Privacy policy

Privacy Policy

Last updated: October 1, 2026

About This Privacy Policy

URUR operates this online store and website, including the related content, features, products and services made available through urur.com (the “Services”).

This Privacy Policy explains how we collect, use, disclose and otherwise process personal information when you visit or use our website, purchase products from us, create an account, communicate with us or otherwise interact with the Services.

URUR is powered by Shopify, which provides the ecommerce platform used to operate our store.

For the purposes of applicable data protection laws, Berserker AS, organisation number: 923 845 542, trading as URUR, is the data controller unless otherwise stated.

If there is a conflict between our Terms & Conditions and this Privacy Policy regarding the processing of personal information, this Privacy Policy applies.

Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you.

Depending on how you interact with our Services, we may collect or process the following categories of personal information:

  • Contact information, such as your name, email address, telephone number, billing address and shipping address.

  • Order and transaction information, including products you view, add to your cart, purchase, return or cancel, order history, order value and transaction details.

  • Payment-related information, including payment method and payment confirmation. Payment information may also be processed directly by Shopify and relevant payment providers.

  • Account information, such as your login information, account preferences and settings where you create a customer account.

  • Communications, including information you provide when contacting customer service or otherwise communicating with us.

  • Device and technical information, including IP address, device type, browser information, operating system, network information and online identifiers.

  • Usage information, including information about how you navigate and interact with our website, products and Services.

  • Marketing and advertising information, including interactions with our advertisements, marketing communications and campaigns.

  • Privacy and consent preferences, including your cookie and tracking preferences and records of consent where applicable.

How We Collect Personal Information

We may collect personal information:

  • Directly from you, for example when you place an order, create an account, contact us or subscribe to marketing.

  • Automatically when you use our Services, including through cookies, pixels, local storage and similar technologies.

  • From Shopify and other service providers that provide technology, ecommerce, analytics, payment, fulfilment, marketing or other services to us.

  • From advertising and marketing partners, where permitted by applicable law and subject to applicable consent requirements.

  • From other third parties, where permitted by law.

How We Use Personal Information

We may use personal information for the following purposes.

Providing Our Services

We process personal information to:

  • process and fulfil orders;

  • receive and process payments;

  • arrange shipping and delivery;

  • manage returns, refunds and exchanges;

  • administer customer accounts;

  • provide customer support;

  • communicate with you regarding orders and transactions; and

  • provide other functionality you request.

Where applicable, this processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Operating and Improving Our Business

We may use information to:

  • maintain and improve our website and Services;

  • understand how customers use the website;

  • diagnose technical issues;

  • improve website performance and usability;

  • improve our products and customer experience; and

  • analyse business performance.

Where this processing involves non-essential cookies, analytics tools or similar tracking technologies, we rely on your consent where required by applicable law.

For other processing that does not require consent, we may rely on our legitimate interests in operating, securing and improving our business, provided those interests are not overridden by your rights and interests.

Marketing and Advertising

Subject to applicable law and your choices, we may process personal information to:

  • send promotional emails or other marketing communications;

  • measure advertising performance;

  • understand whether advertising leads to visits, purchases or other actions;

  • create advertising audiences;

  • optimise advertising campaigns; and

  • provide or measure personalised advertising.

Where consent is required for marketing cookies, tracking technologies or personalised advertising, we rely on your consent.

You may withdraw your consent or change your marketing preferences at any time.

Security and Fraud Prevention

We may process information to:

  • protect our website, customers and business;

  • detect and prevent fraud, abuse or security incidents;

  • investigate suspicious activity; and

  • enforce our terms and policies.

We generally rely on our legitimate interests in protecting our Services and customers, or on legal obligations where applicable.

Legal and Regulatory Requirements

We may process and retain information where necessary to:

  • comply with accounting, tax and consumer protection requirements;

  • comply with other legal or regulatory obligations;

  • respond to lawful requests from authorities;

  • establish, exercise or defend legal claims; or

  • enforce applicable agreements.

