Privacy Policy
This Privacy Policy explains how Alone Nord AS collects, uses, and protects personal data when you use this website and related services.
1) Data controller (Norway)
Alone Nord AS is the data controller for personal data processed on this site.
- Company: Alone Nord AS
- Website: alonenord.no
- Email: post@alonenord.no
- Address: Varden 128, 9018 Tromsø, Norway
- Org. no.: 935 729 386 (MVA)
2) What data we collect
- Account data: name, email, address, phone, and login details when you register or sign in.
- Order data: products, quantities, sizes, prices, discounts, and order history.
- Payment data: payment is processed via PayPal; we receive confirmation and order status, not your card data.
- Contact form data: name, email, phone, and message content.
- Technical data: device/browser information, IP address, session identifiers, and cookies required for authentication and security.
3) Legal basis for processing (GDPR)
- Contract (Art. 6(1)(b)): to create accounts, process orders, and deliver services.
- Legal obligation (Art. 6(1)(c)): accounting, invoicing, and compliance requirements.
- Legitimate interests (Art. 6(1)(f)): security, fraud prevention, and service improvement.
- Consent (Art. 6(1)(a)): where required, such as non‑essential cookies or marketing.
4) How we use your data
- To create and manage your account and sign‑in sessions.
- To process orders, generate invoices, and send confirmations.
- To support customer service inquiries and respond to messages.
- To secure the site, prevent fraud, and protect access.
- To comply with legal obligations (e.g., accounting records).
5) Cookies and session storage
We use essential cookies for authentication, session management, and security. These are required for the site to function. If non‑essential cookies are used (e.g., analytics), you will be asked for consent.
6) Third‑party services
- PayPal: payment processing. PayPal handles sensitive payment data.
- Google reCAPTCHA: spam and abuse prevention on forms.
- Email delivery: sending account and order emails (including invoices).
These providers may process personal data under their own privacy policies.
7) International transfers
Some providers (e.g., PayPal and Google) may process data outside the EEA. Transfers use appropriate safeguards.
8) Data retention
- Orders and invoices: retained as required by Norwegian accounting rules.
- Account data: retained while the account is active, or longer if required by law.
- Support inquiries: retained as long as needed to resolve the inquiry.
9) Your GDPR rights
- Access, rectification, and erasure where applicable.
- Restriction or objection to processing.
- Data portability where applicable.
- Withdraw consent at any time for consent‑based processing.
10) Automated decision‑making
We do not use automated decision‑making or profiling that produces legal or similarly significant effects.
11) Security
We apply technical and organizational measures to protect your data, including secure cookies, HTTPS, and controlled access.
12) Contact
For privacy inquiries: post@alonenord.no.