Privacy policy
Last updated: 29 October 2026
This policy explains what personal data we collect when you visit lysloypa.no, shop with us or receive our newsletter, and what we use it for.
Who is responsible
Lysløypa AS, org. no. 929390024, is the data controller. If you have questions about privacy, contact us at hei@lysloypa.no.
What data we collect
- When you shop: name, address, email, phone number, what you buy and when. Payment is handled by the payment provider, and we never see your card number.
- When you sign up for the newsletter: email address and possibly your name, and whether you open and click in the emails.
- When you visit the website: which pages you view, what you add to your cart, your device and browser. This is collected using cookies and similar technology.
What we use the data for
| Purpose | Legal basis |
|---|---|
| Processing and shipping your order, customer service | Contract with you |
| Bookkeeping | Legal requirement (Norwegian Bookkeeping Act, bokføringsloven) |
| Sending newsletters | Your consent |
| Sending previous customers information about new editions of Lysløypa | Legitimate interest (you can opt out at any time) |
| Measuring and improving our website and our ads | Your consent via the cookie banner |
| Showing ads on Facebook and Instagram to customers, subscribers and visitors | Your consent (cookies) and legitimate interest (customer lists) |
Who we share data with
We never sell your data. We use the following providers, who process data on our behalf:
| Provider | What they do |
|---|---|
| Shopify | Online store and order processing |
| Klaviyo | Newsletter and customer emails |
| Meta (Facebook/Instagram) | Advertising and measurement |
| Payment providers: Vipps and Stripe | Payment |
| Shipping: Posten/Bring | Delivery of your order |
Some of these are US companies. Transfers to the US are based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
Advertising on Facebook and Instagram
We use the Meta Pixel on lysloypa.no. It tells Meta which pages you visit and whether you make a purchase, so that we can measure whether our ads work and show ads to people who have visited us. The pixel only loads if you have accepted it in the cookie banner.
We also upload customer lists to Meta to target our ads to existing customers and subscribers, and to avoid showing purchase ads to people who have already bought from us. Email addresses are encrypted (hashed) before they are sent, and Meta only uses them to find matching accounts. Meta deletes the data that does not produce a match.
If you do not want to be included in these audiences, send us an email and we will remove you.
You can also control the ads you see in your ad settings on Facebook and Instagram.
How long we keep the data
- Order information: 5 years after the end of the financial year, as required by the Norwegian Bookkeeping Act (bokføringsloven).
- Newsletter: until you unsubscribe.
- Cookies: see the cookie banner for how long they last.
Your rights
You can have the data we hold about you corrected or deleted. Send an email to hei@lysloypa.no and we will reply within 30 days.
You can unsubscribe from the newsletter using the link at the bottom of every email.
Complaints
If you believe we are processing your data incorrectly, you can complain to the Norwegian Data Protection Authority (Datatilsynet). We would appreciate it if you contact us first, so we can put things right.