Last updated: 23 September 2026
This policy explains how SpydrGuard processes personal data when you visit spydrguard.com, purchase laundry sheets, subscribe, receive a gift, contact us or sign up for marketing. It applies to customers and visitors in Norway.
1. Controller and contact
SpydrGuard, c/o PRE Solutions AS, Kanalarmen 10, 4033 Stavanger, Norway, is responsible for the processing described here. Email info@spydrguard.com for privacy questions and requests. The legal entity name and organisation number must be confirmed against the seller details at checkout and updated when registration is complete.
2. Information we process and where it comes from
- Orders and subscriptions: name, email, telephone number, billing and delivery addresses, selected products and quantities, prices, payment status, delivery history, returns, customer account and subscription details. If you send a gift, we process the recipient's name, address and any delivery contact details you provide.
- Payments: payment method, transaction identifiers and payment status. Payment providers process card credentials; please never email us full card numbers.
- Communication: inquiries, correspondence, complaints and preferences.
- Website and security: IP address, device and browser data, pages visited, cart activity, cookie identifiers, consent preferences, security and fraud signals, subject to your cookie choices.
- Marketing: email address and consent or other lawful basis, campaign interactions and unsubscribe records.
We obtain information from you, a purchaser sending you a gift, your device, Shopify, our subscription provider Seal, payment and delivery providers, and service providers involved in fraud prevention or support. Please provide only the recipient information needed for delivery and inform gift recipients where appropriate.
3. Purposes and legal bases
- Contract (GDPR Article 6(1)(b)): process purchases and subscriptions, take requested steps before a purchase, deliver products, administer payments, account access, returns and customer service connected to an order.
- Legal obligation (Article 6(1)(c)): keep records required by accounting and tax law and meet applicable consumer, product safety and regulatory duties.
- Legitimate interests (Article 6(1)(f)): protect the website and transactions, prevent fraud and abuse, handle disputes and improve operational service, after balancing those interests against your rights. You may object where this basis applies.
- Consent (Article 6(1)(a)): optional analytics and advertising technologies where required, and electronic marketing where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.
We do not treat a purchase as consent to unrelated marketing. Order, delivery and subscription notices are service communications. Where Norwegian marketing law permits an existing customer exception, any marketing under that exception includes a simple opt-out.
4. Providers and disclosures
We share only necessary data with Shopify (store hosting and checkout), Seal Subscriptions (recurring order administration), payment processors, carriers and fulfilment partners, email and customer support services, professional advisers and authorities where legally required. Depending on your choices and our live configuration, analytics or advertising providers may receive identifiers and usage data. We do not sell customer lists. Shopify may process some data as an independent controller for its own services; see Shopify's consumer privacy information.
5. Transfers outside the EEA
Some providers may process data outside Norway and the EEA. Where applicable we use an adequacy decision, standard contractual clauses and supplementary measures where needed. Contact us for information on the applicable safeguards.
6. Retention and security
We keep order and accounting records for the applicable statutory retention period (ordinarily five years under Norwegian bookkeeping rules), and longer only where a specific legal claim or duty requires it. Account and subscription data are retained while active and thereafter for the time reasonably needed for support, legal claims and statutory duties. Support messages and fraud records are reviewed against their purpose and deleted or anonymised when no longer needed. Marketing consent and suppression records are kept as needed to respect your choice. Cookie durations depend on the technology; see the Cookie Policy. We use access controls and appropriate technical and organisational measures, but no internet transmission is risk free.
7. Your rights
Subject to the conditions in the GDPR, you can request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, and withdraw consent. You may object to direct marketing at any time. Email info@spydrguard.com; we may verify identity and normally respond within one month. You may complain to Datatilsynet. You can also manage marketing through the unsubscribe link and cookies through the site's privacy preference controls.
8. Automated decisions and children
Payment and fraud providers may use automated risk signals. We do not make solely automated decisions with legal or similarly significant effects about customers unless separately disclosed with applicable safeguards. Our store is intended for adults; we do not knowingly collect children's data for marketing.
9. Changes
We may update this notice when our services or practices change. The current version and update date will appear here; material changes will be communicated where required.