Last updated: 06.11.2026

 

This policy explains how Dtablet AS collects and uses personal data through dtablet.no and dtablet.com.

US customers: information about your purchase of a Dtablet device, including any payment with a pre-tax health account (HSA/FSA), is also covered by our separate Consumer Health Data Privacy Policy.

The Dtablet companion app is still under development. This policy covers our websites and the sale of the device only. Separate terms and a separate privacy notice will be provided before the app becomes available.

Who is responsible for your data

Data controller: Dtablet AS
Krambugata 2, 7011 Trondheim, Norway
Org. nr. 934 659 155
hello@dtablet.com

What we collect

When you place an order: name, email address, postal address, phone number, order contents, order value, payment status and payment method. We do not receive or store your full card number.

When you join our mailing list: email address, and whether you opened or clicked our emails.

When you use our websites: IP address, device and browser type, pages viewed, referring source, and interactions with our site. Some of this is collected through cookies and similar technologies, and only with your consent where consent is required.

When you contact us: whatever you choose to include in your message or call, and our reply.

We do not knowingly collect data from children under 16.

Why we use it, and on what legal basis

• Processing and delivering your order: order and contact data. Legal basis: performance of a contract, Art. 6(1)(b).
• Payment processing and fraud prevention: order and payment data. Legal basis: contract, and legitimate interest in preventing fraud, Art. 6(1)(b) and (f).
• Customer support: contact and order data. Legal basis: contract, Art. 6(1)(b), or legitimate interest in responding to enquiries, Art. 6(1)(f).
• Accounting and tax records: order and payment data. Legal basis: legal obligation, Art. 6(1)(c) (bokføringsloven).
• Marketing emails: email address and engagement data. Legal basis: consent, Art. 6(1)(a).
• Analytics and advertising measurement: website usage data and, for purchases in the Norwegian market, order value and products purchased. Legal basis: consent, Art. 6(1)(a).
• Defending legal claims: data as relevant. Legal basis: legitimate interest, Art. 6(1)(f).

You can withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

Who we share it with

We use the following service providers. Most process data on our behalf, on our instructions and under a data processing agreement. Payment providers, shipping carriers and Truemed act as independent controllers for parts of their processing, and Meta is a joint controller with us for data collected through the Meta Pixel. These providers also apply their own privacy policies.

• Shopify (Canada / EEA / US): e-commerce platform, hosting and checkout.
• Shopify Payments / Vipps MobilePay (EEA / US): payment processing and fraud prevention.
• Truemed (US): health account payment and eligibility, US customers only.
• Shipping and logistics partners (varies by destination): delivery and customs clearance.
• MailerLite (EEA / US): email delivery.
• Google – Analytics 4, Google Ads (US): analytics and advertising measurement. Purchase and checkout data from the Norwegian market only.
• Meta – Pixel (US): advertising measurement. Norwegian market only; no data from visitors to dtablet.com or orders shipped to the US.
• Consentmo (EEA / US): cookie consent management.
• Translate and Adapt – Shopify (Canada / EEA / US): website translation.

We also disclose data where we are legally required to, and to professional advisers where necessary.

We do not sell your personal data. However, our use of advertising cookies may count as “sharing” or targeted advertising under some US state laws. You can opt out of this as described below.

Transfers outside the EEA

Some providers process data in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses together with supplementary measures. Transfers to Canada rely on the European Commission’s adequacy decision for Canada. You can request details of the safeguards used by emailing hello@dtablet.com.

How long we keep it

• Order and accounting records: five years after the end of the financial year, as required by bokføringsloven.
• Marketing list: until you unsubscribe, and then a suppression record so we do not contact you again.
• Support correspondence: up to three years.
• Website analytics: up to 14 months.

Cookies

We use cookies that are necessary for the site to function, and, with your consent, cookies for analytics and advertising. You can accept, reject or change your choices at any time through the consent banner.

Where you have not consented to analytics and advertising cookies, we do not set them.

Your rights

Rights under the GDPR

Dtablet AS is established in Norway, so the GDPR applies to how we handle your data regardless of where you live. You have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to how we process it
• receive your data in a portable format
• withdraw consent at any time

You can object at any time to the use of your data for direct marketing, and we will stop.

To exercise any of these rights, email hello@dtablet.com. We respond within one month. Where a request is complex, we may extend this by up to two further months and will tell you if we do.

If you are not satisfied with our response, you may complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no).

Additional rights for US residents

Some US states give residents further rights over their personal data. Rather than applying these state by state, we extend the following to all US residents, regardless of whether a particular law applies to us:

• to know what personal data we hold about you and who we share it with
• to receive a copy of it
• to correct it
• to have it deleted
• to opt out of targeted advertising
• not to be discriminated against for exercising any of these rights

Email hello@dtablet.com to make a request. We respond within 45 days and may extend once where necessary.

We honour Global Privacy Control signals as an opt-out of targeted advertising.

Health-related data has additional protections. See our Consumer Health Data Privacy Policy.

Security

We use encryption in transit, access controls and vetted providers. No system is completely secure, and we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant authority as required by law.

Changes

We will post any updated version here with a new date. Where changes are material, we will notify you by email.

Contact

hello@dtablet.com
+47 400 04 601
Dtablet AS, Krambugata 2, 7011 Trondheim, Norway