Privacy policy

Last updated: October 11, 2026

Levlaupp Store is operated by Levlaupp! AS (“Levlaupp”, “we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit Levlaupp Store, place an order, create an account, contact us, or otherwise use our website and related services (the “Services”).

Our online store is powered by Shopify. We also use third-party service providers, including production, fulfilment, payment, shipping, analytics, and customer service providers, where necessary to operate our store.

For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”), Levlaupp! AS is the data controller for the personal information described in this Privacy Policy, except where another party acts as an independent controller under its own privacy policy.

1. Personal Information We Collect

Depending on how you interact with our Services, we may collect or process the following categories of personal information:

  • Contact information, such as your name, email address, telephone number, billing address, and shipping address.
  • Order and transaction information, such as products ordered, order history, returns, cancellations, refunds, payment status, and delivery information.
  • Payment information, which is processed through Shopify and/or our payment service providers.
  • Account information, such as account identifiers, preferences, and account settings where customer accounts are available.
  • Customer service information, including information you provide when contacting Levlaupp Store Support.
  • Device and technical information, such as IP address, browser type, device information, operating system, and similar identifiers.
  • Usage information, including how you interact with our website, pages viewed, products viewed, and actions taken on the website.
  • Cookie and similar technology data, where applicable and permitted by law.
  • Marketing preferences, including whether you have chosen to receive marketing communications from us.

We only collect personal information that is reasonably necessary for the purposes described in this Privacy Policy.

Certain information, such as your name, delivery address, and information needed to process payment, is necessary for us to accept and fulfil an order. If you do not provide the information needed for a purchase, we may be unable to process or deliver your order. Subscribing to marketing communications is optional and is not a condition of making a purchase.

2. How We Collect Personal Information

We may collect personal information:

  • directly from you when you place an order, create an account, contact us, submit a return request, or otherwise provide information to us;
  • automatically when you use our website, including through cookies and similar technologies;
  • from Shopify and other service providers that support the operation of our store;
  • from payment providers, fulfilment partners, shipping providers, and other companies involved in processing your order; and
  • from advertising or analytics partners where such services are used and permitted by applicable law.

3. How and Why We Use Your Personal Information

We process personal information only where we have a valid purpose and legal basis to do so.

Processing and Fulfilling Your Order

We use your personal information to:

  • process and confirm your order;
  • process payments;
  • manufacture and fulfil your products;
  • arrange delivery;
  • provide order and shipping updates;
  • process cancellations, returns, refunds, and complaints; and
  • provide customer service relating to your purchase.

Legal basis: Processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Customer Service and Communication

We use your information to respond to enquiries, provide support, resolve problems, and communicate with you regarding your orders or our Services.

Legal basis: Performance of our contract with you and/or our legitimate interest in providing effective customer service and operating our business.

Legal and Regulatory Obligations

We may process personal information where necessary to:

  • comply with tax, accounting, consumer protection, or other legal obligations;
  • respond to lawful requests from authorities;
  • establish, exercise, or defend legal claims; and
  • retain records where required by law.

Legal basis: Compliance with a legal obligation and, where applicable, our legitimate interests in protecting our legal rights.

Security and Fraud Prevention

We may process information to detect, investigate, and prevent fraud, misuse, security incidents, and other unlawful or harmful activity.

Legal basis: Our legitimate interests in protecting our customers, business, website, and systems, and where applicable compliance with legal obligations.

Improving Our Store and Services

We may use information about how customers interact with our website to understand performance, improve functionality, troubleshoot issues, and improve the shopping experience.

Legal basis: Our legitimate interests in maintaining and improving our Services. Where consent is required for cookies or similar technologies, we rely on your consent.

Marketing

Where you have subscribed to marketing communications, we may use your contact information to send you information about products, offers, or news from Levlaupp Store.

Where required by law, we will only send electronic marketing communications with your consent.

You can unsubscribe at any time by using the unsubscribe link in our marketing emails.

Legal basis: Your consent for marketing communications to which you subscribe.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

  • operate essential website functionality;
  • remember preferences;
  • maintain security;
  • understand website performance and usage; and
  • support analytics or advertising where enabled.

Where required by law, non-essential cookies and similar technologies will only be used after you have provided consent.

You can accept or reject optional cookies through our cookie banner and choose individual categories through its preferences panel. You can reopen the panel and change your choices using Cookie settings in the Terms and policies menu in our website footer. The labels may be translated into your selected language. Necessary cookies support essential functions such as the cart and cannot be switched off through that panel.

For more information about how Shopify uses cookies and processes information, please refer to Shopify's applicable privacy information.

5. Shopify and Shopify Network Intelligence

Our store is hosted and powered by Shopify. We share personal information with Shopify to operate the website, checkout, payments, customer accounts, security, and related services.

Shopify Network Intelligence is enabled for our store. Shopify uses information about customer interactions with our store together with information from interactions with other merchants and with Shopify to provide enhanced services, including improvements to services, personalisation, and advertising. Shopify acts as an independent data controller for its enhanced services, as described in its privacy documentation.

