Privacy policy
Last updated: 19 September 2026
1. ABOUT THIS PRIVACY POLICY
Oslo Signatur AS (“Oslo Signatur”, “we”, “us” or “our”) respects your privacy and processes personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
This privacy policy explains how we collect, use, store and protect personal data when you visit our online store, create a customer account, shop with us, contact us or otherwise use our services.
Our online store is operated using Shopify as its technical platform.
2. DATA CONTROLLER
Oslo Signatur AS is the data controller for personal data processed in connection with our online store and business, unless otherwise stated in this privacy policy.
Oslo Signatur AS
Org. no.: 936 797 156
Travveien 2
4580 Lyngdal
Norway
Email: kundeservice@oslosignatur.no
3. WHAT PERSONAL DATA WE PROCESS
Depending on how you use our online store, we may process:
- name
- email address
- telephone number
- delivery address
- billing address
- customer account information
- order and transaction information
- information about payment and payment status
- information about returns, cancellations and complaints
- communications you send to us
- technical information about your device, browser and IP address
- information about how you use the online store
- information required for personalised products, such as a name or text to be engraved or printed.
We aim to limit the collection of personal data to what is necessary for the relevant purposes.
4. HOW WE COLLECT PERSONAL DATA
We may collect personal data:
- directly from you when you shop, create a customer account or contact us
- automatically when you use the online store
- through cookies and similar technologies
- through Shopify and other service providers that help us operate the online store
- from payment, shipping and other service providers when this is necessary to complete an order.
5. WHY WE PROCESS PERSONAL DATA
PROCESSING ORDERS AND DELIVERING PRODUCTS
We use personal data to process orders, payments, deliveries, returns, cancellations and complaints.
Legal basis:
Performance of a contract with you and, where necessary, compliance with legal obligations.
CUSTOMER SERVICE AND COMMUNICATION
We use contact details to answer questions, handle enquiries and communicate with you about orders, products and services.
Legal basis:
Performance of a contract and our legitimate interest in providing customer service and managing our business.
CUSTOMER ACCOUNT
If you create a customer account, we process the information necessary to manage the account and give you access to relevant account and order information.
Legal basis:
Performance of a contract and, where relevant, our legitimate interest in managing the customer account.
ACCOUNTING AND LEGAL REQUIREMENTS
We process and retain information when necessary to comply with requirements under, among other things, bookkeeping, tax and duty legislation.
Legal basis:
Legal obligation.
SECURITY AND PREVENTION OF MISUSE
We may process information to protect the online store, our customers and our business against fraud, misuse, security incidents and other unlawful activities.
Legal basis:
Our legitimate interest in protecting our business, customers and services, as well as any legal obligations.
MARKETING
If you have consented to marketing, we may use your contact details to send information about products, offers and other marketing activities.
You can withdraw your consent or unsubscribe from marketing at any time.
Legal basis:
Consent where required by applicable law.
IMPROVING THE ONLINE STORE
We may use technical information and usage data to analyse and improve the online store, its functionality and the customer experience.
Legal basis:
Legitimate interest or consent, depending on the type of data and technology used and the applicable requirements.
6. PAYMENT
Payments may be processed through the payment solutions offered in the online store, such as Shopify Payments, Klarna and Vipps.
We process the information necessary to register and manage payments.
Payment providers may process personal data in accordance with their own privacy policies and terms.
7. SHOPIFY AND SERVICE PROVIDERS
Our online store is operated using Shopify.
Shopify may process personal data on our behalf for purposes including operating the online store, customer accounts, order processing, security and technical services.
You can read more about how Shopify processes personal data in Shopify’s Privacy Policy.
If you wish to exercise your privacy rights in relation to Shopify’s processing of data, or withdraw consent where applicable, you can visit Shopify’s Privacy Portal.
When Shopify Network Intelligence is enabled, Shopify may also process information about how customers interact with the online store, Shopify and other Shopify stores in order to provide enhanced services, including features related to personalisation, store performance and advertising.
Information about how Shopify processes personal data, and about customers’ rights with Shopify, can be found in Shopify’s Privacy Policy.
We may also use other service providers when necessary to operate our business, such as payment providers, carriers, IT providers, accounting services and other suppliers.
We seek to ensure that our service providers process personal data lawfully and securely.
8. COOKIES
The online store uses cookies and similar technologies to, among other things:
- ensure that the online store works
- complete purchases
- remember necessary settings
- improve the user experience
- analyse use of the online store
- support marketing features where permitted and the necessary consent has been given.
For non-essential cookies and similar technologies, consent may need to be obtained before the technologies are used. This is handled through the privacy and consent settings available in the online store.
You can manage or change your cookie settings through the available privacy settings.
9. WHO WE MAY SHARE PERSONAL DATA WITH
We may share necessary personal data with:
- Shopify
- payment providers
- shipping and delivery services
- IT and technology providers
- accounting and financial services
- other service providers that process data on our behalf
- public authorities where we are legally required to do so.
We do not share personal data with third parties beyond what is necessary for the stated purposes, unless we have another valid legal basis or are legally required to do so.
10. TRANSFER OF PERSONAL DATA OUTSIDE THE EEA
Some of our service providers may process personal data outside Norway or the EEA.
When personal data is transferred outside the EEA, the transfer shall take place in accordance with applicable data protection legislation and with the necessary safeguards and lawful transfer mechanisms.
If Shopify Network Intelligence is enabled, customers may also contact Shopify directly through Shopify’s Privacy Portal to exercise relevant rights in relation to Shopify’s processing of personal data.
11. RETENTION OF PERSONAL DATA
We retain personal data for as long as necessary for the purpose for which it was collected, or for as long as we are required or entitled to retain it by law.
Information relating to purchases, accounting and documentation may have to be retained for the period required by law.
When personal data is no longer needed, it shall be deleted or anonymised where possible and appropriate.
12. YOUR RIGHTS
Depending on the circumstances and applicable law, you may have the right to:
- access your personal data
- rectification of inaccurate or incomplete data
- erasure of personal data
- restriction of processing
- object to certain types of processing
- data portability
- withdraw consent where processing is based on consent.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
13. HOW TO EXERCISE YOUR RIGHTS
If you would like access to, rectification, erasure or restriction of the processing of your personal data, or have questions about privacy, you can contact us:
Oslo Signatur AS
Org. no.: 936 797 156
Travveien 2
4580 Lyngdal
Norway
Email: kundeservice@oslosignatur.no
We may ask for information needed to verify your identity before we process your request.
14. COMPLAINTS TO THE NORWEGIAN DATA PROTECTION AUTHORITY
If you believe that our processing of personal data does not comply with applicable data protection legislation, you can contact us.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
15. PERSONALISED PRODUCTS
If you order a product that is to be personalised, for example with a name, text or other information you provide, we use that information to produce and deliver the personalised product.
We recommend that you do not provide personal data about other people that is not necessary for the order.
16. SECURITY
We use technical and organisational security measures designed to protect personal data against unauthorised access, loss, alteration or misuse.
However, no method of electronic storage or transmission can be guaranteed to be completely secure.
17. CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy when necessary, for example if our business, our services or applicable legislation change.
The latest version will be available on our website.
18. CONTACT
If you have questions about this privacy policy or how we process personal data, you can contact us:
Oslo Signatur AS
Org. no.: 936 797 156
Travveien 2
4580 Lyngdal
Norway
Email: kundeservice@oslosignatur.no