Privacy policy
Last updated: 10 October 2026
1. Who is responsible
Preikestolen Design AS (Ekenberg Scandinavia), org. no. 917 878 226, Kjærholen 63, 4316 Sandnes, Norway, is the controller for the personal data processed in the ekenberg.no online store. Contact: support@ekenberg.no, +47 930 31 766.
2. What we collect
- Contact and delivery details: name, address, email, phone number.
- Order details: products, prices, payment method and order history.
- Communication: messages you send to customer service and reviews you write.
- Technical data: IP address, device and browser information, and how you use the website (cookies), based on your choices in the cookie banner.
We never store your full card number. Payments are handled by the payment providers.
3. Why we use it and the legal basis
- To process and deliver your order, handle returns and complaints: to fulfil the contract (GDPR art. 6(1)(b)).
- Accounting: to comply with the Norwegian Bookkeeping Act (art. 6(1)(c)).
- Newsletter and marketing emails: based on your consent, which you can withdraw at any time via the link in every email (art. 6(1)(a)).
- Requests for product reviews after delivery, customer service and fraud prevention: our legitimate interest (art. 6(1)(f)).
- Analytics and advertising cookies: based on your consent in the cookie banner (art. 6(1)(a)).
4. Who we share data with
We share data only with providers that help us run the store, under data processing agreements where required:
- Shopify – online store platform and Shopify Payments (card payments).
- Klarna – if you choose Klarna at checkout. To offer Klarna's payment methods we pass your contact and order details to Klarna, so that Klarna can assess whether you qualify for its payment methods and tailor them to you. Klarna processes the data as an independent controller under Klarna's privacy notice.
- Vipps MobilePay – if you pay with Vipps. Vipps MobilePay processes the payment under its own privacy terms.
- DHL and Posten/Bring – delivery of your order (name, address, phone, email).
- Arven (Bergen) – packing, dispatch and returns on our behalf.
- Klaviyo – emails and newsletters.
- Loox – collecting and showing product reviews.
- Google (Analytics, Ads, Merchant Center) and Meta and Pinterest – analytics and advertising, only with your consent.
Some providers are located outside the EEA (e.g. the USA). Transfers are protected by the EU Commission's standard contractual clauses or the EU–US Data Privacy Framework.
5. How long we keep data
Order and accounting data is kept for 5 years as required by the Bookkeeping Act. Customer service correspondence is kept as long as needed to handle the matter and any complaint (up to 5 years). Newsletter data is kept until you unsubscribe. Cookie data is kept for the period stated in the cookie banner.
6. Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, and to data portability. You can withdraw consent at any time. Contact support@ekenberg.no. If you think we process your data unlawfully, you can complain to the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.
7. Changes
We may update this privacy policy. The date at the top shows when it was last changed.