Privacy policy

Last updated: 9 October 2026.

This Privacy Policy explains how FUGLEØYE AS processes personal data when you visit the Fugleøye online store, buy from us or contact us.

Who is responsible?

FUGLEØYE AS, Norwegian organisation number 938 408 556, is the controller of personal data we use to operate our online store and manage our relationship with you.

• Website: fugleøye.no.
• Email: support@fugleøye.no.
• Postal address: Loen 20, 4340 Bryne, Norway.

Our store runs on Shopify. Shopify and certain other service providers may also act as independent controllers for particular purposes, as explained below.

What information do we process?

The information depends on how you use the store and which services you choose.

• Contact and delivery details: name, email address, telephone number, billing address and delivery address.
• Purchase information: products ordered, amounts, payment method, payment status, transaction references and information about delivery, returns, withdrawal rights and complaints.
• Customer account and preferences: account identifiers, login and saved settings if you create or use a customer account.
• Customer service: enquiries, correspondence and any photographs or other supporting material you send us.
• Technical and usage information: IP address, browser, device, identifiers, security logs and activity in the store. Collection through non-essential cookies and similar technology is subject to consent as explained below.
• Privacy and marketing choices: consents, opt-outs and changes to these choices.

The payment provider processes the payment information needed for your payment. Do not send us full card numbers, security codes or passwords by email.

We obtain information directly from you, through your use of the store, and from providers such as Shopify, payment providers and delivery services, for example payment confirmations and delivery updates. Information necessary for an order must be provided so that we can process and deliver it; marketing consent is optional.

Why do we use information, and on what legal basis?

We link processing to a specific purpose and legal basis. This distinction is explained in the Norwegian Data Protection Authority's guidance on contracts and personal data.

Purpose	Relevant information	Legal basis
Process orders, payments, delivery and pre-purchase requests	Contact, delivery and purchase information	Necessary to perform our contract with you or take steps you request before entering a contract
Handle returns, withdrawal rights, complaints and legally required customer requests	Purchase information and relevant correspondence	Performance of a contract and, where applicable, legal obligations
Bookkeeping and mandatory records	Necessary transaction, invoice and customer information	Legal obligation
Answer other enquiries and resolve technical problems	Contact details and enquiry content	Our legitimate interest in providing customer service and operating a functioning store; contract where the enquiry concerns a purchase
Prevent fraud, secure the service and handle legal claims	Relevant order information, technical logs and correspondence	Our legitimate interest in protecting customers and our business and establishing, exercising or defending legal claims; legal obligation where applicable
Send optional newsletters and other electronic marketing	Contact details and marketing choices	Consent
Non-essential analytics, personalisation and targeted advertising based on tracking	Device, usage and consent information	Consent

Where we rely on legitimate interests, we assess necessity and the impact on your privacy. You can request more information about that assessment and object to the processing.

Visiting the store or reading this policy does not itself constitute consent to marketing or non-essential tracking. Order confirmations, delivery messages and other necessary purchase communications are not newsletters.

Cookies and marketing choices

We use Shopify to operate the store and manage cookie choices. Strictly necessary technology supports functions you request, such as your basket, security and checkout; other storage or access on your device requires prior consent where required by law, as explained in the Norwegian Data Protection Authority's cookie guidance.

You can accept or reject optional categories in the consent interface and later change your choice through the store's privacy/cookie settings. Contact support@fugleøye.no if you need help finding those settings.

You can unsubscribe from marketing through the unsubscribe link in a message or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Who receives information?

We share relevant information where necessary for the purposes described above and on an appropriate legal basis.

• Shopify: store hosting, order processing, checkout, security and other enabled functions.
• Payment providers: Shopify Payments and PayPal when used, and Vipps if that payment option becomes available and you choose it. Information is used to process payment and handle refunds, security and payment-related legal requirements.
• Delivery services: information necessary to deliver your order and follow up the shipment.
• Operational and professional providers: email, IT, customer-service and accounting providers, and professional advisers, to the extent their work requires it.
• Authorities and other recipients with a legal basis: where disclosure is required by law or necessary to handle a specific legal claim.

Providers processing information on our behalf must have agreements governing that processing. Providers determining their own purposes, including mandatory payment checks, may be independent controllers; their own privacy notices govern that processing.

