Last updated: 15.01.2026
This Privacy Policy explains how SmartGroup AS ("we", "us") collects and uses personal data when you visit smartgroup.com, shop in our online store, contact us, or subscribe to marketing.
1. Who we are
Controller: SmartGroup AS
Address: Fornebuveien 46, 1366 Lysaker, Norway
Organisation number: 999 615 147
Email: post@smartgroup.no
Support: post@smartgroup.no
Phone: +47 649 59 444
Privacy contact: post@smartgroup.no
DPO: We have not appointed a DPO.
If we market or sell to the UK, processing may also be subject to UK GDPR.
2. What personal data we collect
We may collect the following categories of personal data:
- Identity & contact: name, email, phone number, address, country
- Account data: login details, preferences, order history
- Order & payment: products purchased, payment status, invoices, VAT details
(We do not store full card details.) - Shipping: delivery address, tracking number, carrier updates
- Customer support: messages, emails, attachments, order references
- Marketing: newsletter subscriptions, consent and opt-out records
- Technical data: IP address, device/browser, pages viewed, cookies
We do not request sensitive personal data. If you voluntarily share such information (e.g. accessibility needs), it will only be used to handle your request and limited to what is necessary.
3. How we collect data
We collect data:
- Directly from you (checkout, forms, email, phone)
- Automatically (cookies and similar technologies)
- From service providers (payment confirmation, delivery updates)
4. Why we use personal data
We use personal data to:
- Run and secure our website and online store
- Process orders, payments, deliveries, returns, and warranty
- Provide customer support
- Comply with legal and accounting obligations
- Improve our website and services
- Send marketing communications where permitted
5. Legal bases
We process personal data based on:
- Contract - to process orders and manage accounts
- Legal obligation - accounting, tax, consumer law
- Legitimate interests - security, fraud prevention, customer support, service improvement
- Consent - newsletters, non-essential cookies, and marketing where required
You may withdraw consent at any time.
6. Marketing
- Email newsletters are sent only if you have subscribed or where permitted by law.
- You can unsubscribe at any time via the link in each email.
- If we use advertising or retargeting cookies, these are only activated with your consent.
Tools may include: Brevo
7. Cookies and tracking
We use:
- Necessary cookies (site functionality, checkout, security)
- Analytics cookies (site usage and improvement)
- Marketing cookies (campaign measurement, ads)
Non-essential cookies are used only with your consent.
You can manage or withdraw consent via Cookie settings
Lake Cookie Policy for details. https://smartgroup.no/cookie-policy-smartgroup-as/
8. Sharing of data
We share personal data only when necessary, with:
- Website hosting and e-commerce providers
- Payment providers (e.g. Visa / Mastercard / Klarna / American Express/ PayPal)
- Shipping and logistics partners (e.g. [UPS / DHL / Posten / Bring])
- Email, analytics, and customer support tools
- Professional advisers and public authorities where required by law
All processors act under data processing agreements where required.
9. International transfers
Some providers may process data outside the EEA/UK.
When this happens, we use appropriate safeguards such as:
- EU Standard Contractual Clauses (SCCs)
- UK transfer addendum / IDTA (where applicable)
You can request more information about safeguards by contacting us.
10. Security
We use appropriate technical and organisational measures, including:
- Encrypted connections (HTTPS)
- Access controls and limited access
- Secure hosting and backups
We aim to collect and store only the data we need.
11. Retention
We keep personal data only as long as necessary, including:
- Orders and accounting: typically 5 years as required by law
- Customer accounts: While active, then deleted after 24 months of inactivity
- Support requests: 12-36 months
- Marketing data: until you unsubscribe or withdraw consent
- Cookie consent logs: 12-24 months
12. Your rights
You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion (where applicable)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights, contact post@smartgroup.no.
We normally respond within one month.
13. Complaints
You may complain to:
- Norwegian Data Protection Authority (Datatilsynet)
- UK Information Commissioner's Office (ICO) if UK GDPR applies
We encourage you to contact us first to resolve any concerns.
14. Children
Our services are not intended for children under 13 without parental involvement.
We do not knowingly collect personal data from children beyond what is necessary to fulfil an order.
15. Changes
We may update this Privacy Policy from time to time.
The current version will always be available on this page with an updated date.
