Privacy policy

Privacy Policy

Last updated: March 2026

ZU4R Sportswear AS ("we", "us", "our") operates this store and website. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase from www.zu4r.com, or otherwise communicate with us.

Our store is powered by Shopify, which enables us to provide our services to you. Where there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing our services, you acknowledge that you have read and understood this policy.

1. Data Controller

ZU4R Sportswear AS

Organisation number: 917 176 574

Tegerbærveien 11 A, 9403 Harstad, Norway

Email: post@zu4r.no

Website: www.zu4r.com

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

  • Contact details — name, address, billing address, shipping address, phone number, and email address
  • Financial information — payment card details, transaction details, form of payment, and payment confirmation (processed securely by Shopify Payments)
  • Account information — username, password, security questions, preferences and settings
  • Transaction information — items you view, add to cart, purchase, return, exchange or cancel, and your order history
  • Communications — information you include when contacting our customer support
  • Device information — browser type, IP address, time zone, unique identifiers, and cookies
  • Usage information — how and when you interact with or navigate our website

3. How We Collect Personal Information

We collect personal information from the following sources:

  • Directly from you — when you place an order, create an account, contact us, or otherwise provide us with your information
  • Automatically — from your device when you visit our website, through cookies and similar tracking technologies
  • From service providers — including Shopify, payment processors, and analytics providers who collect or process data on our behalf
  • From third-party partners — including advertising and marketing partners

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal grounds:

  • Contract performance — to fulfil your order and provide our services (Article 6(1)(b) GDPR)
  • Legitimate interests — to improve our website, prevent fraud, and conduct marketing (Article 6(1)(f) GDPR)
  • Legal obligation — where required by applicable law (Article 6(1)(c) GDPR)
  • Consent — for non-essential cookies and direct marketing, where you have given explicit consent (Article 6(1)(a) GDPR)

5. How We Use Your Information

We use your personal information to:

  • Fulfil orders, process payments, and arrange shipping
  • Send order confirmations, invoices, and account notifications
  • Process returns, exchanges, and refunds
  • Personalise and improve your shopping experience
  • Screen orders for fraud and security risk
  • Send marketing and promotional communications where you have opted in
  • Show you targeted advertising based on your browsing and purchase history
  • Comply with applicable laws and respond to legal requests

6. Cookies and Tracking Technologies

We use essential and non-essential cookies, web beacons, tags, and pixels. Non-essential cookies (including analytics and advertising cookies such as Meta Pixel and Google Analytics) are only placed after you give explicit consent via our cookie banner. You can withdraw consent at any time by adjusting your cookie preferences.

You can also opt out of targeted advertising directly:

  • Facebook/Instagram: https://www.facebook.com/settings/?tab=ads
  • Google: https://www.google.com/settings/ads/anonymous
  • Digital Advertising Alliance: http://optout.aboutads.info/

We support the Global Privacy Control (GPC) signal. If you visit our website with GPC enabled, we will treat this as a request to opt out of targeted advertising for that device and browser. To learn more: https://globalprivacycontrol.org/

7. How We Share Your Information

We may share your personal information with the following third parties:

  • Shopify Inc. — our e-commerce platform and payment infrastructure. Shopify Privacy Policy: https://www.shopify.com/legal/privacy
  • Google Analytics — website analytics. Opt out: https://tools.google.com/dlpage/gaoptout
  • Meta Platforms (Facebook/Instagram) — advertising and retargeting via Meta Pixel. Opt out: https://www.facebook.com/settings/?tab=ads
  • DHL Express — shipping and delivery of your order
  • Payment processors — Shopify Payments, Klarna, Vipps, Apple Pay, Google Pay, Shop Pay
  • Business and marketing partners — for personalised advertising based on your activity across merchants and websites

We may also share your data where required by law, court order, or regulatory authority, or in connection with a business transaction such as a merger or acquisition.

8. Shopify's Role

Our store is hosted by Shopify, which collects and processes personal information about your access to and use of our store in order to provide and improve its services. Information you submit may be transmitted to and shared with Shopify and third parties located in countries other than where you reside.

Shopify may also use personal information collected about your interactions with our store, along with other merchants and with Shopify, to provide enhanced features and services. In these circumstances, Shopify is responsible for the processing of your personal information for those purposes.

To learn more about how Shopify uses your personal information and to exercise your rights: https://privacy.shopify.com/en

9. International Transfers

We may transfer, store, and process your personal information outside the country you live in, including to countries where Shopify and our other service providers operate.

If we transfer your personal information outside the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant UK authority, unless the destination country has been determined to provide an adequate level of protection.

10. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy. Order information is retained for a minimum of 5 years to comply with Norwegian accounting law. Device and usage information is retained for up to 26 months.

11. Children's Data

Our services are not intended for children. We do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

12. Security

We take reasonable measures to protect your personal information. Our website uses SSL encryption. However, no security measures are perfect or impenetrable, and we cannot guarantee complete security. We recommend that you do not use unsecured channels to communicate sensitive information to us.

13. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

  • Right to access — request a copy of the personal information we hold about you
  • Right to correct — request that we correct inaccurate information
  • Right to delete — request deletion of your personal information ('right to be forgotten')
  • Right to portability — receive your data in a portable format and transfer it to a third party
  • Right to object or restrict — ask us to stop or restrict processing for certain purposes
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
  • Right to opt out of targeted advertising — opt out of the sale or sharing of your data for advertising purposes
  • Right to lodge a complaint — with your national data protection authority

If you are in the EU/EEA, you can find your local supervisory authority here: https://edpb.europa.eu/about-edpb/about-edpb/members_en

Norwegian residents may contact Datatilsynet: www.datatilsynet.no

To exercise any of these rights, contact us at: post@zu4r.no

We will not discriminate against you for exercising your rights. We may need to verify your identity before processing your request.

14. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. We will post the updated policy on this page with a revised date. Where required by law, we will provide additional notice of material changes.

16. Contact

ZU4R Sportswear AS
Tegerbærveien 11 A, 9403 Harstad, Norway

Email: post@zu4r.no
Website: www.zu4r.com

For the purpose of applicable data protection laws, we are the data controller of your personal information.