PRIVACY POLICY
Last updated 16 October 2026
Who is responsible
Eat More Plants AS is the controller of the personal data collected on eatmoreplants.no. This policy explains what we collect, why, who we share it with and what rights you have.
Company: Eat More Plants AS
Organisation number: 923 554 513
Address: Skjomenveien - Kongsbakk 141, 8523 Skjomen, Norway
Email: eatmoreplantsas@gmail.com
If you have questions about privacy, or want to use your rights, send us an email.
What we collect and why
We only collect what we need to give you the recipes, the membership and the newsletter. We never see your card details; the payment provider handles them.
Free account: name, email and login details, to give you access to free recipes. Basis: contract (GDPR art. 6 b).
Membership: name, email, plan, payment status and invoices, to give access to all recipes, invoice and keep accounts. Basis: contract (b) and legal obligation (c).
Favourites: which recipes you saved, to show them to you. Basis: contract (b).
Newsletter: email, language and whether you open the emails, to send new recipes and offers. Basis: consent (a).
Chat and email to us: name, email and your message, to reply to you. Basis: legitimate interest (f).
Visiting the website: IP address, browser, device and pages viewed, for operation and security. Basis: legitimate interest (f).
Analytics: how you use the site, to improve it. Basis: consent (a).
Advertising: cookies and ad IDs, to show ads through Google AdSense. Basis: consent (a).
You can withdraw consent at any time. This does not affect processing that took place before you withdrew it.
Cookies
We only use strictly necessary cookies without consent. Everything else requires you to say yes in the consent banner, and you can change your choice at any time through “Cookie settings” at the bottom of the page.
Necessary (Wix): login, security and remembering your consent. No consent needed.
Functional (Wix): language and settings. Consent needed.
Analytics (Wix): which pages are visited and for how long. Consent needed.
Advertising (Google AdSense): ad IDs, ad measurement and personalised ads. Consent needed.
Advertising consent is collected through Google’s consent message. If you say no, you will see fewer, non-personalised ads. Read how Google uses data at policies.google.com.
Who we share data with
We never sell personal data. We only share it with providers that help us run the website, and with authorities when the law requires it.
Wix.com Ltd.: website, member accounts, favourites, newsletter, chat and analytics. Israel, EU and USA.
Membership payment provider (through Wix): takes payment for the membership. EU/EEA and USA.
Google Ireland Ltd. / Google LLC (AdSense): shows and measures ads. EU and USA.
Accountant and auditor when needed: bookkeeping under Norwegian law. Norway.
Transfers outside the EEA: Israel has an EU adequacy decision. Data sent to the USA goes to companies certified under the EU-US Data Privacy Framework, or is protected by the EU Standard Contractual Clauses (SCC).
How long we keep data
Account and favourites: until you delete your account, or it has been inactive for 3 years.
Membership and invoices: 5 years after the end of the financial year (Norwegian Bookkeeping Act).
Newsletter: until you unsubscribe.
Chat and email: 12 months after the last contact.
Cookies: from the end of the session up to 13 months.
Your rights
Email us at any time to use your rights. We reply within 30 days.
Access: find out what we store about you and get a copy.
Rectification: have incorrect data corrected.
Erasure: have your data deleted, unless the law requires us to keep it.
Restriction: ask us to pause the processing for a period.
Portability: get your data in a machine-readable format.
Objection: object to processing based on legitimate interest.
Withdraw consent: unsubscribe through the link in every newsletter, and change cookie choices through “Cookie settings” at the bottom of the page.
You can also edit and delete your account yourself when logged in.
If you believe we process your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet. We appreciate it if you contact us first.
Children, security and changes
Children: You must be at least 16 to create an account or sign up for the newsletter. If we find that we hold data about someone under 16 without parental consent, we delete it.
Security: The website uses an encrypted connection (HTTPS). Only we have access to the data in the dashboard, and our providers are bound by agreements to protect it.
Changes: We update this policy when we change how we process data. The date at the top shows when it was last changed. For larger changes we will let you know by email or on the website.
