# Privacy Policy
**Last updated: July 17, 2026**
Durumcore is a brand operated by **Moutacim ENK**, a Norwegian sole proprietorship (organization number **938 085 196 VAT**). In this Privacy Policy, “Durumcore,” “we,” “us,” and “our” refer to Moutacim ENK.
We operate the Durumcore online store, website, and related content, features, products, and services to provide customers with a tailored shopping experience (collectively, the “Services”). Our store is hosted by Shopify, which enables us to provide the Services.
This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit or use the Services, make a purchase, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, use, or disclosure of personal information, this Privacy Policy controls.
Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood the practices described here.
## Personal Information We Collect or Process
“Personal information” means information that identifies you or can reasonably be linked to you or another individual. It does not include information collected anonymously or information that has been deidentified so that it cannot reasonably be linked to an individual.
Depending on how you interact with the Services, where you live, and what applicable law permits or requires, we may collect or process the following categories of personal information, including inferences drawn from that information:
- **Contact information**, including your name, billing address, shipping address, telephone number, and email address.
- **Financial information**, including payment card details, account information, transaction information, payment method, payment confirmation, and related payment details. Payment information may be processed directly by Shopify or our payment service providers.
- **Account information**, including your username, password, security questions, preferences, and settings.
- **Transaction and commercial information**, including products you view, add to your cart or wishlist, purchase, return, or exchange, and your transaction history.
- **Communications with us**, including information you provide when contacting customer support or otherwise communicating with us.
- **Device and network information**, including information about your device, browser, network connection, IP address, and other unique identifiers.
- **Usage information**, including information about how and when you interact with or navigate the Services.
- **Inferences**, such as preferences or interests inferred from your purchases and activity on the Services.
## Sources of Personal Information
We may collect personal information from the following sources:
- **Directly from you**, including when you create an account, visit or use the Services, place an order, communicate with us, or otherwise provide information to us.
- **Automatically through the Services**, including from your device and through cookies, pixels, and similar technologies when you use the Services or visit our website.
- **From service providers**, including providers that enable technology or collect and process personal information on our behalf.
- **From Shopify, business partners, marketing partners, and other third parties**, as permitted by applicable law.
## How We Use Personal Information
Depending on how you interact with us and which Services you use, we may use personal information for the following purposes:
- **Providing, personalizing, and improving the Services.** This includes fulfilling our obligations to you, processing payments, fulfilling and shipping orders, remembering preferences and products of interest, sending account notices, processing purchases, returns, exchanges, and other transactions, creating and managing accounts, enabling reviews, recommending products, and improving the Services.
- **Marketing and advertising.** This includes sending marketing and promotional communications by email, text message, or mail, subject to applicable consent requirements, and showing advertisements on our Services or other websites based on previous purchases, cart activity, and other activity on the Services.
- **Security and fraud prevention.** This includes authenticating accounts, providing a secure payment and shopping experience, detecting, investigating, or responding to suspected fraudulent, unlawful, unsafe, or malicious activity, protecting public safety, and securing the Services. You are responsible for keeping your account credentials secure and should not share them with others.
- **Communicating with you.** This includes providing customer support, responding to inquiries, delivering effective service, and maintaining our business relationship with you.
- **Legal and compliance purposes.** This includes complying with applicable law and valid legal process, responding to lawful requests from law enforcement or government authorities, handling litigation or other legal proceedings, enforcing our terms and policies, and investigating potential violations.
## Cookies and Similar Technologies
We and our service providers, including Shopify, use cookies, pixels, and similar technologies to operate the Services, remember your preferences, understand how the Services are used, improve performance, prevent fraud, and support analytics, personalization, and advertising.
You may be able to control cookies through our cookie preference tools or your browser settings. Blocking some cookies may affect the availability or functionality of parts of the Services. Where required by law, we obtain consent before using non-essential cookies.
Except for legally recognized opt-out preference signals such as Global Privacy Control, where applicable, the Services may not respond to browser “Do Not Track” signals because there is no consistent industry standard for interpreting them.