For visitors in the EEA, the UK, and Switzerland, advertising based on these interactions requires consent. You can withdraw your website consent through the cookie settings described in section 4. According to Shopify, when a visitor does not consent to non-essential tracking through its integrated cookie banner, device data from that visit is not used by Shopify Network Intelligence for non-essential purposes.

Please read Shopify's Consumer Privacy Policy for information about its independent processing. You can use Shopify's Privacy Portal to learn how to exercise rights, withdraw consent, or object to Shopify's processing for enhanced services. You can contact us about processing for which Levlaupp! AS is responsible.

Shopify and its service providers may process information in other countries; see section 9.

6. Production and Fulfilment

We use Gelato as a production and fulfilment partner.

Where necessary to manufacture and deliver your order, relevant personal information may be shared with Gelato and associated production or logistics providers.

This may include information such as:

  • your name;
  • delivery address;
  • contact information;
  • order details; and
  • information necessary to manufacture and deliver your products.

Gelato receives this information for purposes connected with producing, fulfilling, and shipping orders placed through Levlaupp Store.

You should contact Levlaupp Store Support, rather than Gelato, regarding orders placed through our store.

7. Payments, Accounting, and Other Service Providers

Payments

We use Shopify Payments, including the payment methods offered through that service. Available methods depend on your location, currency, eligibility, and our checkout settings. Payment information is processed by Shopify and the relevant payment providers and financial institutions.

Where Klarna is offered, we may share contact and order information with Klarna during checkout so it can assess eligibility for its payment options and personalise the options offered. Information may include your name, address, email address, telephone number where provided, order contents, and purchase amount, as required for the relevant service. Klarna's processing is described in Klarna's Privacy Notice. See also section 19.

Accounting

Levlaupp! AS uses Tripletex for accounting and engages Regnskapskontoret Karmøy AS for bookkeeping. We may share information necessary to document sales, payments, refunds, and tax obligations with these services. This can include customer identification and billing details contained in sales documents, order references, purchased items, dates, amounts, applicable tax, payment references, fees, and refunds. Sharing may be manual or through an integration where one is subsequently implemented.

The legal basis for required accounting and tax records is compliance with our legal obligations. We limit shared information to what is needed for those purposes.

Other recipients

We may also share necessary information with production and fulfilment partners, shipping carriers, banks, IT and hosting providers, email and customer-service providers, professional advisers, and analytics or marketing providers where those services are used lawfully.

Recipients may act as processors on our behalf or as independent controllers, depending on the service. We do not share more information than is reasonably necessary for the relevant purpose.

8. When We May Otherwise Disclose Information

We may also disclose personal information:

  • when required by law, court order, or valid governmental request;
  • to investigate fraud or unlawful activity;
  • to protect the rights, property, safety, or security of Levlaupp, our customers, or others;
  • in connection with a merger, acquisition, restructuring, financing, sale, or transfer of all or part of our business; or
  • where you have specifically requested or consented to the disclosure.

9. International Transfers of Personal Information

Personal information may be processed outside Norway and the European Economic Area (EEA). The Shopify customer-data hosting location shown for our store is the United States. Other processing locations depend on the service and provider.

Shopify describes its transfer safeguards in its Data Processing Addendum, including European Commission adequacy decisions where applicable and Standard Contractual Clauses for transfers requiring those safeguards. Its independent processing is also explained in its Consumer Privacy Policy.

Gelato's international production and service network may involve processing outside the EEA. Its Data Processing Terms describe transfer protections, including applicable Data Privacy Framework arrangements and/or Standard Contractual Clauses for relevant subprocessors.

The safeguard applicable to a transfer depends on the recipient and destination. You can contact support@levlaupp.store to request details of safeguards applicable to your personal information and information about how to obtain a copy. Documents may be redacted where necessary to protect confidential information or the rights of others.

10. Data Retention

We retain personal information for the period needed for the purpose for which it was collected. The period depends on the category of information and any applicable legal requirements. We determine retention using the following criteria:

  • Orders, deliveries, returns, and refunds: We retain the information needed to complete the purchase and deal with any outstanding delivery issue, return, refund, complaint, or applicable claim period. Information that must be retained for accounting or other legal purposes is kept separately for those purposes.
  • Accounting and tax records: Primary accounting records, such as sales invoices, credit notes, payment records, fee documentation, and accounting specifications, are normally retained for five years after the end of the relevant financial year, together with personal information necessary to make those records complete. Secondary accounting documentation is normally retained for three years and six months after the end of the relevant financial year. Supporting documents needed to make a primary record complete are retained with that record. Longer periods may apply under specific legal requirements or an authority's retention order.
  • Customer support correspondence: Routine correspondence is retained while the enquiry is being handled and for 12 months after the case is closed. We review closed cases monthly and delete routine correspondence whose retention period has expired. Where correspondence is needed for an outstanding complaint, legal claim, or accounting obligation, the relevant information is kept for that purpose and applicable period.
  • Customer accounts: Where accounts are available, we retain account information while the account is maintained. On closure or a valid deletion request, we delete or anonymise information that is no longer needed. Order records subject to a separate legal retention requirement may be retained.
  • Marketing preferences: We retain subscription information while the subscription remains active. Following withdrawal or an objection, we stop the relevant marketing and may retain a limited suppression record to ensure we respect your choice.
  • Cookies and analytics: Session cookies expire with the relevant browser session; persistent cookies have individual expiry periods determined by the cookie and service. Analytics records are retained according to the purpose and the applicable service settings. Contact us for information about the cookies and retention settings applicable to your visit. Consent choices can be changed as described in section 4.
  • Security and fraud-prevention records: We retain records for the period needed to investigate and resolve a security or fraud issue, having regard to its severity and any related claim or legal obligation.
  • Legal claims: Where specific information is needed for an actual or reasonably anticipated legal claim, we retain it for the relevant limitation period and, where necessary, until the matter is finally resolved.

