Legal

Privacy Notice

Last updated: 22 October 2026

1. Who is responsible

Ittar AS (organisation number 837 346 932), Romeriksgata 55, 2003 Lillestrøm, Norway, is the controller for the personal data described here. Questions and requests about your personal data can be sent to info@ittar.no.

2. What we collect and why

When you place an order

We collect your name, email address, phone number and delivery address, the products and quantities you order, the language you shop in, the order amount, and the payment status and reference we receive from Vipps MobilePay. We use this to process the payment, deliver your order, send you the order confirmation, contact you about the delivery, and handle any withdrawal, complaint or refund.

The legal basis is that the processing is necessary to perform the purchase agreement with you (GDPR Article 6(1)(b)). Part of the order information is also kept as accounting records because Norwegian bookkeeping law requires it (GDPR Article 6(1)(c)).

We never see or store your full card details. Card and Vipps payments are handled entirely by Vipps MobilePay.

When you contact us

If you email us, including through the order inquiry or cancellation forms on the site (which open your own email app), we receive what you write and your email address, and use it to answer you. The legal basis is our legitimate interest in responding to enquiries, or the purchase agreement where the enquiry concerns an order.

When you browse the site

Like any website, our hosting provider receives technical information when your browser loads a page, such as your IP address, browser type and the page requested. This is used to deliver the site, keep it secure and produce aggregated statistics on visits and page performance. We do not use advertising or tracking cookies, and we do not build profiles of visitors.

3. Cookies and storage in your browser

The site stores a small amount of information in your browser that is needed for it to work:

• ittar_lang (cookie, kept for one year) remembers whether you chose English or Norwegian.
• Shopping cart (local storage) remembers what is in your cart until the order is complete.
• Intro animation (session storage) remembers that you have seen the opening animation, until you close the tab.

None of these are shared with anyone or used for tracking. You can delete them at any time in your browser settings.

4. Who we share data with

We only share personal data where it is needed for the purposes above, or where the law requires it:

• Vipps MobilePay processes your payment. Your phone number and the order amount are sent to Vipps MobilePay when you pay. Vipps MobilePay is responsible for its own processing of payment data, see its privacy notice.
• Delivery: whoever delivers your order receives the name, address and phone number needed to do so.
• Public authorities, such as the tax authorities or our accountant, where accounting or other legislation requires it.

We do not sell personal data, and we do not share it for marketing.

5. How long we keep data

• Order records are kept for as long as the accounting rules require, which is five years after the end of the financial year in which the order was placed. After that they are deleted. Information we need to handle a complaint is kept for as long as the complaint period runs (see section 10 of the terms of sale).
• Emails to us are kept for as long as needed to deal with the matter, and then deleted unless they form part of the order records.

6. Your rights

You have the right to request access to the personal data we hold about you, to have incorrect data corrected, and to have data deleted where we no longer need it or are not required to keep it. You can also ask us to restrict processing, object to processing based on our legitimate interests, and receive the data you have given us in a portable format. Send your request to info@ittar.no; we reply within 1 week.

If you believe we handle your personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet). We would appreciate the chance to resolve the matter with you first.

7. Changes

If we change how we handle personal data, we update this notice and the date at the top.