Privacy Policy

Norbord AS · ÅlesHund · Company no. 935 503 205
Urabakken 4A, 6017 Ålesund, Norway
Email: kundeservice@aleshund.no
Phone: +47 40 01 81 51

Last updated: 1 November 2026.

1. Introduction

This explains how ÅlesHund handles personal data when you visit aleshund.no, shop, contact us or subscribe to our newsletter. Visiting the website or buying a product does not constitute consent to optional tracking.

2. Data controller

Norbord AS is the data controller for the shop. Contact us using the details above if you have questions or wish to exercise your privacy rights.

3. Information we collect

• For purchases: name, email, phone number when supplied, delivery address, products and customisations, discounts, shipping, taxes, order history, payment references, payment status, returns and tracking numbers. The payment provider handles the full card number and security code; the shop does not store them.
• For enquiries and subscriptions: information you send us, email address, consent and unsubscribe status. Newsletter subscription is a separate choice from consent to analytics and advertising tracking.
• For operation and security: technical requests, IP address, browser information and necessary logs. With optional consent, we also process website usage, campaign sources and measurement identifiers as described below.

4. How we use information

We process order and delivery information to enter into and fulfil the purchase contract, handle payment, send goods and respond to enquiries (GDPR Article 6(1)(b)). We process accounting records to meet legal obligations (Article 6(1)(c)). Security, abuse prevention and necessary follow-up rely on our legitimate interest in secure operation and customer service (Article 6(1)(f)), balanced against your privacy.

Optional analytics, advertising tracking, loading an external map and newsletters rely on your consent (Article 6(1)(a)). You can shop and contact us without accepting these purposes.

5. Sharing information

• Payment: Stripe processes card payments and payment methods such as Klarna, Apple Pay and Google Pay when you choose them. Vipps MobilePay processes Vipps payments. The selected provider receives information needed for payment, identification, security and any refunds. See Stripe, Klarna and Vipps MobilePay.
• Delivery, customer messages and accounting: Posten/Bring receives necessary delivery information. Brevo is used for order messages and newsletters/coupons when you subscribe. Kontify transfers necessary order and payment information to Fiken for accounting. The shop runs on a server hosted by OVHcloud; hosting and technical maintenance providers may process data to operate the shop.
• Analytics and advertising: Google and Meta receive measurement data only for purposes you have accepted. Kartverket and OpenStreetMap are used as described in section 8. We do not sell our customer list.

Some providers may process data outside the EEA. Transfers must have a valid basis, such as an adequacy decision or the EU standard contractual clauses with necessary supplementary safeguards. Contact us for information about the arrangements applicable to your data. Providers' own policies also apply to processing for which they are independently responsible.

6. Retention

We retain order information as needed for delivery, complaints, legal claims and statutory duties. Accounting documentation is normally retained for five years after the end of the financial year. Enquiries are retained as needed for follow-up or documentation. Unsubscribing stops newsletters; necessary consent and unsubscribe records may be retained to respect your choice.

Browser storage durations are listed in section 8. Your browser may shorten them. Google Analytics is configured to retain detailed event data for 2 months and user data for 14 months; new activity can renew the user data period. Aggregated reports may remain longer. Withdrawing consent does not automatically erase measurement data already sent; contact us if you want to request erasure.

7. Your rights

You can request access, correction, erasure, restriction and, where the conditions apply, data portability. You can object to processing based on legitimate interests and to direct marketing. You can withdraw consent at any time without affecting the lawfulness of earlier processing. Some information cannot be deleted immediately because of accounting duties or other lawful documentation needs.

Contact kundeservice@aleshund.no. You can also complain to the Norwegian supervisory authority, Datatilsynet.

8. Cookies

We use cookies and local browser storage. Under “Privacy choices”, you can accept all optional purposes, reject them or choose analytics, marketing and maps separately. Optional purposes remain off until you actively choose them. Necessary functions remain available. Accepting the terms of sale is not consent to tracking.

