Privacy Policy

Last updated 2026-09-08

1. Introduction

This Privacy Policy explains how Fashnal ("we", "us") processes personal data about you when you visit and use our website, and when you contact us as a seller, partner, or visitor. We are the data controller for this processing. If you have any questions, or want to exercise your rights, open a support ticket or contact us directly.

2. How we collect your data

Most of what we know about you, we collect directly from you — when you register an account, apply as a seller, browse the site, or contact support. We don't buy or receive data about you from third parties.

3. Account & login

What: your email, full name, a securely hashed password (never your plain password), and your chosen language.
Why: to create and run your account, keep you signed in, and personalize the site to your language/market. Legal basis: performing our contract with you.
How long: for as long as your account is active.

4. Site security & fraud prevention

What: a salted, one-way hash of your IP address (never the raw address), login attempt outcomes, and click activity on seller listings.
Why: to detect and prevent fraud and abuse — for example repeated failed logins or fake clicks against a seller's wallet. Legal basis: our legitimate interest in keeping the platform secure and billing sellers accurately.
How long: security logs are kept only as long as needed to investigate abuse, then deleted.

5. Marketing emails

What: your email address, and the date you opted in.
Why: to send you price-drop and deal alerts you asked for. Legal basis: your consent — given by ticking the box at registration, never assumed or pre-checked.
How long: until you unsubscribe, which you can do at any time.

6. Customer support

What: your name, email, and whatever you tell us in a support ticket.
Why: to answer your question and resolve the issue. Legal basis: our legitimate interest in providing support, or performing our contract with you.
How long: kept as long as needed to resolve your case and handle any related claim afterward.

7. Seller information

What: for sellers, the business details you give us — store name, website, and an organization number if you provide one.
Why: to run your seller account, approve your application, and bill your wallet correctly. Legal basis: performing our contract with you.
How long: for as long as your seller account is active.

8. Cookies

We use a strictly-necessary session cookie to keep you signed in, and our CAPTCHA provider (Cloudflare Turnstile) may set its own cookie when you register or log in to confirm you're not a bot. See our Cookie Policy for the full list and how to manage them.

9. Security measures

We take reasonable technical and organizational measures to keep your data safe — passwords are hashed, not stored in plain text; access to the database is restricted; and we monitor for suspicious activity. No system is completely immune to risk, but we work to keep yours as low as possible.

10. Who we share your data with

Stripe (payment processing for seller wallet top-ups) and Cloudflare (Turnstile bot protection) — each only gets what they need to do their job for us. We don't sell your data to advertisers, and we don't share it with anyone else except where the law requires it.

11. Where your data is processed

Our servers and database are located in the country where Fashnal is hosted. Stripe, one of our providers, may process data in the United States; where that happens, it is certified under the EU-US Data Privacy Framework, a mechanism approved by the European Commission for this kind of transfer.

12. Your rights

Depending on where you live, you may have the right to: access the data we hold about you; correct inaccurate data; request erasure; restrict how we use it; object to processing based on our legitimate interest; receive your data in a portable format; and withdraw consent at any time, for anything we process based on it (like marketing emails). Open a support ticket to exercise any of these.

13. Complaints

If you think we've mishandled your data, we'd like the chance to make it right first — open a support ticket. You also always have the right to complain to your own country's data protection authority (for Norway, Datatilsynet).

14. Changes to this policy

We'll update this page if our data practices change in a way that affects you.

15. Contact

Questions about your privacy? Open a support ticket and we'll get back to you.