Privacy policy

Privacy Policy

We appreciate your interest in our website. Protecting your personal data is very important to us.
In this privacy policy, we inform you, in accordance with the General Data Protection Regulation (GDPR), about the type, scope and purpose of the processing of personal data when you use our website.

1. Responsible Person

The entity responsible for data processing on this website is:

River Flows B.V.
4321 Lassiter at North Hills Ave Raleigh
North Carolina 27609
United States

Email: hello@mynorvik.com
Telephone: +1 415 578 4170

As a company established in the European Union (Netherlands), we handle personal data in accordance with the GDPR.
Our online store operates under the shop name Norvik and primarily supplies goods to customers in the United States.

2. Access Data / Hosting

When you visit our website, data (so-called server log files) is automatically collected, which your browser transmits to our server or to Shopify:

Visited page
Date and time
Amount of data transferred
Referrer URL
Browser type and browser version
Operating system
IP address (shortened/anonymized)

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in stability and functionality).

Our website is hosted by Shopify International Ltd., 2nd Floor Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.
Further info: https://www.shopify.com/legal/privacy

3. Cookies & Consent Management

Our website uses cookies to provide features and to improve the user experience.

Types of cookies:

Essential cookies (e.g. shopping cart, checkout functions)
Functional and statistical cookies (Shopify Analytics)
Marketing cookies (only with consent)

Legal basis: Article 6(1)(b) GDPR – Contract performance | Article 6(1)(f) GDPR – Legitimate interests | Article 6(1)(a) GDPR – Consent via cookie banner.

You can disable cookies in your browser settings; however, this may result in functional limitations.

4. Making Contact

When you reach out to us via our contact form or by email, we process your information in order to handle your request.

Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) | Article 6(1)(f) GDPR (general communication).

Data will be deleted as soon as your request has been fully processed, unless statutory retention periods apply.

5. Customer Account & Orders

When you open a customer account or place an order, we process the following data: Name, Billing and delivery address, E-mail address, Phone number (optional), Order data.

Legal basis: Art. 6 para. 1 lit. b GDPR. Data is stored in accordance with commercial and tax-law requirements and deleted afterwards.

6. Payment Processing

Payments are processed via Shopify Payments. For this purpose, the following data may be transmitted: Name, Billing address, Payment details, Order information.

Legal basis: Art. 6 para. 1 lit. b GDPR. We do not store full payment details on our own servers.
Further info: Shopify Privacy Policy

7. Shipping & Logistics

In order to deliver your order, we pass on the necessary information (name, address and, where applicable, telephone number) to our warehouse and shipping partners.

Legal basis: Art. 6 para. 1 lit. b GDPR