Privacy Policy

Last updated: August 28, 2026

This Privacy Policy explains how MERDAS ENKEL LIV (org. no. 938 195 307), operating as JOKERINE, collects, uses, discloses and protects your personal data when you use jokerine.com (the "Site") and purchase our services (the "Service").

1. Who we are

The data controller is:

2. Information we collect

We collect the following categories of personal data:

• Order information — your name, email address and the details you provide when ordering a personalized song (such as the recipient's name, your story, and any text you submit).
• Payment information — payment details you enter at checkout. These are collected and processed directly by our payment provider, Stripe. We do not see or store your full card number.
• Technical information — information automatically sent by your browser, such as IP address, device type, browser type and pages visited, collected through our analytics service.
• Communication — any information you send us by email or through our support channels.

3. How we use your information

We use your personal data for the following purposes:

• To fulfil your order — creating and delivering your personalized song.
• To process payments and prevent fraud.
• To respond to your questions and provide customer support.
• To improve the Site and the Service.
• To comply with legal obligations, such as accounting and tax requirements.

4. Legal basis for processing

We process your personal data on the following legal bases under the EU/EEA General Data Protection Regulation (GDPR):

• Performance of a contract — to deliver the Service you purchased.
• Legal obligation — accounting, tax and record-keeping duties.
• Legitimate interest — to improve the Service and respond to inquiries.
• Consent — where required by law.

5. Who we share your information with

We do not sell your personal data. We share it only as necessary with:

• Stripe — our payment processor, to process payments. Stripe's use of your data is governed by Stripe's own Privacy Policy.
• Hosting and analytics providers — to operate the Site and understand basic traffic.
• Authorities — when required by law.

6. International transfers

Some of our service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards required by law (such as standard contractual clauses) to protect your data.

7. How long we keep your information

We keep your personal data only as long as necessary for the purposes described above, or as long as we are legally required to (for example, accounting records are typically kept for five years under Norwegian law).

8. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

To exercise any of these rights, contact us at hebalauder@gmail.com.

9. Cookies and analytics

We use a privacy-friendly analytics service to understand basic, aggregate Site traffic. This may involve a small amount of technical data (such as IP address). We do not use advertising cookies or third-party tracking for marketing purposes.

10. Security

We take reasonable technical and organizational measures to safeguard your personal data against loss, misuse and unauthorized access. Payments are handled over encrypted connections by Stripe, which maintains industry-standard security (including PCI-DSS compliance).

11. Children

The Service is not directed at children under the age of 16. If you are under 16, please do not provide us with personal data.

12. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last updated" date.

13. Contact

Questions about this Privacy Policy can be sent to: