Privacy Policy

V&K Shop AS (org. no. 000 000 000), 917 Vapik River, Norway, is the controller of the personal data collected on vikbutikk.no. Questions about privacy can be sent to support@vkshop.com.

• When you shop: name, address, email, phone number, what you have bought and payment status. We never have access to card numbers or bank details – payment is handled by Vipps and Klarna.
• When you create a customer account: also username, password (encrypted) and order history.
• When you contact us: what you write to us and your contact details.
• When you subscribe to the newsletter: your email address.
• When you ask to be notified when an item is back in stock: name and email address.
• When you visit the website: technical information such as IP address, browser type and time, in server logs.

• Processing and delivering your order and handling returns and complaints – to perform our agreement with you (GDPR Art. 6(1)(b)).
• Keeping accounting records – legal obligation under the Norwegian Bookkeeping Act (Art. 6(1)(c)).
• Answering enquiries and providing customer service – agreement or legitimate interest (Art. 6(1)(b) and (f)).
• Sending newsletters and stock alerts – your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Protecting the website against misuse and errors – legitimate interest (Art. 6(1)(f)).

We do not use your data for automated decision-making or profiling.

• Order and accounting data is kept for five years after the end of the financial year, as required by the Bookkeeping Act.
• Your customer account is kept until you delete it or ask us to delete it.
• Your newsletter email address is kept until you unsubscribe.
• Stock alerts are deleted once the alert has been sent or you unsubscribe.
• Server logs are deleted on a rolling basis, normally within 30 days.

We never sell your personal data. We only share it with providers who need it to deliver the service to you:

• Posten/Bring – name, address, phone and email to deliver your parcel.
• Vipps MobilePay and Klarna – the information needed for payment. They are independent controllers for the payment.
• Providers of operation and hosting of the online shop – as processors under an agreement with us.

Some providers may process data outside the EEA. In that case, the transfer is based on the European Commission's standard contractual clauses or another valid transfer mechanism.

We only use cookies and local storage that are necessary for the online shop to work:

• vk_cart_token – keeps your shopping cart while you shop.
• Local storage in your browser – remembers your wishlist and the number of items in your cart. This information stays on your device.
• At checkout – cookies from WooCommerce, Vipps and Klarna that are needed to complete the payment.

We currently use no cookies for analytics or marketing. If we start doing so, we will ask for your consent first.

You have the right to access the data we hold about you and to have it corrected or deleted. You can also ask us to restrict processing, object to processing, receive your data in a machine-readable format (data portability) and withdraw your consent.

Email support@vkshop.com and we will reply within 30 days. We may ask you to confirm your identity. Please note that we cannot delete data we are required to keep under the Bookkeeping Act.

If you believe we process your personal data in breach of the regulations, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no). We would appreciate it if you contacted us first so that we can put things right.

All communication with the online shop is encrypted (HTTPS). Access to personal data is limited to those who need it for their work.

We may update this privacy policy when the service or the regulations change. The date at the top shows when it was last updated.