PRIVACY POLICY

This Privacy Policy explains how Unonight.shop collects, uses, shares, stores and protects personal data when you visit the online store, create an account, complete a purchase or contact us.

Last updated: 28 June 2026

  1. DATA CONTROLLER

Unonight.shop is owned and operated by Aipify Group AS
Daniel Hansens gate 7
5008 Bergen
Norway
Organisation number: 937 978 960
Email: support@unonight.shop

Aipify Group AS is the data controller for personal data processed in connection with the operation of Unonight.shop, unless an external service provider acts as an independent data controller for its own processing.

  1. WHO THIS POLICY APPLIES TO

This Policy applies to:

  • visitors to Unonight.shop

  • customers and former customers

  • persons who create or use a customer account

  • persons who contact customer service

  • recipients of newsletters or other marketing

  • persons who use return, complaint or withdrawal forms

Unonight.shop is intended for persons aged 18 or over.

  1. PERSONAL DATA WE MAY PROCESS

Depending on how you use the online store, we may process:

Contact details:

  • name

  • email address

  • telephone number

  • billing address

  • delivery address

Purchase and order information:

  • products ordered

  • order number

  • purchase date

  • price, discount and currency

  • payment status

  • delivery method

  • tracking and delivery information

  • returns, refunds, complaints and customer communication

Account information:

  • customer profile

  • login and account status

  • saved addresses

  • order history

  • language and market settings

Payment information:

  • selected payment method

  • transaction references

  • payment status

  • limited card or account details made available to us by the payment provider

We do not normally receive full card numbers. Card and payment information is mainly processed by Shopify and the relevant payment providers.

Technical information:

  • IP address

  • browser, device and operating system

  • time and page views

  • cookie and consent choices

  • technical logs

  • security and fraud signals

Communication:

  • content of emails and contact forms

  • customer service enquiries

  • documents and photographs you submit in connection with returns, complaints or support

Marketing information:

  • consent to email marketing

  • opens and clicks where such measurement is active and lawful

  • preferences and unsubscribe choices

  1. HOW WE RECEIVE THE INFORMATION

We receive information:

  • directly from you

  • when you visit or use the online store

  • when you create an account or order goods

  • from Shopify and activated Shopify services

  • from payment providers

  • from carriers and delivery partners

  • from security, analytics and marketing tools activated in the store

  • from public authorities where necessary or legally required

  1. PURPOSES AND LEGAL BASES

We process personal data for the following purposes:

Completing purchases and delivery

We use information to process orders, receive payment, send order confirmations, deliver goods and manage order status.

Legal basis: necessary to enter into or perform a contract.

Customer account

We use information to create and administer the customer account, display order history and provide access to account features.

Legal basis: necessary to perform the contract and our legitimate interest in providing a secure and user-friendly customer solution.

Customer service, returns, right of withdrawal and complaints

We use information to answer questions, process returns, refunds, withdrawals and complaints, and document how cases are handled.

Legal basis: necessary to perform the contract, comply with legal obligations and pursue our legitimate interest in handling and documenting enquiries.

Payment, security and fraud prevention

We use information for payment processing, identity and risk checks, prevention of misuse, technical security and protection of customers and the business.

Legal basis: necessary to perform the contract, comply with legal obligations and pursue our legitimate interest in preventing fraud and securing the service.

Accounting and legally required documentation

We retain information that must be documented under accounting, tax and VAT rules.

Legal basis: legal obligation.

Marketing

We may send newsletters, offers and other electronic marketing where we have valid consent or another lawful basis.

Legal basis: consent or, where the conditions are met, legitimate interests and an existing customer relationship.

You may unsubscribe from electronic marketing at any time through the unsubscribe link or by contacting support@unonight.shop.

Analytics and improvement

We may use consent-based analytics to understand how the online store is used, measure performance and improve content, navigation and the purchasing experience.

Legal basis: consent for non-essential cookies and similar technologies, and legitimate interests for necessary, aggregated or security-related analytics where permitted.

  1. SHOPIFY

Unonight.shop is built and operated on Shopify’s commerce platform. Shopify processes personal data when you visit the online store, create an account, use Shop or Shop Pay, complete a purchase or use other Shopify features.

Shopify may act as a data processor for us and, for certain services and purposes, as an independent data controller.

Further information about Shopify’s processing of consumer data is available in the Shopify Consumer Privacy Policy.

Privacy choices relating to Shopify can be managed through Shopify Privacy Controls.

  1. PAYMENT PROVIDERS

Available payment methods may include:

  • Shop Pay

  • Visa

  • Mastercard

  • American Express

  • Maestro

  • UnionPay

  • Apple Pay

  • Google Pay

  • Klarna

The payment provider processes the information necessary to authorise and complete payment, prevent fraud, handle refunds and comply with legal obligations.

When Klarna is selected, Klarna may carry out identity, payment or credit assessments under its own terms and privacy policy.

The payment options displayed may depend on factors including country, device, order value and the payment provider’s assessment.

  1. WHO WE MAY SHARE INFORMATION WITH

We only share personal data where necessary and lawful.

