Privacy Policy

emblastorm.com

Last updated: 20 June 2026

1. Introduction

Welcome to emblastorm.com (the "Website"), the official site for books and worlds written under the pen name Embla Storm. This Website is operated by an individual author based in Norway.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our Website. It also describes your rights under applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Norwegian Personal Data Act (Personopplysningsloven).

By using this Website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data collected through this Website is:

Embla Storm (pen name)

emblastorm.com

Norway

For all privacy-related inquiries, please contact us at: emblastorm@charmedinkcreations.com

3. What Personal Data We Collect

We may collect the following categories of personal data, depending on how you interact with the Website:

3.1 Data You Provide Directly

Name and email address — if you subscribe to a newsletter or mailing list
Messages and their content — if you contact us via a contact form or email
Purchase information — if you buy digital products, books, or other items through integrated third-party platforms

3.2 Data Collected Automatically

IP address and approximate location
Browser type, operating system, and device information
Pages visited, time spent on pages, and referring URLs
Cookies and similar tracking technologies (see Section 7)

3.3 Data from Third-Party Services

If you interact with embedded content (such as book previews, social media feeds, or embedded video), those third-party services may collect data about you independently. Please refer to those providers' own privacy policies for details.

4. Why We Collect Your Data (Legal Bases)

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

4.1 Consent (Article 6(1)(a) GDPR)

We rely on your consent to:

Send you newsletters, new release announcements, and author updates via email
Place non-essential cookies on your device (analytics, personalisation)

You may withdraw your consent at any time by unsubscribing from emails or adjusting your cookie preferences.

4.2 Contract Performance (Article 6(1)(b) GDPR)

If you purchase a product or service through this Website or an integrated platform, we process the data necessary to fulfil that transaction and provide customer support.

4.3 Legitimate Interests (Article 6(1)(f) GDPR)

We may process data based on our legitimate interests to:

Monitor and improve Website performance and security
Understand how visitors engage with our content, in order to improve our author platform
Prevent fraud and enforce our terms

We have carried out a balancing test and concluded that our legitimate interests do not override your rights and freedoms.

4.4 Legal Obligation (Article 6(1)(c) GDPR)

We may process data where required to comply with applicable Norwegian or EU law.

5. How We Use Your Data

We use your personal data for the following purposes:

To operate and maintain the Website
To send you email updates, newsletters, and new release notifications (with your consent)
To respond to your questions and enquiries
To process orders and deliver digital products (via third-party platforms)
To analyse Website traffic and improve user experience
To comply with our legal obligations

6. Sharing Your Data with Third Parties

We do not sell your personal data. We may share your data with third parties only in the following limited circumstances:

6.1 Service Providers

We use trusted third-party service providers to help us operate the Website. These may include:

Email marketing platforms (e.g. MailerLite, Mailchimp, or similar) — for newsletter delivery
Website hosting and infrastructure providers
Analytics providers (e.g. Google Analytics) — to understand Website traffic
E-commerce or book-sale platforms (e.g. BookFunnel, Payhip, Shopify, or similar) — for product delivery

These providers are contractually bound to process your data only on our instructions and in accordance with GDPR.

6.2 Legal Requirements

We may disclose your data if required to do so by Norwegian law, court order, or governmental authority.

6.3 International Transfers

Some of our service providers may be located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses, to protect your data in accordance with GDPR Chapter V.

7. Cookies and Tracking Technologies

This Website uses cookies — small text files placed on your device — to improve your experience and gather usage statistics.

7.1 Types of Cookies We Use

Essential cookies — necessary for the Website to function correctly; these do not require consent
Analytics cookies — help us understand how visitors use the Website (e.g. Google Analytics); require consent
Functional cookies — remember your preferences; require consent

When you first visit the Website, you will be presented with a cookie consent banner. You can manage or withdraw your cookie consent at any time by adjusting your browser settings or using the cookie preference tool on this Website.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Policy, or as required by law:

Newsletter subscriber data: retained until you unsubscribe
Contact form enquiries: retained for up to 24 months after resolution
Analytics data: typically retained for 14 months (Google Analytics default), or as configured
Purchase records: retained for the period required under Norwegian accounting law (generally 5 years)

9. Your Rights Under GDPR

As a data subject under the GDPR and the Norwegian Personal Data Act, you have the following rights:

Right of access (Article 15) — to request a copy of the personal data we hold about you
Right to rectification (Article 16) — to request correction of inaccurate or incomplete data
Right to erasure (Article 17) — to request deletion of your personal data ("right to be forgotten")
Right to restriction of processing (Article 18) — to request that we limit how we use your data
Right to data portability (Article 20) — to receive your data in a structured, machine-readable format
Right to object (Article 21) — to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at: emblastorm@charmedinkcreations.com

We will respond to your request within 30 days. In complex cases, this may be extended by a further two months; you will be informed if this is the case.

If you believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):

Datatilsynet

Postboks 458 Sentrum, 0105 Oslo, Norway

Website: www.datatilsynet.no

Email: postkasse@datatilsynet.no

10. Children's Privacy

This Website is not directed at children under the age of 13 (or under 16 in jurisdictions where a higher age threshold applies under GDPR Article 8). We do not knowingly collect personal data from minors.

If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us and we will take steps to delete that information promptly.

11. Data Security

We are committed to keeping your personal data secure. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure. These measures include:

Secure HTTPS connection across the Website
Use of reputable, GDPR-compliant third-party processors
Limiting access to personal data to those who need it to operate the Website

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Third-Party Links

This Website may contain links to external sites, including retailer pages (Amazon, Kobo, etc.), social media platforms (TikTok, Instagram, Facebook), and distribution services. This Privacy Policy does not apply to those third-party websites. We encourage you to review their own privacy policies before providing any personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last updated" date at the top. Where changes are material, we will notify you by email (if you are a subscriber) or by a prominent notice on the Website.

Your continued use of the Website after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact:

Embla Storm

emblastorm.com

Email: emblastorm@charmedinkcreations.com