Necessary functions and preferences you ask us to remember

• Cart and order: __Host-aleshund-cart and __Host-aleshund-order-confirmation are secure cookies lasting up to 30 days. They connect your browser to the cart or private order confirmation. Product choices and delivery information are stored on the server, not as plain text inside these cookies.
• Privacy choices: aleshund-privacy-v1 stores your category choices locally for 180 days. Compatible consent records aleshund-analytics-consent-v1:live:G-L6LNLYVJ6J and aleshund-meta-permission-v1 also remain valid for up to 180 days. The secure cookie __Host-aleshund-google-consent may be stored for 180 days after analytics consent so that consent can also be withdrawn on the server.
• Language and appearance: aleshund-locale remembers your chosen language for one year. aleshund-theme and aleshund-aero-appearance remember light/dark appearance in local storage until you change the choice or clear website data. Temporary product choices during a language switch are valid for 30 minutes and stored only for the tab's session. Temporary cart, coupon and payment references are used to resume actions and prevent duplicate processing.
• Secure payment: Payment fields may use the provider's necessary storage to complete payment and prevent abuse. This is separate from the shop's optional analytics and advertising. See also Stripe's cookie information.

Analytics: Google Tag Manager and Google Analytics 4

Google Tag Manager (GTM) loads and controls tags. GTM loads when you allow analytics or marketing; allowing marketing alone does not activate Google Analytics. With analytics consent, GA4 measures page and product views, cart and checkout actions and confirmed purchases. Purchase data may be sent from the server once payment is confirmed; refund data may also be included. Measurement includes product IDs, quantities, amounts, currency, order ID and browser/session identifiers.

_ga and _ga_L6LNLYVJ6J are configured for up to 180 days. Campaign sources (UTM), referring website and landing page are recorded after analytics consent, with first and last sources linked to the order. aleshund-order-attribution-v1 uses session storage. We do not send names, email, phone numbers, delivery addresses or card details as GA4 event fields. Google nevertheless receives technical network information when the browser contacts its service. Google Signals and advertising personalisation are disabled in this GA4 configuration. Read Google's privacy policy.

Marketing: Meta Pixel and Conversions API

With marketing consent, we use Meta Pixel for Facebook/Instagram and the server-based Conversions API to measure visits, product views, items added to cart, checkout starts and confirmed purchases. Meta may match events to its users for advertising measurement and personalised advertising. The browser provides Meta with technical information, including IP address and browser data.

_fbp identifies the browser and _fbc connects a visit to an advertising click when available; they normally last up to 90 days. Server-based purchase events contain order ID, products, amount in NOK, time, a pseudonymous identifier, browser information and available fbp/fbc. We do not send names, email, phone numbers or delivery addresses in this CAPI configuration. A shared event ID helps prevent counting the same purchase twice; aleshund-meta-event-references may be remembered for the tab's session. See Meta's cookie policy and privacy policy.

Maps and address suggestions

The map on the contact page is provided by the OpenStreetMap Foundation and loads only when you allow maps or choose to load the map. OpenStreetMap then receives network and browser information, including IP address, to provide it. Our address is available without loading the map. Opening the map link takes you to OpenStreetMap's website. See OpenStreetMap's privacy policy.

When you type at least three characters in the street address field at checkout, suggestions are requested directly from Kartverket's address service. Kartverket receives the search text and network information, including your IP address. Your name, email, phone number, other order details and cookies are not sent with this lookup. We do not cache suggestions in browser storage. You can always fill in the address manually. See Kartverket's privacy policy.

Changing your choice

Open “Privacy choices” on the website to change or withdraw consent. We stop further optional measurement for the categories you turn off and remove associated cookies that the shop can access. Clearing website data in your browser may also remove the cart and saved preferences. Unsubscribe from newsletters separately using the link in the email or by contacting us. Brevo is used through our server for email; accepting cookies does not subscribe you to newsletters. See Brevo's privacy policy.

9. Changes to this privacy policy

We update this policy when services or processing change. The date above shows the latest update. New optional purposes require a new choice before activation.

10. Contact information

Norbord AS · ÅlesHund
Company no. 935 503 205
Urabakken 4A, 6017 Ålesund, Norway
kundeservice@aleshund.no
+47 40 01 81 51