Privacy policy
Last updated: 16.09.2026
This policy explains how Dtablet AS collects and uses personal data through dtablet.no and dtablet.com.
US customers: information relating to purchases made using a pre-tax health account is also covered by our separate Consumer Health Data Privacy Policy.
The Dtablet companion application does not yet exist. This policy covers our websites and the sale of the device only. Separate terms and a separate privacy notice will be provided before the application becomes available.
Who is responsible for your data
Data controller: Dtablet AS
Krambugata 2, 7011 Trondheim, Norway Org. nr. 934 659 155 hello@dtablet.com
What we collect
When you place an order Name, email address, postal address, phone number, order contents, order value, payment status and payment method. We do not receive or store your full card number.
When you join our mailing list Email address, and whether you opened or clicked our emails.
When you use our websites IP address, device and browser type, pages viewed, referring source, and interactions with our site. Some of this is collected through cookies and similar technologies, and only with your consent where consent is required.
When you contact us Whatever you choose to include in your message, and our reply.
We do not knowingly collect data from children under 16.
Why we use it, and on what legal basis
|
Purpose |
Data used |
Legal basis (GDPR) |
|---|---|---|
|
Processing and delivering your order |
Order and contact data |
Performance of a contract, Art. 6(1)(b) |
|
Payment processing and fraud prevention |
Order and payment data |
Contract, and legitimate interest in preventing fraud, Art. 6(1)(f) |
|
Customer support |
Contact and order data |
Contract, Art. 6(1)(b) |
|
Accounting and tax records |
Order and payment data |
Legal obligation, Art. 6(1)(c) — bokføringsloven |
|
Marketing emails |
Email address, engagement data |
Consent, Art. 6(1)(a) |
|
Analytics and advertising measurement |
Website usage data |
Consent, Art. 6(1)(a) |
|
Defending legal claims |
As relevant |
Legitimate interest, Art. 6(1)(f) |
You can withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.
Who we share it with
We use the following service providers. Each processes data on our instructions and under a data processing agreement.
|
Provider |
Purpose |
Location |
|---|---|---|
|
Shopify |
E-commerce platform, hosting, checkout |
Canada / EEA / US |
|
Shopify Payments / Vipps MobilePay |
Payment processing and fraud prevention |
EEA / US |
|
Truemed |
Health account payment and eligibility (US customers only) |
US |
|
Shipping and logistics partners |
Delivery and customs clearance |
Varies by destination |
|
MailerLite |
Email delivery |
EEA / US |
|
Google (Analytics 4, Google Ads) |
Analytics and advertising measurement |
US |
|
Meta (Pixel, Conversions API) |
Advertising measurement |
US |
|
Consentmo |
Cookie consent management |
EEA / US |
|
Translate and Adapt (Shopify) |
Website translation |
Canada / EEA / US |
We also disclose data where we are legally required to, and to professional advisers where necessary.
We do not sell your personal data.
Transfers outside the EEA
Some providers process data in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses together with supplementary measures. You can request details of the safeguards used by emailing hello@dtablet.com.
How long we keep it
-
Order and accounting records: five years after the end of the financial year, as required by bokføringsloven.
-
Marketing list: until you unsubscribe, and then a suppression record so we do not contact you again.
-
Support correspondence: up to three years.
-
Website analytics: up to 14 months.
Cookies
We use cookies that are necessary for the site to function, and, with your consent, cookies for analytics and advertising. You can accept, reject or change your choices at any time through the consent banner.
Where you have not consented to analytics and advertising cookies, we do not set them.
Your rights
Rights under the GDPR
Dtablet AS is established in Norway, so the GDPR applies to how we handle your data regardless of where you live. You have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict or object to how we process it
- receive your data in a portable format
- withdraw consent at any time
To exercise any of these, email hello@dtablet.com. We respond within one month. Where a request is complex, we may extend this by up to two further months and will tell you if we do.
If you are not satisfied with our response, you may complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no).
Additional rights for US residents
Some US states give residents further rights over their personal data. Rather than applying these state by state, we extend the following to all US residents regardless of whether a particular law applies to us:
-
to know what personal data we hold about you and who we share it with;
-
to receive a copy of it;
-
to correct it;
-
to have it deleted;
-
to opt out of targeted advertising;
-
not to be discriminated against for exercising any of these rights.
Email hello@dtablet.com to make a request. We respond within 45 days and may extend once where necessary.
We honour Global Privacy Control signals as an opt-out of targeted advertising.
Health-related data has additional protections. See our Consumer Health Data Privacy Policy.
Security
We use encryption in transit, access controls, and vetted providers. No system is completely secure, and we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant authority as required by law.
Changes
We will post any updated version here with a new date. Where changes are material, we will notify you by email.
Contact
hello@dtablet.com Dtablet AS, Krambugata 2, 7011 Trondheim, Norway