Privacy policy
Last updated: 1 August 2025
Overview
This Privacy Policy describes how Laley (the “Site”, “we”, “us” or “our”) collects, uses and discloses your personal information when you visit or use our services, make a purchase from laley.no (the “Site”), or otherwise communicate with us about the Site (together, the “Services”). “You” and “your” mean you as a user of the Services, whether you are a customer, website visitor or another individual whose information we have collected under this policy.
Please read this Privacy Policy carefully.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised policy on the Site, update the “Last updated” date and take any other steps required by applicable law.
How we collect and use your personal information
To provide the Services, we collect personal information from several sources, as described below. The information we collect and use depends on how you interact with us.
In addition to the specific uses below, we may use information we collect to communicate with you, provide or improve the Services, comply with legal obligations, enforce applicable terms and protect or defend the Services, our rights and the rights of our users or others.
Personal information we collect
The types of personal information we collect depend on how you interact with our Site and use our Services. “Personal information” means information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types we collect.
Information collected directly from you
Information you submit directly through our Services may include:
- Contact details: your name, address, phone number and email address.
- Order information: your name, billing and shipping addresses, payment confirmation, email address and phone number.
- Account information: your username, password, security questions and other information used for account security.
- Shopping information: items you view or add to your cart and information saved in your account, such as loyalty points, reviews, referrals, gift cards or purchase information.
- Customer support information: information you choose to include when communicating with us, such as messages sent through the Services.
SMS marketing and phone numbers: With your consent, we may use your phone number to send order-related messages, cart reminders and marketing messages.
Legal basis for SMS: We send marketing texts, cart reminders or order updates only with your express consent. The legal basis is Article 6(1)(a) of the GDPR. You can withdraw consent at any time. To unsubscribe, use the STOP link in the latest text message you received, or email support@laley.no and we will arrange it for you.
Some features require you to provide certain information directly. You can choose not to provide it, but this may prevent you from using or accessing those features.
Information collected about your use
We may automatically collect information about your interaction with the Services (“Usage Data”) using cookies, pixels and similar technologies (“Cookies”). Usage Data may include how you access and use the Site and your account, device and browser information, network connection information, your IP address and other information about your interaction with the Services.
SMS cart reminders: Our Site uses cookies to track items you add to your cart, including when you abandon it. With your consent, this information may be used to send cart reminders by SMS.
Information obtained from third parties
We may also obtain information from third parties, including vendors and service providers that collect information on our behalf, such as:
- Companies supporting our Site and Services, such as Shopify.
- Payment processors that collect payment information, such as bank account, credit or debit card details and billing addresses, to process your payment, fulfil your orders and provide requested products or services in performance of our contract with you.
- When you visit our Site, open or click emails, or interact with our Services or advertisements, we or third parties we work with may automatically collect information through tracking technologies such as pixels, web beacons, software development kits, third-party libraries and cookies.
Information obtained from third parties is handled under this policy. Please also see “Third-party websites and links” below.
How we use your personal information
- Providing products and services: We use your information to perform our contract with you, including processing payments, fulfilling orders, sending account, purchase, return, exchange and transaction notifications, creating and maintaining your account, arranging shipping, facilitating returns and exchanges and providing other account features.
- Marketing and advertising: We may use your information to send marketing, advertising and promotional communications by email, SMS or post and to show advertisements for products or services. This may include tailoring the Services and advertisements on our Site and other websites. For EEA residents, the legal basis is our legitimate interest in selling our products under Article 6(1)(f) of the GDPR.
- Security and fraud prevention: We use your information to detect, investigate or act on possible fraudulent, illegal or malicious activity. If you register an account, you are responsible for keeping your login details secure. We strongly recommend that you do not share your username, password or other access details. Contact us immediately if you believe your account has been compromised. For EEA residents, the legal basis is our legitimate interest in keeping the Site safe for you and other customers under Article 6(1)(f) of the GDPR.
- Communicating with you and improving the Services: We use your information to provide customer support and improve our Services. This is in our legitimate interest in responding to you, providing effective services and maintaining our business relationship under Article 6(1)(f) of the GDPR.
Cookies
Like many websites, we use cookies. For information about cookies used to operate our store with Shopify, see Shopify’s cookie policy. We use cookies to operate and improve the Site and Services, including remembering your actions and preferences, running analytics and understanding user interactions. We have a legitimate interest in administering, improving and optimising the Services. We may also allow third parties and service providers to use cookies to tailor services, products and advertisements on our Site and other websites.
Cookies are also used to track cart activity and may be used for SMS reminders if you have consented.
Most browsers accept cookies by default, but you can set your browser to remove or reject them. Removing or blocking cookies may negatively affect your experience and cause some Services or features to work incorrectly or become unavailable. Blocking cookies may not completely prevent information sharing with third parties such as advertising partners.
How we disclose personal information
In certain circumstances, we may disclose your personal information to third parties to fulfil our contract, for legitimate purposes and for other reasons subject to this policy, including:
- Vendors or other third parties providing services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and shipping.
- Business and marketing partners providing services and advertising. These partners use information according to their own privacy policies. This excludes data and consent related to our SMS programme, which will never be shared with or sold to third parties.
