Legal

Privacy policy

Last updated 13 August 2026

Who is responsible

ALCE Norge, Strandgaten 50, 5004 Bergen, Norway, is responsible for the personal data processed through this customer account and B2B access service.

Data we process

Depending on how you use the service, we process:

• name, email address, Norwegian phone number and company details;
• organization number and B2B application or approval status;
• Shopify customer identifiers, account access and product-type permissions;
• cart, checkout and order-related information needed to provide the service; and
• security, audit and technical records used to prevent abuse and investigate failures.

Why we process it

We use this data to create and secure customer accounts, review B2B applications, show the correct prices, enforce purchase permissions, synchronize account decisions with Shopify, provide support and meet legal obligations. Processing is based on performing our agreement, legitimate interests in operating a secure service, consent where requested, and applicable legal duties.

Service providers and transfers

We use Shopify for commerce and customer records, Railway for application and database hosting, and Resend for transactional email. These providers process data under their own security and contractual safeguards. Data is disclosed only as needed to operate the service or when required by law.

Retention and security

We retain active customer and transaction records for as long as they are needed for the service and legal obligations. Expired sessions, completed technical jobs and webhook records are removed on a rolling schedule; rejected applications and audit records have longer limited retention periods for fraud prevention and accountability. Passwords are stored only as one-way hashes, and sensitive access is restricted.

Your rights

You may request access, correction, deletion, restriction, portability or object to processing where Norwegian and EEA law provides those rights. You may also complain to Datatilsynet.