Privacy

Who is responsible

14 Clubs is run by 14CLUBS AS, org.nr. 938646295, which is responsible for the personal data described on this page.

What we collect and why

When you use the contact form, we receive the name, email address and message you type in, and whether you asked for a copy. We use them to answer you and, if you bring us your clubs, to do the work and honour the 100-day quality guarantee.

If you email us, phone, send a text message or write to us on Instagram or TikTok, we receive what you send and use it in the same way. Messages on Instagram and TikTok are also handled by those services, under their own terms.

If you bring us your clubs, we also keep the invoice or receipt for the job. Every visit to the website also sends some technical details, described under Cloudflare below.

You do not have to give us anything. The form needs a name, an email address and a message so that we can reply, and it only works with JavaScript switched on; if you would rather not use it, phone or email us instead. We make no automated decisions about you: the human check only decides whether the form can be sent.

Our legal basis

Answering your enquiry and doing the job you ask for are steps you have asked us to take, so the basis is Article 6(1)(b) of the GDPR. Everything else rests on our legitimate interests, Article 6(1)(f): showing you the website and protecting it and the form against spam and attacks, answering questions that do not lead to a job and keeping them for a while in case you come back to us, and loading the map from Google when you press Show map. Invoices and receipts are kept because Norwegian bookkeeping law requires it, Article 6(1)(c). The GDPR applies in Norway through the Personal Data Act (personopplysningsloven).

Who else handles your data

These outside services help run the website and our email. Here is who they are and what each one sees.

• Cloudflare (Cloudflare, Inc., USA) hosts the website, forwards email sent to [email protected] to our mailbox, and runs the human check on the form. Every visit, and everything you send through the form, passes through Cloudflare. It sees the technical details your browser sends, such as your IP address, browser type and the page you asked for, so that it can deliver the page and block attacks. If a page fails to load, browsers such as Chrome and Edge may send Cloudflare a short error report. Cloudflare passes email on without keeping the message, but its delivery log records the sender, the recipient and the subject line.
• The human check (Cloudflare Turnstile) loads only when you start filling in the form, not before. It looks at your IP address and some signals from your browser to tell a person from a bot. It does not read what you type. Cloudflare may also use these signals to improve the check; for that use, Cloudflare is the controller, not us.
• Resend (Resend, Inc., USA) delivers the messages from the form to our mailbox, and the copy to you if you ask for one, under a data processing agreement with us. The emails are sent from Resend's servers in Ireland, but Resend keeps the message and its delivery log in the USA for 30 days. Your IP address is not passed to Resend.
• Google: our mailbox is a Gmail account, so Google stores your messages for as long as we keep them. In the EEA, Gmail is provided by Google Ireland Limited.
• Google Maps supplies the map on the home page, but only after you press Show map. Once you press it, Google receives your IP address, your browser details and any Google cookies your browser already holds, as on any visit to Google, and its own privacy policy applies.
• Stormberry AS (Norway) built the website and looks after it. To do that work it has technical access to the accounts that run the website and the form, at Cloudflare and Resend. It does not use your messages for anything else, and it has no access to the mailbox where we keep them.
• Bookkeeping: invoices and receipts are shared only where bookkeeping and tax rules require it, for example with an accountant or the Norwegian Tax Administration (Skatteetaten).

Cloudflare, Resend and Google may handle data in the USA, which is outside the EEA. Such transfers rely on the safeguards the GDPR allows, such as the EU-U.S. Data Privacy Framework and the EU's standard contractual clauses. Ask us if you would like to know more about these safeguards or where to find them.

The links to Instagram, TikTok, Google Maps and Apple Maps are plain links that open those services in a new tab, and what happens there is covered by their own privacy policies.

How long we keep it

We delete enquiries, and the conversations that follow them, once 12 months have passed since our last contact with you. We clear out old messages every three months, so nothing stays longer than 15 months, and by then the 100-day guarantee on any work has long run out. Invoices and receipts are the exception; see below.

Invoices and receipts are kept for as long as Norwegian bookkeeping law (bokføringsloven) requires, normally five years after the end of the accounting year.

The copy you can ask for stays in your own mailbox, for you to keep or delete.

What is stored in your browser

The website keeps up to three small notes in your own browser so that it remembers your choices. They stay in your browser and are not sent to us or anyone else:

• theme: light or dark, if you change it with the sun and moon button.
• lang: English or Norwegian, if you pick a flag.
• lang-routed: kept only until you close the tab; it notes that the English home page has already sent you on to the Norwegian one.

When you start filling in the form, Cloudflare's human check stores one entry of its own for this site, cf.turnstile.u. In rare cases, if a visit looks like an attack, Cloudflare may show its own check page before the site loads, and passing it sets a Cloudflare cookie.

All of this is needed for the site and the form to work as you asked, so we do not ask for consent. You can remove it at any time by clearing the site data for 14clubs.no in your browser settings.

Your rights

You can ask us:

• what we hold about you, and for a copy of it
• to correct it
• to delete it
• to limit how we use it
• to give it to you, or to someone you choose, in a format you can take with you

You can object at any time to anything we do on the basis of our legitimate interest. We will then stop, unless we have a compelling reason to continue, such as keeping the site secure.

If you change your mind after sending us a message, just tell us and we will delete it. We cannot delete records the law requires us to keep, such as invoices, and we will tell you if that applies. Short-lived copies held by our providers, such as Resend's 30 days, run out on their own.

Email contact@14clubs.no or phone +47 922 05 332. We answer as soon as we can, and within one month at the latest. It costs nothing.

Complaints

If you think we have handled your data wrongly, please tell us first so that we can put it right. You also have the right to complain to the Norwegian Data Protection Authority, Datatilsynet: www.datatilsynet.no.

Human dignity, ethics and our commitments

Every person has the same dignity and the same basic rights, and no business may take them away.

In our own work and in what we buy, such as grips, shafts, club heads, tools and materials, we do not accept:

• child labour in any form
• forced labour, debt bondage or any form of modern slavery
• human trafficking, or work done without free and informed consent
• discrimination on the basis of ethnicity, religion, sex, age, sexual orientation, disability, nationality or political opinion
• retaliation against anyone who raises a concern in good faith

We choose our suppliers on the same basis. Where there is a credible concern about how a supplier works, we look into it, raise it with them directly and, if necessary, stop buying from them. You can raise a concern in confidence by emailing contact@14clubs.no.

A business of our size is not covered by the duties of the Norwegian Transparency Act (åpenhetsloven), so these commitments are voluntary.

Changes to this page

If we change how we handle personal data, we update this page and the date at the top.