complaints
If you are unhappy with how we have handled your personal information, please contact us first at privacy@opsando.com so we can try to put it right.
You also have the right to complain to a supervisory authority. In Norway this is Datatilsynet, the Norwegian Data Protection Authority, at www.datatilsynet.no. If you live in Zambia or Zimbabwe, you may also be able to complain to the data protection authority in your own country.
Cookies
Our website uses cookies and similar technologies.
Managing cookies. When you first visit our website, a banner lets you accept or refuse non-essential cookies. You can change your choice at any time by blocking or deleting cookies through your browser settings, though this may stop parts of the website from working properly.
Children
Our website is not intended for children. You must be at least 18 to buy from us or open an account, as set out in our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us at privacy@opsando.com and we will delete it.
Security
We take reasonable technical and organisational measures to protect your personal information, including using established providers for payments and hosting rather than handling sensitive data ourselves.
No system is completely secure, and information sent to us over the internet is never entirely risk-free. Please do not send us sensitive information such as full card numbers or PINs by email. We will never ask you for them.
Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. Where changes are significant, we will notify you.
Contact
Privacy questions and requests: privacy@opsando.com. General enquiries: support@opsando.com
Monde Group, Hinderlivegen, 5550 Sveio, Norway Organisation number 935386268