Privacy Policy

Last updated: 15 January 2026

Data Controller Information

This privacy policy applies to the website and services operated by nipaunxj AS, a Norwegian company registered under company number 316497258, with its registered office at Kirkegata 137, 5084 Bergen, Vestland, Norway. nipaunxj acts as the data controller for the personal data we collect and process through our website and services.

Data We Collect

We collect various types of personal data to provide and improve our e-commerce checkout optimization analytics services. The data we collect includes information you provide directly to us, information collected automatically through our website, and information from third-party sources when necessary for our services.

When you visit our website or use our services, we may collect the following personal information:

• Contact Information: Name, email address, phone number, company name, and job title when you contact us or register for our services
• Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and referring websites
• Analytics Data: Information about how you interact with our website and services, including click patterns and user preferences
• Communication Data: Records of correspondence when you contact us via email, phone, or our contact forms
• Business Information: Company details, website URLs, and e-commerce platform information when you use our analytics services

How We Use Your Information

We use the personal data we collect for legitimate business purposes related to providing our e-commerce analytics services. How we use your information depends on how you interact with our website and services, the choices you make, and the products and features you use.

Specifically, we use of your data for the following purposes:

• Service Provision: To provide our checkout optimization analytics platform and related services
• Customer Support: To respond to your enquiries, provide technical support, and resolve issues
• Communication: To send you important updates about our services, respond to your requests, and provide relevant information
• Analytics and Improvement: To analyse website usage, improve our services, and develop new features
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Business Operations: To manage our business relationships, process payments, and maintain accurate records

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Legitimate Interests: We process data for our legitimate business interests, such as providing services, improving our website, and communicating with clients
• Contractual Necessity: Processing necessary to perform contracts with our clients or to take steps at your request prior to entering into a contract
• Consent: Where you have provided explicit consent for specific processing activities, such as marketing communications
• Legal Obligation: Where processing is necessary to comply with legal requirements

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and providing our services
• Legal Requirements: When required by law, court order, or other legal process
• Business Transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business
• Protection of Rights: To protect our rights, property, or safety, or that of our users or others

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the type of data and the purpose for which it was collected.

Generally, we apply the following data retention principles:

• Contact Information: Retained for the duration of our business relationship and up to 7 years after termination for legal and accounting purposes
• Website Analytics: Retained for up to 26 months in accordance with Google Analytics retention settings
• Communication Records: Retained for up to 3 years for customer service and quality assurance purposes
• Marketing Data: Retained until you withdraw consent or unsubscribe from our communications

Your Rights

Under GDPR and other applicable privacy laws, you have several rights regarding your personal data. These rights include the ability to access, correct, delete, or restrict the processing of your personal information, as well as the right to data portability and to object to certain processing activities.

Your specific rights include:

• Right of Access: You can request information about the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we process your personal data
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time

International Data Transfers

As a Norwegian company operating primarily within the European Economic Area (EEA), we ensure that any transfer of personal data outside the EEA is conducted in accordance with GDPR requirements. When we do transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses or ensure the recipient country has been deemed adequate by the European Commission.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Contact Us

If you have questions about this privacy policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us using the contact information below:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data in violation of applicable privacy laws. In Norway, the relevant supervisory authority is Datatilsynet (Norwegian Data Protection Authority).

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this policy and, where appropriate, notify you of significant changes through our website or other communication channels.

We encourage you to review this privacy policy periodically to stay informed about how we collect, use, and protect your personal information.