Privacy Policy

Last updated: March 26, 2025

Northern Light Products (“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Who We Are

Company: Arctic Light Products AS
Contact adress: N-9020 Tromsdalen, Norway
Email: ak@northernlightproducts.no
Phone: +47 91 54 54 84
Reg: 995426560

(You can contact us for any data-related request.)

2. Personal Data We Collect

We may collect and process the following types of personal data:

Contact & Order Info: Name, email address, phone number, billing/shipping address
Payment Details: Processed securely by our payment providers; we do not store card numbers
Marketing Data: Preferences and communication history
Usage Data: IP address, browser type, device data, and website activity (via cookies and analytics tools)

3. Legal Basis for Processing

We process your personal data under the following legal bases:

Contractual necessity: To fulfill orders and provide services
Legal obligation: For accounting and regulatory compliance
Consent: For newsletter subscriptions or non-essential cookies
Legitimate interest: To improve our services and understand website performance

4. How We Use Your Data

We use your data to:

Fulfill and ship your orders
Send confirmations, updates, or respond to inquiries
Send promotional emails if you’ve opted in
Analyze website performance and user behavior

5. Data Retention

We retain personal data for as long as necessary:

Orders: Kept for 5–7 years for accounting and tax compliance
Marketing: Until you unsubscribe
Website usage data: Typically kept for up to 26 months (based on analytics tool settings)

6. Data Sharing & Transfers

We only share data with:

Payment processors (e.g. Stripe, Vipps)
Shipping providers (e.g. Bring, Posten)
Email platforms (for newsletters, if opted in)

Data is generally stored within the EEA. If any data is transferred outside the EEA, we ensure appropriate safeguards (e.g. Standard Contractual Clauses) are in place.

7. Your Rights (under GDPR)

You have the right to:

Access your personal data
Correct incorrect or outdated data
Request deletion (right to be forgotten)
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with your local Data Protection Authority (e.g. Datatilsynet in Norway)