Privacy Policy

Last updated: 20 September 2026

This policy explains what Nevin Solutions (Org. No. 936 682 960) (“Theracap”, “we”, “us”) collects when you visit this site or buy Theracap, why, and what rights you have over it. We collect as little as we can get away with, and we don’t sell your personal information.

1. What we collect

• Order information: name, email, phone, shipping and billing address, and order contents — collected at checkout, which runs on Stripe. We receive your order details from Stripe; your full card number never touches our servers.
• Support messages: anything you send us by email, including for a guarantee or warranty claim.
• Reviews: your name (or the name you choose to display), rating, review text and any photos you submit, if you leave one.
• Usage and device data: pages viewed, referring link, approximate location from IP address, browser and device type — collected automatically, and in more detail if you consent to analytics cookies (see below).
• Advertising data: if you arrive from a TikTok, Instagram or other ad and you’ve consented to advertising cookies, the platform that showed you the ad may receive a signal that you visited or bought, so we can measure whether the ad worked. See our Cookie Policy for exactly what runs and how to opt out.

2. Why we collect it, and our legal basis

• To take payment, fulfil and ship your order, and provide support — necessary to perform our contract with you.
• To process a guarantee claim, warranty claim, or return — necessary to perform our contract with you.
• To prevent fraud and meet our legal and tax obligations — a legal obligation, and our legitimate interest in not being defrauded.
• To understand how the site is used and improve it — our legitimate interest, or your consent where analytics cookies require it.
• To measure and improve our advertising — your consent, given through the cookie banner.
• To send you order updates and, only if you separately opt in, marketing emails — our contract with you, and your consent for marketing.

3. Who we share it with

We only share what each service provider needs to do its job for us:

• Stripe — payment processing.
• Our shipping carrier(s) — to deliver your order.
• Our hosting and email providers — to run this site and send order/support emails.
• A review platform, if you choose to leave a review.
• Advertising platforms (e.g. TikTok, Meta), only for the measurement described in our Cookie Policy, and only with consent where required.

We don’t sell your personal information, and we only share it beyond this list if the law requires it or to protect our rights, users or the public from harm.

4. International transfers

We and our service providers may process your data outside the country you live in, including in the United States. Where that involves data leaving the EU, UK or Switzerland, we rely on our providers’ Standard Contractual Clauses or an equivalent safeguard.

5. How long we keep it

We keep order records for as long as we need them for accounting, tax and warranty purposes (typically several years, as required by law), support messages for as long as needed to resolve your query and a reasonable time after, and marketing consent until you withdraw it. We delete or anonymise data we no longer need for these purposes.

6. Cookies

We use essential cookies to run checkout and remember your cookie choice, and — only with your consent — analytics and advertising cookies. Full details, including how to change your mind at any time, are on our Cookie Policy page.

7. Your rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you, and get a copy of it (access).
• Ask us to correct inaccurate data (rectification).
• Ask us to delete your data, subject to our legal obligation to keep order records (erasure).
• Ask us to limit how we use your data (restriction).
• Object to processing based on our legitimate interest, including direct marketing (objection).
• Withdraw consent for anything based on consent — such as marketing emails or analytics cookies — at any time, without affecting anything done before you withdrew it.
• Receive certain data in a portable format (portability).

To exercise any of these, email hello@theracap.store. We’ll respond within the time your local law requires (for example, one month under GDPR). We’re based in Norway, so our supervisory authority is Datatilsynet (the Norwegian Data Protection Authority), which you can complain to at any time; if you live elsewhere in the EU or EEA you can also complain to your own country’s data protection authority, and if you’re in the US, several states (including California, Colorado, Connecticut, Virginia and others) give you similar rights under their own privacy laws.

8. California residents

We don’t sell or “share” (as that term is defined under the CCPA) your personal information for cross-context behavioural advertising without your consent. You can exercise your CCPA rights, including to know, delete or correct your data, using the contact above. We won’t discriminate against you for doing so.

9. Children

This site isn’t directed at children, and we don’t knowingly collect data from anyone under 16.

10. Security

We use reasonable technical and organisational measures to protect your data, including relying on PCI-compliant processors (Stripe) for payment. No method of transmission or storage is perfectly secure, so we can’t guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time; the “Last updated” date above will change when we do. If a change is material, we’ll make it clearly visible on this page.

12. Contact

Nevin Solutions (Org. No. 936 682 960), Schøningsdal 3, 7020 Trondheim, Norway
hello@theracap.store