Privacy & Data

The short version
We care about your privacy as much as we care about what's in our bottles. We only collect the data we actually need, we keep it secure and encrypted, and we never sell, rent or trade it. That's it.

Questions? Email us at support@blankhabit.co. Got an account? You can view and update your details anytime at blankhabit.co/account.

What we collect, and why
We only ask for what we need to get your order to you and keep things running. Depending on how you interact with us, that means:

• When you place an order — name, address, phone number and email, so we can process and deliver it.
• When you create an account — the same details, stored with your consent so checkout is faster next time.
• When you sign up for our newsletter — your email (and name), so we can send offers, new drops and the occasional good household tip. Only with your consent, and you can unsubscribe anytime.
• When you contact us — whatever you share with customer service, so we can actually help.

Who we share it with
We don't pass your data to anyone unless there's a legal basis for it — typically your explicit consent, or a legal obligation.

To run the shop, we rely on a few trusted partners who process data on our behalf. We have data processing agreements with all of them to keep your information secure at every step. Right now, these are:

• Shopify — our store platform, which handles orders and accounts.
• Klaviyo — for sending newsletters and campaigns.
• Google Analytics — to understand how people find and use our site.

All of these follow EU/EEA privacy rules. Where a provider is based in the USA, transfers rely on the EU–U.S. Data Privacy Framework and/or the EU's standard contractual clauses — so your data is just as protected as it would be within the EU/EEA.

Your rights
You're never obliged to give us your personal data — but we do need it to get you your order. You can access, correct or delete your data anytime, or withdraw your consent.

If you think we're handling your data wrongly, or breaching privacy law, you can contact us first — we'd genuinely like the chance to fix it. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.