Privacy policy
Last updated: August 2026
1. About CYASEA and this Policy
CYASEA is an online store offering pure marine collagen supplements. The store is operated by Noveo AS and powered by Shopify Inc.
This Privacy Policy explains how CYASEA collects, uses, and protects your personal information when you visit our website, make a purchase, or contact us.
This policy explains how we handle personal information.
2. Personal Information We Collect
When you interact with CYASEA, we may collect:
Contact details — name, billing and shipping address, email address, phone number.
Order and payment details — items purchased and transaction information, handled securely by Shopify.
Account information — username, password, and preferences.
Device and usage data — IP address, browser type, operating system, and how you navigate the site.
Communications — information you include when contacting us by email or form.
We collect this information directly from you, automatically through your device, or via trusted service providers who support our operations.
3. How We Use Your Information
We use personal information only for the following purposes:
Order fulfilment — processing payments, shipping products, and providing customer support. Legal basis: performance of a contract.
Account management — remembering preferences and improving your experience. Legal basis: our legitimate interest in operating a functioning store.
Communication — sending order confirmations, shipping updates, and service notices. Legal basis: performance of a contract.
Marketing — sharing product news by email. Legal basis: your consent. You may unsubscribe at any time.
Security and fraud prevention — protecting the site and payment systems. Legal basis: our legitimate interest in preventing fraud.
Legal compliance — meeting our legal and tax obligations. Legal basis: legal obligation.
4. How We Share Information
We share personal information only when necessary:
With Shopify — to host the store and process payments.
With service partners — including payment gateways, logistics companies, and email providers, under data processing agreements.
When required by law — to comply with legal obligations or valid governmental requests.
During business transitions — in the event of a merger or sale of the business.
We do not sell or rent your personal information.
5. Cookies
Our website uses cookies to function correctly and to help us understand how visitors use the site. Cookies fall into four categories:
Strictly necessary — required for the site to operate. These cannot be disabled.
Analytics — help us understand visitor behaviour in aggregate. No personally identifiable information is collected.
Marketing — used to deliver relevant communications, only with your consent.
Personalization — remember your actions to tailor your next visit. Set only with your consent.
You can manage your cookie preferences through the consent banner on your first visit, or by adjusting your browser settings. Disabling certain cookies may affect how the site functions.
6. Data Retention and Security
We store personal information only as long as necessary to provide the Services, meet legal obligations, or resolve disputes. Order and transaction records are retained for five years, as required by the Norwegian Bookkeeping Act (bokføringsloven).
Shopify and our partners use industry-standard security measures to protect your data.
7. Your Rights
Under the GDPR, as implemented in Norwegian law through personopplysningsloven, you have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your data.
- Object to or restrict certain processing.
- Withdraw consent for marketing at any time.
- Request a copy or transfer of your data.
To exercise any of these rights, contact us at hello@cyasea.com. We may need to verify your identity before processing your request.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), at datatilsynet.no.
8. International Data Transfers
Because CYASEA uses Shopify and global service providers, your data may be transferred outside your country. Where personal data is transferred from the EEA or UK, appropriate safeguards — including Standard Contractual Clauses — are used to protect it.
9. Children
CYASEA does not knowingly collect personal information from individuals under the age of 13. If you believe a child has provided personal data, contact us at hello@cyasea.com and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy to reflect operational, legal, or regulatory changes. Updates will be posted on this page with a revised date.
11. Contact
For questions about this Privacy Policy or your personal information:
Noveo AS
Org. no. 934 906 608
Postboks 2, 7619 Skogn, Norway
hello@cyasea.com
Noveo AS is the data controller of your personal information.