## How We Disclose Personal Information
We may disclose personal information to third parties for legitimate business purposes and as described in this Privacy Policy, including:
- **Shopify, vendors, and service providers** that perform services on our behalf, such as website hosting, IT administration, payment processing, data analytics, customer support, cloud storage, order fulfillment, and shipping.
- **Business and marketing partners** that provide marketing or advertising services. For example, we may use Shopify and third-party services to support personalized advertising based on activity across different merchants and websites. These partners process information according to their own privacy notices.
- **Third parties at your direction or with your consent**, such as shipping providers or services you choose to connect through social media widgets or login integrations.
- **Affiliates or entities within our corporate group**, if any.
- **Parties involved in a business transaction**, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
- **Government authorities, courts, and other parties** when necessary to comply with legal obligations, respond to subpoenas, warrants, or similar lawful requests, enforce applicable terms or policies, or protect the Services, our rights, or the rights and safety of others.
## Sale, Sharing, and Targeted Advertising
We do not sell personal information for money. However, some disclosures involving advertising cookies, pixels, analytics, or marketing partners may be considered a “sale,” “sharing,” or use for “targeted advertising” under certain U.S. state privacy laws, even when no money is exchanged.
The categories of personal information that may be disclosed for these purposes include identifiers, commercial information, device and internet activity information, and inferences. The recipients may include advertising, analytics, and marketing partners.
Depending on where you live, you may opt out of these activities through our **Your Privacy Choices** page:
<https://www.durumcore.com/pages/data-sharing-opt-out>
Where required by applicable law, we also treat a recognized opt-out preference signal, such as Global Privacy Control, as a request to opt out for the browser and device from which the signal is sent.
## Relationship with Shopify
The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve the Services. Information submitted through the Services may be transmitted to and shared with Shopify and third parties located outside your country of residence.
We may use Shopify features that rely on information derived from your interactions with our store, other merchants, and Shopify to protect, operate, improve, and grow our business. For some of these features, Shopify may be responsible for processing personal information and responding to requests concerning Shopify’s use of that information.
For more information, review the [Shopify Consumer Privacy Policy](https://www.shopify.com/legal/privacy/consumers) and the [Shopify Privacy Portal](https://privacy.shopify.com/en).
## Third-Party Websites and Links
The Services may contain links to websites or online platforms operated by third parties. If you follow a link to a site that is not affiliated with or controlled by us, review that site’s privacy and security policies and other terms. We are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites or platforms.
Information you disclose in public or semi-public areas, including on third-party social media platforms, may be visible to other users and may be used by us or third parties without the restrictions that apply to information submitted privately to us. A link from the Services does not by itself mean that we endorse the third party, its content, or its operators.
## Children’s Privacy
The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or legal guardian and believe a child under 13 has provided personal information to us, contact us so that we can take appropriate steps, including deleting the information where required.
As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined by applicable law, personal information belonging to individuals under 16.
## Security and Retention
No security measure is perfect or impenetrable, and we cannot guarantee absolute security. Information may also be insecure while in transit. Do not use unsecured communication channels to send sensitive or confidential information to us.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including maintaining your account, providing the Services, completing transactions, complying with legal and tax obligations, preventing fraud, resolving disputes, and enforcing agreements and policies. The retention period for a particular category of information depends on the nature of the information, the purpose for which it was collected, and applicable legal requirements. We delete or deidentify information when it is no longer reasonably necessary, unless a longer period is required or permitted by law.
## U.S. State Privacy Rights
Depending on your state of residence and whether the relevant law applies to us, you may have some or all of the following rights:
- **Right to know or access:** Request confirmation of whether we process your personal information and access the personal information we maintain about you.
- **Right to delete:** Request deletion of personal information we maintain about you, subject to legal exceptions.
- **Right to correct:** Request correction of inaccurate personal information.
- **Right to data portability:** Request a copy of certain personal information in a portable and, where technically feasible, readily usable format.
- **Right to opt out:** Opt out of the sale or sharing of personal information and the use of personal information for targeted advertising, where applicable.
- **Right to limit certain uses of sensitive personal information:** Request limits on certain uses or disclosures of sensitive personal information, where this right applies.