- When you instruct, request or otherwise consent to disclosure, such as for shipping products or through your use of social media widgets or login integrations.
- Our affiliates or other companies within our corporate group, in our legitimate interest in running a successful business.
- In connection with a business transaction such as a merger or bankruptcy; to comply with legal obligations, including responding to subpoenas, search warrants or similar requests; to enforce terms; or to protect or defend the Services and the rights of ourselves, users or others.
We disclose the following categories of personal and sensitive personal information for the purposes described in “How we collect and use your personal information” and this section:
| Category | Categories of recipients |
|---|---|
|
|
We do not use or disclose sensitive personal information without your consent or to infer characteristics about you.
With your consent, we share personal information to participate in advertising and marketing activities.
User-generated content
The Services may allow you to post product reviews or other user-generated content. Content submitted to a public area of the Services is public and accessible to anyone.
We do not control who accesses information you make available to others and cannot ensure they will respect your privacy or keep it secure. We are not responsible for the privacy or security of information you make public, or the accuracy, use or misuse of information you disclose to or receive from third parties.
Third-party websites and links
Our Site may link to websites or platforms operated by third parties. If you follow a link to a site we do not control, please review its privacy, security and other terms. We do not guarantee, and are not responsible for, their privacy or security or the accuracy, completeness or reliability of their information. Information provided in public or semi-public spaces, including third-party social networks, may be visible to other users of the Services and those platforms without limitations on its use by us or third parties. Including a link does not itself imply endorsement of the platform, its content, owners or operators, except as disclosed in the Services.
Children’s data
The Services are not intended for children, and we do not knowingly collect children’s personal information. If you are the parent or guardian of a child who has provided information, contact us using the details below to request deletion.
As of this policy’s effective date, we have no actual knowledge that we “share” or “sell”, as defined by applicable law, the personal information of individuals under 16.
Security and retention
No security measures are perfect or impenetrable, and we cannot guarantee “perfect security”. Information you send may not be secure during transmission. Please avoid unsecured channels when communicating sensitive or confidential information.
How long we retain information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce contracts and policies.
Your rights
Depending on where you live, you may have some or all of the rights below. These rights are not absolute; laws, accounting requirements or legitimate obligations may limit or delay a request. You may also withdraw SMS marketing consent at any time by replying STOPP to the message.
- Access/right to know: You may request access to information we hold about you, including details of how we use and share it.
- Deletion: You may request deletion of your information.
- Correction: You may request correction of inaccurate information.
- Data portability: In certain circumstances and subject to exceptions, you may receive a copy of your information and request transfer to a third party.
- Opt out of sale, sharing or targeted advertising: You may direct us not to “sell” or “share” your information or opt out of processing considered targeted advertising under applicable privacy law. If you visit with the Global Privacy Control opt-out signal enabled, depending on your location, we automatically treat this as a request to opt out of sale or sharing for the device and browser you are using.
- Restriction of processing: You may ask us to stop or restrict processing.
- Withdrawal of consent: Where processing is based on consent, you may withdraw it.
- Appeal: If we decline a request, you may appeal by replying directly to our decision.
- Communication preferences: You can opt out of promotional emails and texts at any time using the unsubscribe option in the message. We may still send non-promotional messages, such as account or order updates.
You can exercise certain rights where indicated on the Site or by contacting us below.
We will not discriminate against you for exercising your rights. We may need information such as your email address or account details to verify your identity before responding fully. Where applicable law allows, you may appoint an authorised agent to make requests. We require evidence of their authorisation and may also require you to verify your identity directly. We will respond within a reasonable time and as required by applicable law.
Complaints
If you have a complaint about how we process your information, please contact us below. If you are dissatisfied with our response, depending on your location you may appeal by contacting us or complain to your local data protection authority. EEA supervisory authorities are listed on the European Data Protection Board’s website.
International users
We may transfer, store and process your information outside your country of residence. It may also be processed by employees, service providers and partners in those countries.
For transfers outside Europe, we use recognised mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority where applicable, unless the destination country is recognised as providing an adequate level of protection.
Contact
For questions about our privacy practices or this policy, or to exercise your rights, email support@laley.no.
Unless expressly stated otherwise, we are the controller of your personal information under applicable data protection laws.
Data sharing with Klarna
To offer Klarna’s payment methods, we may transfer personal information, such as contact and order details, to Klarna at checkout. This allows Klarna to assess eligibility for its payment methods and tailor them to you. Transferred information is handled according to Klarna’s privacy policy.
Mobile terms (SMS)
Laley AS (“we”, “us”) offers a voluntary SMS programme for promotions, restock alerts, order updates and cart reminders (the “Service”). By providing your mobile number and checking the SMS consent box, you accept these Mobile Terms.
- Consent is not a condition of purchase: You can shop without signing up for SMS.
- Message frequency: Varies. We send messages only when relevant, such as promotions, restocks or order updates.
- Charges: Your mobile provider’s standard message and data rates may apply.
- Unsubscribing: Use the STOP link in the latest text message you received, or email support@laley.no and we will unsubscribe you.
- Carrier liability: Mobile carriers are not responsible for delayed or undelivered messages.
- Changing your number: If you get a new number, sign up again with that number.