Shopify and Shopify Network Intelligence

Fugleøye uses Shopify and has Shopify Network Intelligence enabled. This allows Shopify to use information from interactions and transactions with our store alongside information from other Shopify stores and Shopify to protect, develop and improve services, including personalisation, usage insights and more relevant advertising; other merchants do not thereby gain access to our customer data (Shopify's Network Intelligence explanation).

Information about your activity may be shared with Shopify and other service providers, including in other countries, to provide these services. Where Shopify processes information for its own purposes within these services, Shopify is responsible for that processing and relevant rights requests; where Shopify processes information on our behalf to run the store, our controller responsibilities described here apply (Shopify Consumer Privacy Policy).

For EEA visitors, Shopify's legal basis for processing for targeted advertising is consent, and Shopify explains how integrated privacy choices restrict non-essential data use (Shopify Consumer Privacy Policy, Shopify consent settings). You can learn about your rights and submit requests directly through the Shopify Privacy Portal.

Processing outside the EEA

Using Shopify and other providers can involve storing or processing information outside the EEA. Our store's selected Shopify data-hosting region is the United States; this does not mean that all processing takes place only there.

Transfers require a valid transfer mechanism and necessary safeguards. Shopify describes mechanisms including binding corporate rules, standard contractual clauses and relevant adequacy decisions in its Data Processing Addendum.

You can contact us for more information about transfers connected with our customer relationship and how to obtain information about the relevant safeguards.

How long do we keep information?

We retain information for as long as necessary for the relevant purpose and delete or anonymise it when no longer needed, unless statutory retention or a specific legal claim requires further storage.

• Accounting records: primary accounting documentation is generally retained for five years after the end of the financial year; other document types may have different periods (Altinn's retention guidance).
• Purchases, returns and complaints: relevant information is retained while the purchase and subsequent customer claims are handled, and thereafter to the extent necessary in light of applicable complaint and limitation periods or a specific claim.
• Customer service: enquiries are retained while the case is handled and for as long as the documentation is necessary for relevant follow-up or legal claims. Unnecessary attachments and information should not be retained merely because they form part of an enquiry.
• Customer accounts: information is retained while the account is in use or you wish to maintain it. After account deletion, only information still needed for another purpose, such as accounting records, is retained.
• Marketing and consent records: marketing use stops when you unsubscribe or withdraw consent. Limited records of your choice may be retained to respect your opt-out and demonstrate compliance.
• Technical information and cookies: retention depends on the function, security need and lifespan of the technology concerned. Consent information and providers' descriptions give further details; contact us if you want information about a particular record.

Your rights and complaints

Subject to the conditions in data-protection law, you can request access, correction, deletion, restriction and portability, object to processing, and withdraw consent. You may object to direct marketing at any time; some information may still need to be kept for other lawful purposes, such as bookkeeping (Norwegian Data Protection Authority's information and rights overview).

Send your request to support@fugleøye.no. We may ask for information necessary to verify your identity, but no more than is needed.

We respond without undue delay and normally within one month; if a lawful extension is necessary, we tell you within the first month why and what the new deadline is (access-request guidance, extension guidance).

You may complain to Datatilsynet, the Norwegian Data Protection Authority, or the relevant supervisory authority where you live or work. You do not have to contact us first to exercise that right (Datatilsynet).

Automation, security and external services

Shopify and payment providers may use automated checks to detect fraud and assess payments. Contact us if a check affects your order so that we can investigate and review decisions for which we are responsible; a payment provider's independent decisions may also need to be raised with that provider.

We use proportionate technical and organisational measures to protect information against unauthorised access, loss and misuse. No system can guarantee complete security, and we ask you not to send unnecessary or sensitive personal information.

This policy covers the online store and your customer relationship with FUGLEØYE AS. BirdKam and other apps or cloud services used with the cameras have their own privacy terms, which should be read before use; if you send us images or recordings for support, we process that material as part of the support case.

Our store is not specifically directed at children. Contact us if you believe we have received a child's personal data that should not have been processed.

Changes

We update this policy when our services or processing change and revise the date above. For material changes, we provide necessary information and obtain new consent where required; updating the text does not replace a required consent.