- **Right to appeal:** Appeal our decision if we deny a privacy rights request, where applicable.
These rights are not absolute. We may deny a request where permitted by law. We may need to verify your identity before processing a request and may request information reasonably necessary to do so.
You may designate an authorized agent to submit a request on your behalf where permitted by law. Before accepting a request from an authorized agent, we may require proof that you authorized the agent to act for you and may require you to verify your identity directly with us.
We will not discriminate against you for exercising a privacy right. To exercise a right, email **post@durumcore.com**. To opt out of sale, sharing, or targeted advertising, use our [Your Privacy Choices](https://www.durumcore.com/pages/data-sharing-opt-out) page.
## Additional Information for California Residents
If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to us, this section supplements the rest of this Privacy Policy.
During the preceding 12 months, we may have collected the categories of personal information described in **Personal Information We Collect or Process** above from the sources listed in **Sources of Personal Information**. We may have used and disclosed those categories for the business and commercial purposes described in **How We Use Personal Information** and **How We Disclose Personal Information**.
We may have disclosed identifiers, payment and customer records, commercial information, device and internet activity information, and inferences to service providers and contractors for business purposes. We may also have disclosed identifiers, commercial information, device and internet activity information, and inferences to advertising and marketing partners in ways that may be considered “selling” or “sharing” under the CCPA. We do not knowingly sell or share the personal information of consumers under 16.
California residents may exercise the applicable rights described in **U.S. State Privacy Rights**, including the right to opt out of sale or sharing. We do not offer financial incentives for personal information unless we provide separate notice describing the material terms of the program.
## Marketing Communications
You may unsubscribe from promotional emails at any time by using the unsubscribe link in the message. If you opt out of promotional communications, we may still send non-promotional messages, including messages about your account, orders, returns, or other transactions.
You may opt out of marketing text messages by following the instructions in the message, such as replying **STOP**, where available. Message and data rates may apply.
## EEA and UK Privacy Rights
Because Durumcore is operated from Norway, data protection laws applicable in the European Economic Area may also apply to our processing activities.
Where the General Data Protection Regulation or equivalent UK law applies, we rely on one or more of the following legal bases:
- **Performance of a contract**, including processing orders, payments, deliveries, returns, and account services.
- **Legitimate interests**, including operating and improving the Services, preventing fraud, securing the Services, responding to customers, and conducting proportionate marketing, provided those interests are not overridden by your rights and interests.
- **Consent**, including for certain marketing or non-essential cookies where required. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
- **Compliance with legal obligations**, including tax, accounting, consumer protection, and lawful authority requirements.
Subject to applicable exceptions and limitations, you may have the right to access, correct, erase, or receive a copy of your personal information; restrict or object to processing; request data portability; and withdraw consent. You may also complain to your local data protection authority. In Norway, the supervisory authority is [Datatilsynet](https://www.datatilsynet.no/en/about-us/).
## International Transfers
We, Shopify, and our other service providers may transfer, store, and process personal information outside the country where you live, including in the United States, Canada, and other countries whose privacy laws may differ from those in your jurisdiction.
Where required for transfers from the EEA or United Kingdom, we rely on recognized transfer mechanisms, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the applicable UK transfer addendum or agreement, or another lawful safeguard.
## Complaints and Appeals
If you have a complaint about how we handle personal information, contact us using the details below. Depending on where you live, you may have the right to appeal our response or submit a complaint to your state attorney general, another applicable privacy regulator, or your local data protection authority.
## Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the updated Privacy Policy on the website, update the “Last updated” date, and provide any additional notice required by applicable law.
## Contact Us
For questions about this Privacy Policy or our privacy practices, or to exercise a privacy right, contact:
Moutacim ENK / Durumcore
Organization number: 938 085 196 VAT
Business address: Kleivveien 18, 8533 Bogen i Ofoten, Norway
Email: post@durumcore.com
Website: <https://www.durumcore.com>
For purposes of applicable data protection law, Moutacim ENK is the controller of your personal information, except where another party, such as Shopify, acts as an independent controller for specified processing activities.
