Privacy Policy
Last updated: September 2026
1. Introduction
Mushing World respects your privacy and is committed to handling personal information responsibly and in accordance with applicable data protection law, including the General Data Protection Regulation (GDPR).
This Privacy Policy explains what personal information we collect, why we process it, who we may share it with, how long we keep it, and the rights you have regarding your personal information.
2. Data Controller
Mushing World is operated by:
Varga Works ENK
Gjøviklinna 1426
2862 Fluberg
Norway
Org. No.: 928524256 MVA
Email: support@mushingworld.com
Varga Works ENK is the data controller responsible for the processing of personal information described in this Privacy Policy.
3. Information We Collect
Depending on how you use our website, we may collect:
Order and customer information
- Name
- Email address
- Billing and shipping address
- Phone number, where provided
- Products ordered
- Order value and transaction information
- Shipping and fulfilment information
- Order history
Payment information
Payments are processed by our payment providers, such as Stripe and Vipps MobilePay. We do not store your full payment card details.
We may receive information from payment providers relating to the status and identification of a payment, refund or transaction.
Communications
If you contact us, we may process your name, email address and the contents of your communication, together with information necessary to respond to your request.
Technical and website information
When you use our website, certain technical information may be processed automatically, such as IP address, browser or device information, cookie identifiers and information about how the website is used, depending on the cookies and services enabled on the website.
4. Why We Process Personal Information
We process personal information for the following purposes:
To process and fulfil orders
This includes processing purchases, arranging production and delivery, handling payments, sending order information, and providing customer service.
The legal basis is primarily that processing is necessary to perform our contract with you.
To meet legal obligations
We may retain and process information where required for accounting, tax, consumer protection or other legal obligations.
The legal basis is compliance with a legal obligation.
To respond to enquiries and provide customer support
We process information necessary to answer questions, resolve problems and communicate with customers.
Depending on the circumstances, the legal basis may be performance of a contract or our legitimate interest in providing customer service and operating our business.
To protect our website and business
Information may be processed where necessary to prevent fraud, abuse, security incidents or misuse of our services.
The legal basis may be our legitimate interest in protecting our customers, website and business.
Analytics, marketing and other optional technologies
Where consent is required, optional cookies or similar technologies used for purposes such as analytics or marketing are activated on the basis of your consent.
You can withdraw consent through the available cookie settings.
Datatilsynet states that where consent is the legal basis, it must be informed, voluntary and explicit, and withdrawing it should be as easy as giving it.
5. Payment Providers
Payments may be processed by third-party payment providers, including Stripe and Vipps MobilePay.
These providers process information necessary to authorise and process payments, prevent fraud, handle refunds and meet their own legal obligations.
Payment providers may act as independent data controllers for some of their processing activities. Their handling of personal information is also governed by their respective privacy policies.
6. Production, Fulfilment and Shipping
Because Mushing World uses print-on-demand production, information necessary to produce and deliver an order may be shared with our production and fulfilment partners, including Printful.
This may include:
- Customer name
- Shipping address
- Phone number where required for delivery
- Products ordered
- Information necessary to produce and fulfil the order
Relevant information may also be shared with postal services, couriers and other shipping providers involved in delivering the order.
We only provide information reasonably necessary to fulfil and deliver the purchase.
7. Service Providers
We use third-party service providers to operate Mushing World and fulfil orders. Depending on how you use the website, personal information may be processed by or shared with providers including:
Hostinger — website hosting and related website services
WooCommerce — e-commerce and order management
Printful — product production, fulfilment and shipping
Stripe — card and supported digital payment processing
Vipps MobilePay — payment processing
SureForms — website forms and communications, where used
UpdraftPlus — website backup services
We may also use technical service providers for website security, optimisation, translation and search-engine optimisation. These services may process limited technical information such as IP addresses where necessary for their operation.
Service providers process personal information either on our behalf or, where applicable, as independent data controllers for their own purposes.
We only provide personal information that is reasonably necessary for the relevant service.
We do not sell personal information to third parties.
8. International Transfers
Some of the service providers used by Mushing World may process personal information outside Norway or the European Economic Area (EEA).
For example, our production and fulfilment provider Printful operates internationally, and information necessary to fulfil an order may be processed in countries outside the EEA.
Where personal information is transferred outside the EEA, appropriate safeguards are used where required by applicable data protection law. These may include an adequacy decision adopted by the European Commission or Standard Contractual Clauses approved by the European Commission.
9. Cookies and Similar Technologies
Mushing World uses cookies and similar technologies necessary for the operation of the website and online store.
Essential cookies may be used for purposes such as:
- Maintaining the shopping cart and checkout
- Remembering customer sessions and preferences
- Payment functionality
- Website security
- Maintaining the technical operation of the website
Essential cookies do not require consent where they are strictly necessary for providing the service requested by the visitor.
If we use optional cookies or similar technologies for analytics, marketing or other non-essential purposes, these will only be activated where the appropriate consent has been obtained.
Where consent is required, visitors can accept or reject optional cookies and later change or withdraw their choice through the website’s cookie settings.
10. Data Retention
Order and transaction information is retained for as long as necessary to fulfil the order, handle customer service and complaints, and comply with legal obligations. Certain accounting documentation is generally required to be retained for five years under Norwegian bookkeeping rules.
Information that is no longer necessary for these purposes will be deleted or anonymised in accordance with our retention procedures.
11. Your Rights
Subject to applicable data protection law, you may have the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of personal information in certain circumstances
- Request restriction of processing in certain circumstances
- Object to certain processing based on legitimate interests
- Receive certain personal information in a portable format
- Withdraw consent at any time where processing is based on consent
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, contact:
We may need to verify your identity before responding to a request.
12. Right to Complain
If you believe that your personal information has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority.
In Norway, the supervisory authority is the Norwegian Data Protection Authority (Datatilsynet).
You may also contact us first at support@mushingworld.com, and we will try to resolve your concern.
13. Data Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
However, no method of electronic transmission or storage can guarantee absolute security.
14. Children’s Privacy
Mushing World is not intended to knowingly collect personal information directly from children for purposes that require parental consent under applicable law.
If we become aware that personal information has been collected in circumstances where valid parental consent was required but not obtained, we will take appropriate steps to address it.
15. Changes to This Privacy Policy
We may update this Privacy Policy when our website, services, providers or legal obligations change.
The current version will always be available on this website, with the date of the latest update shown at the top.
16. Contact
For questions about this Privacy Policy or how we process personal information, contact:
Mushing World / Varga Works ENK
Gjøviklinna 1426
2862 Fluberg
Norway
Org. No.: 928524256 MVA
Email: support@mushingworld.com