Cookies and Similar Technologies

We use cookies, pixels and similar technologies to operate our website and understand how it is used.

Some technologies are strictly necessary to provide the website, shopping cart, checkout, security and other Services requested by you.

Other technologies are used for purposes such as analytics, user-experience analysis, advertising measurement and marketing.

We currently use services including:

  • Shopify, for ecommerce functionality, store operation, analytics and related services;

  • Google Analytics 4, for website analytics and measurement;

  • Google Tag Manager, to manage certain website tags;

  • Hotjar, to analyse website behaviour and improve usability and customer experience; and

  • Meta technologies, including Meta Pixel and Conversions API, for advertising measurement, attribution and campaign optimisation.

Where required by applicable law, non-essential analytics and marketing technologies are only used after you have provided the relevant consent.

You can accept, decline or manage non-essential technologies through our cookie banner and Cookie Preferences.

You may withdraw or change your consent at any time.

For more information about the individual technologies and cookies we use, their providers, purposes and typical storage periods, please see our Cookie Policy.

Analytics

Google Analytics

We use Google Analytics 4 to understand how visitors use our website.

Depending on your consent and configuration, Google Analytics may process information such as:

  • pages viewed;

  • website interactions;

  • device and browser information;

  • approximate location information;

  • referral and campaign information; and

  • online identifiers.

We use this information to understand website performance and improve our Services.

Hotjar

We use Hotjar to better understand how visitors interact with our website and identify opportunities to improve the customer experience.

Depending on the functionality enabled, Hotjar may process information concerning:

  • pages visited;

  • clicks and scrolling;

  • device and browser characteristics;

  • website interactions; and

  • session behaviour.

We intend to use Hotjar only where the relevant analytics consent has been provided where consent is required.

Advertising and Meta Technologies

We use Meta technologies, including Meta Pixel and Meta Conversions API, to measure and optimise advertising on platforms such as Facebook and Instagram.

Depending on your consent and the relevant configuration, information about interactions with our Services may be transmitted to Meta. This may include events such as:

  • viewing a product;

  • adding a product to the shopping cart;

  • beginning checkout; and

  • completing a purchase.

Meta Conversions API also enables certain event information to be transmitted from Shopify to Meta through server-to-server communication.

This information may be used for advertising measurement, attribution, audience creation and campaign optimisation in accordance with applicable law and your consent preferences.

How We Disclose Personal Information

We may disclose personal information where necessary for the purposes described in this Privacy Policy.

This may include disclosure to:

Shopify

Our store is hosted and operated using Shopify. Shopify processes personal information in connection with providing ecommerce, hosting, checkout, analytics, security and other services.

Shopify may also process certain information for its own purposes as described in the Shopify Consumer Privacy Policy.

Service Providers

We may disclose information to companies providing services on our behalf, including:

  • payment providers;

  • hosting and IT providers;

  • shipping and fulfilment providers;

  • customer support providers;

  • analytics providers;

  • website optimisation providers; and

  • professional advisers.

Analytics and Marketing Providers

Subject to applicable law and your consent choices, we may disclose or make information available to analytics and advertising providers such as Google, Hotjar and Meta.

These providers may process device information, online identifiers, website interactions and advertising-related information in accordance with their respective privacy practices and our configuration of their services.

Legal Requirements

We may disclose information where necessary to:

  • comply with applicable law;

  • respond to lawful requests from public authorities;

  • protect our rights or those of others;

  • investigate fraud or security incidents; or

  • establish, exercise or defend legal claims.

Corporate Transactions

Personal information may also be disclosed in connection with a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction.

Relationship With Shopify

Our Services are hosted by Shopify.

Information submitted through our store may be processed by Shopify and other parties involved in providing Shopify services.

Shopify may process information in countries outside your country of residence.

Certain Shopify services may also use information from interactions with our store and other Shopify merchants to provide or improve Shopify services.

