Privacy Policy

Last updated: 27 October 2026

This policy explains how Norges Outdoor OÜ handles personal data when you visit www.norgesoutdoor.com, contact us, request a quote or place an order. It also explains the cookies and analytics choices available to you.

1. Who is responsible for your data

The controller is Norges Outdoor OÜ, registry code [Estonian registry code], with its registered address at Kuivati tee 10, 75212 Perila küla, Estonia. VAT number: EE102702141.

For privacy questions, contact us at info@norgesoutdoor.com. We have not appointed a separate data protection officer; privacy requests are handled by the address above.

2. What we collect and why

When	Data	Why we use it
Contact, quote or custom-project form	Name, email address, phone number (optional), your message or project description, any drawings you upload, the date and technical details needed to deliver and secure the form.	To answer your enquiry, assess a custom project and take steps before a possible contract.
Contact-form security	A reCAPTCHA token and risk signals supplied by Google, together with IP and browser information used to detect automated submissions.	To protect the contact form against spam and abuse under our legitimate interests in keeping the service secure.
Order and checkout	Billing and delivery name, address, email, phone, company and VAT details if provided, order configuration, notes and correspondence.	To prepare your order confirmation, deliver the goods, arrange assembly, provide support and meet accounting and tax obligations.
Website and email	IP address, browser and device information, requested pages, timestamps, error and security logs, and the session cookie used for the cart.	To run the shop securely, remember your cart and prevent abuse.
Analytics, only with consent	Pages viewed, approximate location, device and browser information, and identifiers set by Google Analytics.	To understand how the site is used and improve it.

Most of this data comes directly from you. Technical, log and analytics data are collected automatically when you use the site.

We do not ask for card details. Payment for orders is by bank transfer. We do not use automated decision-making that produces legal or similarly significant effects.

3. Legal bases

Contract or steps before a contract (Article 6(1)(b) GDPR): answering your quote request, preparing an order, delivering goods and providing ordered assembly.
Legal obligation (Article 6(1)(c)): accounting, tax, consumer and record-keeping duties.
Legitimate interests (Article 6(1)(f)): running and securing the website, preventing fraud and abuse, and responding to customer service matters. We balance these interests against your rights.
Consent (Article 6(1)(a)): analytics cookies and any optional marketing we may introduce in the future. You can withdraw consent at any time through the cookie settings without affecting earlier processing.

4. Cookies and similar technologies

Necessary cookies are used to run the cart, checkout, contact form and security. Analytics cookies are optional and are loaded only after you allow them. Rejecting non-essential cookies does not prevent you from using the shop.

Name	Purpose	Duration	Category
PHPSESSID	Keeps your cart and form session, and supports security.	Session	Necessary
cookie_consent	Remembers your cookie choice and its version.	12 months	Necessary
_GRECAPTCHA	Supports Google reCAPTCHA risk analysis for the contact form.	Up to 6 months	Necessary security
_ga	Google Analytics identifier, only after consent.	Up to 2 years	Analytics
_ga_<container-id>	Google Analytics session state, only after consent.	Up to 2 years	Analytics

We do not currently use advertising or marketing cookies. If that changes, this table and the consent choices will be updated before those cookies are used.

You can reopen Cookie settings in the site footer, change your choice, or delete cookies in your browser. Blocking necessary cookies may stop the cart or checkout from working.

5. Who receives your data

Our hosting and email provider, which stores the website, order records and email logs.
Our bank, for payment matching and accounting.
Our accountant and professional advisers, where necessary for tax, accounting or legal advice.
Google Ireland Limited and Google LLC, if you consent to Google Analytics. Google processes analytics data under its own terms and may process data outside the EEA.
Google Ireland Limited and Google LLC for reCAPTCHA verification of contact-form submissions.
Delivery and assembly partners, where needed to fulfil your order.
Public authorities, where we are legally required to disclose information.

We do not sell personal data. Where a provider processes data outside the EEA, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

Contact enquiries: normally 12 months after the last reply, so we can follow up and handle a later question.
Orders and accounting records: at least 7 years where required by accounting and tax law.
Server and security logs: normally up to 90 days.
Analytics: according to the retention setting in Google Analytics, currently no longer than 14 months.
Cookie choice: 12 months, or until you change it.

7. Your rights

Subject to applicable law, you can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw analytics consent at any time. We may need to verify your identity before acting on a request.

Send requests to info@norgesoutdoor.com. You also have the right to complain to a supervisory authority. In Estonia, this is the Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, info@aki.ee. You may also contact the supervisory authority in your country of residence.

8. Security

We use access controls, HTTPS, server-side validation, restricted data folders and limited retention to protect personal data. No internet transmission is completely secure, but we review our measures as the shop develops.

9. Children

The shop is intended for adults arranging products for homes and businesses. It is not directed at children under 16, and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy when the shop, suppliers or legal requirements change. The current version and date are always published on this page. Material changes will be communicated where required.

11. Contact

Norges Outdoor OÜ
Kuivati tee 10, 75212 Perila küla
Estonia
Email: info@norgesoutdoor.com