Privacy policy
Last updated: June 2026
This Privacy Policy describes how LOPAS AS ("we", "us", "our") collects, uses, and shares your personal information when you visit or make a purchase from 8rb4.com (the "Site").
WHO WE ARE
Data Controller: LOPAS AS
Norway
contact@8rb4.com
If you have questions about your personal data, contact us at the address above.
PERSONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect:
- Device information: IP address, browser type, time zone, referring URLs
- Usage data: pages visited, search terms, how you interact with the Site
- Cookie data: collected via cookies, pixels, and similar technologies
When you place an order, we collect:
- Name, billing and shipping address
- Email address and phone number
- Payment information (processed securely by our payment providers — we do not store card numbers)
- Order history
When you contact us, we collect:
- Your name, email address, and the contents of your message
LEGAL BASIS FOR PROCESSING
We process your personal data on the following legal bases under GDPR Article 6:
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your order | Contract (Art. 6(1)(b)) |
| Sending order confirmations and service emails | Contract (Art. 6(1)(b)) |
| Fraud prevention and security | Legitimate interest (Art. 6(1)(f)) |
| Analytics and improving the Site | Consent (Art. 6(1)(a)) |
| Marketing and personalized advertising | Consent (Art. 6(1)(a)) |
| Compliance with legal obligations (tax, accounting) | Legal obligation (Art. 6(1)(c)) |
HOW WE USE YOUR INFORMATION
We use your personal information to:
- Process and fulfill orders, including shipping and payment
- Send order confirmations, invoices, and shipping updates
- Respond to customer service enquiries
- Detect and prevent fraud
- Improve and optimize our Site (with your consent)
- Send marketing communications (only with your consent)
COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar tracking technologies. You can manage your preferences via the cookie banner when you visit the Site.
Necessary cookies — always active, required for the Site to function (e.g. shopping cart, checkout).
Analytics cookies — used to understand how visitors use the Site. Only activated with your consent.
Marketing cookies — used to deliver personalized ads. Only activated with your consent.
You may withdraw your consent at any time by clearing your browser's local storage or contacting us at contact@8rb4.com.
THIRD PARTIES AND DATA PROCESSORS
We share your personal data with the following third parties as necessary to operate our business. All processors are bound by data processing agreements compliant with GDPR Article 28.
| Processor | Purpose | Location |
|---|---|---|
| Shopify Inc. | E-commerce platform, order processing | USA (EU SCCs) |
| Shopify Payments | Payment processing (Visa, Mastercard, Amex, Maestro, UnionPay, Shop Pay, Apple Pay, Google Pay, Klarna, Bancontact, BLIK, MobilePay) | USA/EU (EU SCCs) |
| PayPal | Payment processing | USA (EU SCCs) |
| Third-party warehouse | Order fulfillment and shipping | China |
| Meta Platforms (Facebook/Instagram) | Personalized advertising (with consent) | USA (EU SCCs) |
| Contentsquare | Site analytics and behaviour insights (with consent) | USA/EU (EU SCCs) |
We do not sell your personal data to third parties.
INTERNATIONAL DATA TRANSFERS
Some of our processors are located outside the European Economic Area (EEA), including the United States. Where this is the case, transfers are made under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data is protected to EEA standards.
Your name and shipping address are also shared with our fulfillment warehouse located in China solely for the purpose of processing and shipping your order, on the legal basis of contractual necessity (Art. 6(1)(b) GDPR).
DATA RETENTION
| Data type | Retention period |
|---|---|
| Order information | 5 years (legal/accounting obligation) |
| Customer account data | Until account deletion is requested |
| Analytics data | Up to 13 months |
| Marketing consent records | Until consent is withdrawn + 3 years |
| Customer service correspondence | 2 years |
YOUR RIGHTS
If you are located in the EEA, you have the following rights under GDPR:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your personal data ("right to be forgotten")
- Right to restriction — request that we limit how we use your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent — withdraw consent at any time without affecting prior processing
To exercise any of these rights, contact us at contact@8rb4.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority. In Norway, this is Datatilsynet (www.datatilsynet.no).
SECURITY
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payment information is encrypted and processed by certified payment providers — we never store card details ourselves.
In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.
CHILDREN
Our Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us at contact@8rb4.com and we will delete it promptly.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Significant changes will be communicated via email or a notice on the Site.
CONTACT
LOPAS AS
Norway
contact@8rb4.com