Plakato

Privacy Policy

Last updated: 6 March 2026

1. Data Controller

The data controller responsible for your personal data is:

Appivate AS
Org.nr: 815 992 482
Øvre Kråkenes 17, 5152 Bergen, Norway
Email: hello@appivate.com

Plakato is a brand and online store operated by Appivate AS.

2. What Personal Data We Collect

We collect the following categories of personal data:

  • Order information: name, email address, shipping address, and phone number when you place an order.
  • Payment information: payment details are processed securely by our e-commerce platform provider (Wix). We do not store your full credit card details.
  • Communication data: information you provide when contacting us via email.
  • Technical data: IP address, browser type, device information, and browsing behaviour collected through cookies and similar technologies.
  • Newsletter data: email address if you subscribe to our newsletter.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR (and the Norwegian Personopplysningsloven):

  • Contract performance (Art. 6(1)(b)): processing necessary to fulfil your order, deliver products, and provide customer support.
  • Legitimate interest (Art. 6(1)(f)): fraud prevention, improving our services, and website analytics.
  • Consent (Art. 6(1)(a)): marketing communications and non-essential cookies. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): retention of transaction records as required by Norwegian accounting law (Bokføringsloven).

4. How We Use Your Data

Your personal data is used to:

  • Process and fulfil your orders
  • Send order confirmations and shipping updates
  • Provide customer support and handle complaints
  • Improve our website and services
  • Send marketing communications (only with your explicit consent)
  • Comply with legal and accounting obligations

5. Data Processors and Third Parties

We share your personal data with the following trusted third-party processors who act on our behalf:

  • Wix.com: our e-commerce platform that handles the online store, checkout, and payment processing.
  • Gelato: our print-on-demand fulfilment partner that produces and ships your orders. Gelato operates a global network of 140+ production hubs in 32 countries, producing locally near the delivery address.
  • Shipping carriers: logistics partners such as DHL, FedEx, and local postal services that deliver your orders.

We do not sell your personal data to third parties. Data is only shared to the extent necessary to fulfil your order and operate our services.

6. International Data Transfers

As our fulfilment partner Gelato operates globally, your name and shipping address may be transferred to production facilities outside the EEA. Such transfers are safeguarded by:

  • EU Standard Contractual Clauses (SCCs) between us and our processors
  • Adequacy decisions by the European Commission where applicable
  • Our processors' compliance with applicable data protection regulations

7. Data Retention

We retain your personal data for the following periods:

  • Order data: 5 years after the transaction, as required by Norwegian accounting law (Bokføringsloven).
  • Customer support data: up to 2 years after the inquiry is resolved.
  • Newsletter subscriptions: until you unsubscribe.
  • Cookie data: see our Cookie Policy for specific retention periods.

8. Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

9. Your Rights Under GDPR

Under the GDPR and Norwegian data protection law, you have the following rights:

  • Right of access: obtain a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your data where there is no compelling reason for continued processing.
  • Right to restriction: request that we limit the processing of your data in certain circumstances.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interest, including direct marketing.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@appivate.com. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmitted through our website is encrypted using SSL/TLS technology. Payment processing is handled by PCI-compliant third-party providers.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated version will be posted on this page with a revised “last updated” date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Appivate AS
Øvre Kråkenes 17, 5152 Bergen, Norway
Email: hello@appivate.com