Where Shopify processes personal information for its own purposes, Shopify is responsible for that processing.

Further information is available in the Shopify Consumer Privacy Policy and through the Shopify Privacy Portal.

International Transfers

Some of our service providers operate internationally. As a result, personal information may be transferred to, stored in or processed in countries outside Norway or the European Economic Area.

Where required, international transfers of personal information are protected using recognised safeguards, such as:

  • adequacy decisions;

  • the European Commission's Standard Contractual Clauses; or

  • other legally recognised transfer mechanisms.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.

The relevant retention period depends on the type of information and why it is processed.

For example:

  • order and transaction information may be retained for periods required under accounting, tax, consumer protection or other applicable laws;

  • customer account information may be retained while the account remains active and for an appropriate period afterwards;

  • customer service communications may be retained where necessary to manage the customer relationship or resolve disputes;

  • records of consent may be retained where necessary to demonstrate that valid consent was obtained; and

  • analytics and advertising identifiers are retained according to the applicable settings and storage periods described in our Cookie Policy.

When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

However, no method of transmitting or storing information is completely secure, and we cannot guarantee absolute security.

You should not send sensitive or confidential information to us through insecure communication channels.

Your Rights

Depending on where you live and subject to applicable limitations, you may have rights relating to your personal information.

If you are located in Norway, the European Economic Area or the United Kingdom, these may include:

Right of Access

You may request confirmation of whether we process personal information about you and request access to that information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of personal information in circumstances where applicable law provides this right.

Right to Restriction

You may request that we restrict certain processing of your personal information.

Right to Data Portability

In certain circumstances, you may request a copy of personal information you have provided to us in a structured, commonly used and machine-readable format.

Right to Object

Where processing is based on legitimate interests, you may have the right to object to that processing.

You may also object to processing of your personal information for direct marketing purposes.

Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Cookie and tracking consent can be changed through our Cookie Preferences.

Marketing Preferences

You can unsubscribe from promotional emails at any time using the unsubscribe link included in the relevant communication.

We may still send communications necessary to provide our Services, such as order confirmations, shipping updates and customer service messages.

Rights Relating to Targeted Advertising and Data Sharing

Depending on your location, you may also have rights to opt out of certain processing considered to constitute:

  • targeted advertising;

  • sharing of personal information; or

  • sale of personal information

under applicable privacy laws.

Where applicable, these rights can be exercised through our Data Sharing Opt-Out page or other privacy controls made available on the website.

Where required, recognised privacy preference signals such as Global Privacy Control may also be processed by Shopify.

Exercising Your Rights

To exercise your rights, contact us using the details below.

We may need to verify your identity before completing a request.

We will respond within the time periods required under applicable law.

Exercising your privacy rights will not result in unlawful discrimination against you.

Children's Privacy

Our Services are not intended for children.

We do not knowingly collect personal information from children below the applicable age at which they may independently provide valid consent or enter into transactions through our Services.

If you believe a child has provided personal information to us improperly, please contact us.

Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security or content of third-party websites. You should review the applicable privacy information before providing personal information to those services.

Complaints

If you have concerns about how we process personal information, contact us so that we can investigate the matter.

If you are located in Norway, you also have the right to lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority.

If you are located elsewhere in the EEA, you may contact the competent data protection supervisory authority in your country.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • our Services;

  • our processing activities;

  • our service providers;

  • applicable technology;

  • legal requirements; or

  • other operational reasons.

When we make changes, we will update the “Last updated” date above and provide additional notice where required.

Contact

If you have questions about this Privacy Policy, our privacy practices or your rights, contact:

Berserker AS, trading as URUR
Organization number: 923 845 542
Sanden 1
3264 Larvik
Norway

Email: amalie@urur.com

For the purposes of applicable data protection laws, Berserker AS is the data controller for the processing described in this Privacy Policy, except where another party acts as an independent controller for its own processing.