Privacy policy

Last updated: 13.05.2025

Data controller

Drytech AS, Ørnevegen 110, 9015 Tromsø, Norway. Org.nr: NO 986 405 178 MVA

Personal data we collect

We may collect and process the following categories of personal data:

• Contact Information: Name, email address, phone number, shipping and billing addresses.
• Account Details: Username, password, and other identifiers.
• Order Information: Purchase history, order details, and transaction data.
• Marketing Preferences: Your choices regarding receiving marketing communications.
• Technical Data: IP address, browser type, operating system, and browsing behavior on our Site.
• Communication Data: Correspondence with our customer service team.

How we collect personal data

We collect personal data through:

• Direct Interactions: When you create an account, place an order, subscribe to our newsletter, or contact us.
• Automated Technologies: Cookies and similar tracking technologies collect technical data about your browsing actions and patterns.
• Third-Party Services: Information from third-party platforms like Klaviyo, which we use for marketing communications.

Purpose and legal basis for processing

We process your personal data for the following purposes and legal bases:

Purpose	Legal Basis
To fulfill orders and provide services	Performance of a contract
To manage your account and preferences	Performance of a contract
To send marketing communications	Consent
To improve our website and services	Legitimate interests
To comply with legal obligations	Compliance with legal obligations

Marketing communications

With your explicit consent, we may send you marketing emails about our products, promotions, and updates. You can opt-out at any time by clicking the “unsubscribe” link in our emails or by contacting us through our Help center.

Use of Klaviyo

We use Klaviyo to manage our marketing communications. Klaviyo processes your personal data on our behalf and in accordance with our instructions. Klaviyo’s data processing practices are designed to comply with GDPR requirements. For more information, please refer to Klaviyo’s Privacy Notice.

Data sharing and transfers

We may share your personal data with:

• Service Providers: Third parties who assist in operating our website, conducting our business, or servicing you.
• Legal Authorities: When required by law or to protect our rights.

Some of these recipients may be located outside the EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including legal, accounting, or reporting requirements.

For example:

• Order and transaction data is retained for up to 10 years, in accordance with Norwegian bookkeeping and tax laws.
• Marketing data (e.g. email subscriptions via Klaviyo) is retained until you withdraw consent or show no engagement for a prolonged period (typically 12–24 months).
• Customer service correspondence is retained for up to 3 years from last interaction.

When the data is no longer needed, we will delete or anonymize it in accordance with applicable laws and our internal retention policies.

Your rights

Under the GDPR, you have the following rights:

• Access: Request access to your personal data.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data.
• Restriction: Request restriction of processing.
• Data Portability: Request transfer of your data to another party.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us through the Help center.

Cookies and tracking technologies

We use cookies and similar technologies to enhance your browsing experience and analyze website traffic. For detailed information about the cookies we use and how you can manage your preferences, please refer to our Cookie Notice.

Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

Contact information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through the Help center.

Ørnevegen 110, 9015 Tromsø, Norway

By using our Site and services, you acknowledge that you have read and understood this Privacy Policy.