Recipients may include:

  • Shopify and Shopify’s subprocessors

  • payment providers and banks

  • carriers, collection points and delivery partners

  • providers of customer service, email, security, analytics and technical operations

  • accountants, auditors, legal advisers and other professional advisers

  • public authorities where disclosure is legally required or necessary to protect rights

  • a buyer or advisers in connection with a possible business transfer, merger or reorganisation, subject to appropriate confidentiality requirements

We do not sell personal data in exchange for payment.

  1. TRANSFERS OUTSIDE THE EEA

Some service providers may process personal data outside Norway or the European Economic Area.

Where personal data is transferred to a country without an adequate level of protection, the transfer must be based on a valid transfer mechanism, such as the European Commission’s Standard Contractual Clauses, together with necessary supplementary safeguards.

Shopify states that certain customer information for European stores is stored in Europe, but international processing and transfers may still occur through Shopify companies and subprocessors.

  1. RETENTION PERIODS

We do not retain personal data longer than necessary for the purpose. The following general rules apply:

Order, payment and accounting documentation:

Information forming part of legally required accounting records is normally retained for five years after the end of the relevant financial year. Certain information may need to be retained for longer where required by law, an audit, a dispute or a legal claim.

Customer account:

Account information is retained while the account remains active. When the account is deleted, information that does not need to be retained because of orders, accounting, security, disputes or other legal requirements is deleted or anonymised.

Customer service, returns and complaints:

Enquiries and case documentation are normally retained for up to 24 months after the matter has been closed. Information may be retained for longer where necessary in connection with a warranty, complaint, dispute or legal claim.

Marketing:

Information is used for marketing until consent is withdrawn or you unsubscribe. We may retain limited documentation of consent and unsubscribe choices in order to document the choice and prevent further messages.

Security logs:

Technical and security-related logs are normally retained for up to 24 months, unless longer retention is necessary to investigate misuse, fraud or a security incident.

Cookies:

Retention periods vary by cookie and are shown in the cookie settings or the store’s cookie overview.

When information is no longer necessary, it is securely deleted or anonymised.

  1. YOUR RIGHTS

Where the conditions under data protection law are met, you may request:

  • access to the personal data we process about you

  • correction of incorrect or incomplete information

  • deletion

  • restriction of processing

  • data portability

  • objection to processing based on legitimate interests

  • withdrawal of consent

  • information about recipients and international transfers

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Some information cannot be deleted immediately where we are legally required to retain it or need it to establish, exercise or defend a legal claim.

To exercise your rights, contact:

support@unonight.shop

We may request information necessary to verify your identity before processing the request.

  1. COMPLAINT TO THE NORWEGIAN DATA PROTECTION AUTHORITY

You may submit a complaint to the Norwegian Data Protection Authority if you believe that personal data is being processed in breach of applicable rules.

We encourage you to contact us first so that we can try to resolve the matter.

Further information is available from the Norwegian Data Protection Authority.

  1. COOKIES AND SIMILAR TECHNOLOGIES

Unonight.shop uses cookies and similar technologies for purposes including:

  • essential functionality

  • shopping cart and checkout

  • login and security

  • language and market choices

  • payment functionality

  • analytics and performance measurement

  • marketing, where you have given consent

Essential cookies are used to keep the online store functional and secure.

Non-essential cookies for analytics, personalisation or marketing are activated only where valid consent has been obtained when required.

You may change or withdraw your consent through the store’s cookie settings. Withdrawal does not affect the lawfulness of earlier processing.

Further information is available in the store’s Cookie Policy.

  1. MARKETING AND TRACKING

We respect your cookie and marketing choices.

We do not use your email address for marketing without a valid legal basis. An unsubscribe option will be available in marketing messages.

Where marketing or analytics tools are activated, they must follow the consent choices registered through Shopify or the store’s consent solution.

  1. SECURITY AND DISCRETION

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse and disclosure.

Access is limited to persons and providers who need the information in order to perform their duties.

No solution can guarantee complete security. If a personal data breach occurs, we will handle it in accordance with applicable rules and notify affected persons and the Norwegian Data Protection Authority where the conditions for notification are met.

  1. AGE LIMIT

Unonight.shop is intended for persons aged 18 or over.

We do not knowingly seek to collect personal data from persons under the age of 18. Contact support@unonight.shop if you believe that a person under 18 has provided us with personal data so that the matter can be investigated.

  1. AUTOMATED ASSESSMENTS

Payment and security providers may use automated systems to detect fraud, assess payment risk or determine which payment options are offered.

Klarna and other payment providers are responsible for providing information about any automated credit or risk assessments they perform as independent data controllers.

We do not use automated decisions that alone produce legal effects or similarly significantly affect you, except where this may result from a payment provider’s processing.

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy when services, legal requirements or processing activities change.

The latest version will be published on Unonight.shop with an updated date. Material changes will be communicated in an appropriate manner where necessary.

  1. CONTACT

Questions about privacy, access or other rights may be sent to:

support@unonight.shop

Unonight.shop is owned and operated by Aipify Group AS
Daniel Hansens gate 7
5008 Bergen
Norway
Organisation number: 937 978 960