Privacy policy

Last updated 23 September 2026

1. Introduction

We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how LilBi AS (“LilBi”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you visit lilbi.no, contact us or shop with us.

LilBi AS is the data controller responsible for the processing of personal data described in this Privacy Policy.

2. Personal Data We Collect

We may collect the following types of personal data:

• Contact and identification information, such as your name, email address, telephone number, and shipping and billing addresses.
• Order and transaction information, such as products purchased, order history, amounts and delivery information.
• Payment information, which is processed securely by our payment providers. We do not store full payment card details.
• Customer and communication information, such as messages you send to customer service.
• Technical information and usage data, such as your IP address, browser type, device information and information about how you use the website.
• Information collected through cookies and similar technologies.

We primarily receive this information directly from you, automatically when you use the website, or from service providers that help us process purchases and deliveries.

3. How and Why We Use Your Personal Data

We use your personal data to:

• process, fulfil and deliver your orders
• handle payments, returns and refunds
• communicate with you about your order
• respond to questions and provide customer service
• comply with accounting, tax and other legal obligations
• improve our website, products and services
• prevent fraud and maintain the security of the website
• send you marketing communications if you have consented to this

Legal Bases for Processing

Performance of a contract: When processing is necessary to process, fulfil and deliver your order or handle requests before a purchase.

Legal obligation: When we need to process or retain information to comply with requirements relating to, among other things, accounting, tax and consumer rights.

Legitimate interests: When processing is necessary to improve our services, provide customer service, prevent fraud or maintain the security of the website. We always balance our interests against your privacy rights.

Consent: When processing requires your consent, including for marketing and the use of optional cookies. You may withdraw your consent at any time.

4. Who We Share Your Personal Data With

We share personal data only when necessary to operate our online store and provide our services.

This may include:

• Shopify, which is our e-commerce platform
• payment providers
• shipping and logistics partners
• providers of IT, hosting and security services
• analytics and marketing providers if you have consented to such services
• public authorities or advisers when necessary to comply with a legal obligation or protect our rights

Our service providers process personal data in accordance with their agreements with us and applicable data protection laws.

5. Transfers of Personal Data Outside the EEA

Some of our service providers, including Shopify and certain payment, analytics or technology providers, may process personal data outside Norway or the European Economic Area (EEA).

When personal data is transferred outside the EEA, we use lawful transfer mechanisms and appropriate safeguards. These may include the European Commission’s Standard Contractual Clauses, an adequacy decision or other valid transfer mechanisms.

6. Cookies

We use cookies and similar technologies on our website. These can be divided into the following categories:

Necessary cookies: Required for the website to function, including for the shopping cart, security and payments.

Analytics cookies: Help us understand how visitors use the website so that we can improve its functionality and performance.

Marketing cookies: Used to measure the effectiveness of advertising and to display more relevant content and marketing.

Analytics and marketing cookies are used only when you have provided the necessary consent.

You can manage or withdraw your consent through the cookie banner on the website. You can also control cookies through your browser settings.

7. Your Rights

Subject to applicable data protection laws, you may have the right to:

• receive information about how we process your personal data
• request access to the personal data we hold about you
• request correction of inaccurate or incomplete information
• request deletion of your personal data
• request restriction of processing
• object to certain forms of processing
• receive your personal data in a structured and machine-readable format
• withdraw your consent where processing is based on consent

Certain rights may be limited where we are legally required to retain the information or where we have another valid legal basis for processing.

To exercise your rights, you can contact us at hello@lilbi.no.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe that your personal data is being processed in violation of applicable rules.

More information is available from the Norwegian Data Protection Authority at www.datatilsynet.no.

8. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as we are required to retain it under applicable law.

Information relating to orders and payments may be retained for as long as necessary to comply with accounting, tax and documentation requirements.

Information used for marketing purposes is retained until you withdraw your consent or unsubscribe from marketing communications.

When the information is no longer necessary, it is securely deleted or anonymised.

9. Information Security

We implement reasonable technical and organisational security measures to protect your personal data against loss, misuse, unauthorised access, alteration and disclosure.

No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.

10. Third-Party Services and External Links

Our website may contain links to websites or services operated by third parties.

We are not responsible for how these third parties process personal data. We recommend that you read the relevant third party’s privacy policy before sharing personal data.

11. Changes to This Privacy Policy

We may update this Privacy Policy as necessary, including as a result of changes to our services, the technology we use or applicable laws and regulations.

The latest version will always be available on this page. The date at the top indicates when the Privacy Policy was last updated.

12. Contact Information

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us:

LilBi AS
Org. no. 937 881 339
Haakon VII's gate 8A
9011 Tromsø
Norway

Email: hello@lilbi.no
Website: lilbi.no

LilBi AS is the data controller responsible for your personal data.