When information is no longer needed for any valid purpose, we delete it or irreversibly anonymise it. A request to delete information does not require us to erase records that we are legally obliged to retain. Any retained information remains limited to the applicable purpose.

11. Security

We take reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, destruction, alteration, unauthorised disclosure, or access.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

Please do not send sensitive payment information, passwords, or other highly confidential information to us by ordinary email.

12. Your Privacy Rights

Depending on applicable law and your circumstances, you may have the right to:

  • request access to the personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal information;
  • request restriction of processing;
  • object to certain processing;
  • receive certain personal information in a portable format;
  • withdraw consent where processing is based on consent; and
  • object to direct marketing at any time.

These rights are not absolute and may be subject to legal exceptions.

To exercise your rights, please contact:

support@levlaupp.store

Please describe the right you wish to exercise and provide enough information for us to identify the relevant records, for example the email address used for your order. Do not send passwords or full payment-card details.

If we have reasonable doubts about your identity, we may request additional information necessary to confirm it.

We respond without undue delay and normally within one month of receiving your request. Where permitted under GDPR, this period may be extended by up to two further months because of the complexity or number of requests. If an extension is necessary, we will tell you within the first month and explain why.

Requests are normally free of charge. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act where permitted by law. If we cannot fulfil a request, we will explain the reason and your options for complaining to a supervisory authority or seeking a judicial remedy.

In particular, a deletion request may not cover records we must retain to comply with a legal obligation or to establish, exercise, or defend legal claims.

13. Marketing Preferences

You may unsubscribe from promotional emails at any time by clicking the unsubscribe link included in those emails.

Even if you unsubscribe from marketing, we may still send you non-promotional communications that are necessary to administer your account or orders, such as:

  • order confirmations;
  • shipping notifications;
  • return or refund information;
  • security messages; and
  • customer service communications.

14. Children's Privacy

Our Services are not directed at children.

We do not knowingly collect personal information from children in circumstances where parental or guardian consent is legally required.

If you believe that a child has provided personal information to us inappropriately, please contact us at support@levlaupp.store.

15. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security, or content of websites that we do not control.

We recommend reviewing the privacy policies of any third-party services you choose to use.

16. Complaints

If you have concerns or complaints about how we process your personal information, you can contact us at:

support@levlaupp.store

You also have the right, where applicable, to lodge a complaint with the competent data protection supervisory authority.

As Levlaupp! AS is established in Norway, you may contact the Norwegian Data Protection Authority (Datatilsynet). If you live elsewhere in the EEA, you may also have the right to contact the relevant supervisory authority in your country.

You do not need to contact us before lodging a complaint. Information about how to complain is available at Datatilsynet.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • our business;
  • our Services;
  • the technologies or providers we use; or
  • applicable legal or regulatory requirements.

When we make changes, we will publish the updated Privacy Policy on our website and update the Last updated date.

Where required by law, we will provide additional notice of material changes.

18. Contact and Data Controller

For questions about this Privacy Policy, our privacy practices, or your personal information rights, please contact:

Data controller: Levlaupp! AS
Store: Levlaupp Store
Company registration number: 937 003 846
Email: support@levlaupp.store
Phone: +47 489 099 98
Business address: Brakkevegen 10, 4275 Sævelandsvik, Norway

For the fastest and most efficient assistance, we recommend contacting us by email at support@levlaupp.store.

19. Payment Eligibility and Automated Processing

Payment providers may use automated processing to assess payment eligibility, creditworthiness where relevant, transaction security, or fraud risk. An assessment may affect whether a particular payment method or transaction is approved. Processing for which a provider acts as an independent controller is governed by its own privacy notice, including information about the data and logic used and applicable rights to challenge decisions or request human review.

For Klarna, see Klarna's Privacy Notice. For Shopify's independent processing, see Shopify's Consumer Privacy Policy and Privacy Portal.

Contact support@levlaupp.store if you need help identifying the provider responsible for a payment decision or have a question about an order decision made by Levlaupp! AS. You may also contact the relevant provider directly to exercise rights relating to its independent processing.