Privacy policy
Last updated 17 October 2026
This privacy policy explains how IPSPERA AS processes personal data when you visit ipspera.com, contact us or buy from us.
Who is responsible
IPSPERA AS (org. no. 814 863 182), Friis' gate 6, 0187 Oslo, Norway, is the controller. Questions about privacy can be sent to thomas@ipspera.com.
When you contact us
When you use the contact form, we receive your name, email address, phone number (if you provide it), subject and message. To stop spam, we also store your IP address and information about your browser. We use the information to answer your enquiry, based on our legitimate interest in replying to people who contact us (GDPR Article 6(1)(f)). The enquiry is stored in our database and sent to us by email. We delete enquiries when they are no longer needed, and no later than 12 months after the matter is closed.
When you buy from us
When you place an order, we receive your name, email address and country. For businesses and organisations, we also receive the name and VAT number. We check the number in the EU's VAT register VIES and store the result with the order: registered name, address and time of the check.
Card payments are handled by Stripe. We never see your full card number. We use the information to deliver what you have bought, send invoices and keep accounts. The legal basis is the contract with you (Article 6(1)(b)) and our legal obligation to keep accounts (Article 6(1)(c)). Accounting records are kept for five years after the end of the financial year, as required by the Norwegian Bookkeeping Act.
Cookies
The website uses two cookies. mkt_pref remembers the language or region you choose, so that we do not suggest another one on your next visit. It is only set when you make a choice, and it expires after 180 days. privacy_consent remembers your privacy settings for 12 months. The contents of your shopping cart are stored in your browser until you place the order. We do not use cookies for analytics or marketing. Stripe's payment page uses its own cookies, as described in Stripe's privacy policy.
You can change your privacy settings at any time via “Privacy settings” at the bottom of every page.
Technical information
When you visit the website, our hosting provider processes your IP address and technical information, such as browser type. This is needed to deliver the pages and protect the website against attacks. The logs are deleted automatically after a short time.
Who processes data for us
- Vercel (USA) – hosting of the website; the server code runs in Stockholm, Sweden
- Supabase (USA) – database; the data is stored in Stockholm, Sweden
- Resend (USA) – sending of emails
- Stripe (Ireland) – card payments. Stripe is also responsible for some processing of its own, such as fraud prevention.
- Fiken (Norway) – accounting and invoicing
We have data processing agreements with our providers. Transfers to the USA are based on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
Your rights
You have the right to access the personal data we hold about you and to have it corrected or deleted. You can also ask us to restrict the processing, object to processing based on legitimate interest, and receive your data in a portable format. Contact us at thomas@ipspera.com. We reply within one month.
If you believe that we process your data unlawfully, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or to the authority in the country where you live: Datatilsynet in Denmark or the Swedish Authority for Privacy Protection (IMY) in Sweden.
Changes
We update this policy when we change how we process personal data. The date at the top shows when it was last updated.
