Privacy

Short version: this site sets no cookies and runs no advertising trackers. We process personal data only to fulfil orders and to send email you explicitly asked for.

What we process, and why

• Orders: name, shipping address, e-mail and payment confirmation — processed to deliver what you bought (contractual basis). Payment details are handled entirely by Stripe; we never see card numbers.
• Field Note / waitlist: your e-mail, only after double opt-in (consent basis). Every send includes a working unsubscribe link; consent records are kept.
• Site analytics: cookieless, aggregated counts (pages, referrers, country) that cannot identify you.

Processors

Stripe (payments), Vercel (hosting), Resend (e-mail). Each processes data under its own data-processing agreement with us. Data may be processed outside the EEA under standard contractual clauses.

Retention

Order data is kept as long as bookkeeping law requires (five years in Norway). List subscriptions are kept until you unsubscribe.

Your rights

Access, correction, deletion, portability, objection — write to hello@iitsup.com. You can also complain to Datatilsynet (the Norwegian Data Protection Authority).

Controller: IIT'S UP (entity registration in progress), org.nr pending.