Privacy policy

 

Last updated: 13th of May, 2026.

Michelangelo Media AS (Org. no. 935 656 273) operates the Gandrud Visuals brand and this website/store (“Gandrud Visuals”, “we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit gandrudvisuals.com and its subdomains, sign up to receive content (such as a free guide), make a purchase, or otherwise interact with our services (the “Services”).

Our store is hosted on Shopify, which provides the ecommerce platform that allows us to provide the Services. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls regarding the collection, processing, and disclosure of personal information.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1) Data controller and contact

Data Controller: Michelangelo Media AS (Gandrud Visuals)
Org. no.: 935 656 273
Address: Postboks 4128 Sjølyst, 0217 Oslo, Norway
Email: hello@gandrudvisuals.com

If you have questions about this policy or want to exercise your rights, contact us at the email above.

2) Personal information we collect

We collect personal information depending on how you interact with the Services.

A. Information you provide to us

  • Contact details: name, email address, phone number, billing and/or shipping address

  • Order details: products purchased, order history, digital download links or access details, delivery details, returns/refunds

  • Communications: messages you send us (e.g., support requests or emails)

  • Marketing preferences: newsletter subscription status, consent/opt-in records, unsubscribe requests

B. Information collected automatically

When you visit the website, we may automatically collect:

  • Device and usage information: IP address, browser type, device type, operating system, approximate location (derived from IP), pages viewed, links clicked, and interactions with the site

  • Cookies and similar technologies: used to operate the Services (see section 6)

C. Information from third parties

We may receive information from:

  • Shopify, as our ecommerce platform provider

  • Payment providers, to process transactions (we do not receive or store full payment card details)

  • Shipping/logistics providers, to deliver digital and/or physical orders

  • Service providers that help us run the website, send emails, or perform analytics (see section 5)

3) How we use personal information

We use personal information for the following purposes:

  1. To provide and operate the Services

    • process orders and payments

    • deliver digital products, download links, access links, guides, and other purchased or requested content

    • handle returns, refunds, and customer support

    • maintain customer records in Shopify

  2. To deliver requested content

    • send you content you request (for example, a free photography guide (PDF) via email)

    • manage delivery issues (for example, resending an email)

  3. Marketing and newsletters (only when you opt in)

    • if you subscribe, we may send occasional emails such as photography tips, updates, product launches, and offers

    • you can unsubscribe at any time via the link in any email

    • we keep records of subscription status and consent as needed to respect your preferences

  4. Analytics and improvement

    • understand how the website is used

    • improve content, design, performance, and user experience

    • measure the effectiveness of our content and marketing

  5. Security and fraud prevention

    • protect our website, customers, and business

    • detect suspicious activity and prevent misuse

  6. Legal obligations and enforcement

    • comply with accounting, tax, consumer protection, and other legal requirements

    • respond to lawful requests from authorities

    • enforce our terms and protect our rights

4) Legal bases for processing (GDPR)

If you are located in the EEA/UK/Switzerland, we process your personal information based on one or more of the following legal bases:

  • Contract (Art. 6(1)(b)): to fulfill orders, provide the Services, deliver requested content, and provide support

  • Consent (Art. 6(1)(a)): for marketing emails and certain cookies (where required)

  • Legal obligation (Art. 6(1)(c)): to comply with legal and regulatory requirements

  • Legitimate interests (Art. 6(1)(f)): to operate and improve our Services, maintain security, prevent fraud, and understand website performance (balanced against your rights)

You may withdraw consent at any time (for example by unsubscribing from marketing emails).

5) How we share personal information

We share personal information only as needed to operate the Services:

  • Shopify (hosting and ecommerce platform)

  • Payment processors (to process transactions)

  • Shipping and logistics providers (to deliver orders)

  • Email, communications, and digital delivery providers (to send requested content, download links, access links, order updates, and newsletters)

  • IT and service providers (hosting, security, performance, troubleshooting)

  • Analytics providers (if enabled) to help us understand usage and improve the website

  • Legal and compliance: if required by law, regulation, or legal process, or to protect rights, safety, and security

  • Business transfers: in the event of a merger, acquisition, restructuring, or sale of assets

We do not sell your personal information.

6) Cookies and similar technologies

We use cookies and similar technologies to operate and improve the Services. Cookies may include:

  • Strictly necessary cookies: required for core functionality such as security, fraud prevention, cart, and checkout

  • Analytics cookies (where enabled): help us understand how visitors use the website so we can improve it

  • Marketing cookies (where enabled): help measure marketing performance and deliver relevant advertising

You can manage cookies through:

  • your browser settings (note: disabling certain cookies may affect functionality), and

  • our cookie banner, where available.

7) Email marketing, consent, and unsubscribe

If you subscribe through our site (for example to receive a guide), you may receive:

  • the content you requested (e.g., the free guide), and

  • occasional emails with photography tips, updates, and product launches.

You can unsubscribe at any time using the unsubscribe link in any email. Unsubscribing from marketing emails will not affect transactional emails related to orders you place.

We may retain limited information (such as an unsubscribe record) to ensure we respect your preferences.

8) International transfers

Shopify and some service providers may process personal information outside Norway/EEA/UK. When personal information is transferred internationally, we rely on recognized safeguards such as:

  • the European Commission’s Standard Contractual Clauses (SCCs) and/or

  • other lawful transfer mechanisms under applicable data protection law.

9) Data retention

We keep personal information only as long as necessary for the purposes described:

  • Order and accounting records: retained as required by applicable law (e.g., bookkeeping and tax)

  • Marketing subscribers: retained until you unsubscribe or withdraw consent

  • Support messages: retained as needed to provide support and maintain reasonable records

  • Security logs: retained as needed to maintain and protect the Services

10) Your rights (EEA/UK/Switzerland)

If you are located in the EEA, UK, or Switzerland, you may have rights to:

  • access your personal information

  • correct inaccurate information

  • request deletion (where applicable)

  • object to or restrict certain processing

  • withdraw consent (for marketing/cookies where applicable)

  • request data portability (where applicable)

To exercise your rights, contact hello@gandrudvisuals.com.

You also have the right to lodge a complaint with your local data protection authority. In Norway, this is Datatilsynet.

11) Security

We use appropriate technical and organizational measures to protect personal information. However, no method of transmission or storage is completely secure. Please avoid sending sensitive information through insecure channels.

Shopify processes data in accordance with its security standards and policies.

12) Children

Our Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.

13) Changes to this policy

We may update this Privacy Policy from time to time. We will post updates on this page and revise the “Last updated” date.

14) Contact

Michelangelo Media AS (Gandrud Visuals)
Org. no.: 935 656 273
Postboks 4128 Sjølyst, Oslo, Norway
Email: hello@gandrudvisuals.com