Privacy notice

Last updated: 24 September 2026

This notice explains how personal information is used when you shop with OFF-PITCH, create an account or contact us. Reading this notice does not constitute consent to marketing.

Data controller

Off-Pitch AS · Norwegian company/VAT no. 912 384 144 MVA
Haslevollen 3, 0579 Oslo, Norway
support@off-pitch.no

Information and purposes

• Orders, delivery and returns: we use names, contact details, addresses, order contents and payment/transaction status to perform our contract (GDPR Article 6(1)(b)). Payment providers process payment information. Do not send card numbers or passwords to customer support.
• Accounts and support: we use account details, order history and messages to provide the service you request and manage your contract. Other enquiries are handled on the basis of our legitimate interest in responding and helping (Article 6(1)(f)).
• Accounting: necessary purchase and invoice details are retained to comply with legal bookkeeping duties (Article 6(1)(c)).
• Security and claims: technical logs, IP addresses and relevant transaction data help prevent abuse, secure the store and handle legal claims, subject to balancing our legitimate interests against your rights (Article 6(1)(f)).
• Newsletters and offers: we use email addresses and marketing preferences with consent (Article 6(1)(a)), or within a lawful existing-customer exception. Unsubscribe in any marketing email or contact us. Buying something or opening an account does not automatically provide marketing consent.
• Analytics and advertising: usage data, device information and online identifiers may be used for analytics, personalisation and advertising where permitted by your privacy choices. Consent is requested where required. See our cookie notice.

Sources of information

We receive information from you, your use of the store and providers handling payment or delivery. Necessary customer, order and membership information may be carried over from Wix to Shopify to continue the same customer relationship. Migration does not itself create new marketing consent.

Recipients

We use Shopify for the store and customer accounts, the payment providers relevant to your payment, and delivery providers such as Posten/Bring, UPS, DHL and FedEx when used for your shipment. Technical service providers and accounting partners receive information as needed for their work. Processors operate under appropriate agreements. Some providers are independent controllers for their own legal purposes. Information may also be disclosed to authorities where required by law.

Shopify and enhanced services

Shopify Network Intelligence is enabled. Shopify may use information about your interactions with our store together with information from other Shopify stores to improve services, prevent fraud and support personalisation and advertising. Shopify acts as an independent controller for its own purposes. Read the Shopify Consumer Privacy Policy and visit Shopify's privacy portal to exercise relevant rights.

Use Your privacy choices to opt out of data sharing for targeted advertising where that feature applies. Shopify handles Global Privacy Control (GPC) signals where applicable. You can also contact us about your choices. Consent to non-essential tracking can be withdrawn in the cookie settings.

Retention and international transfers

This store's Shopify configuration uses data hosting in the United States. Providers may process information in other countries. Transfers outside the EEA require a valid safeguard, such as an adequacy decision or EU standard contractual clauses with necessary supplementary measures. Contact us for details of the safeguards relevant to your information.

Accounting records are normally retained for five years after the financial year ends where required by Norwegian bookkeeping rules. Order and support records are retained as needed for the contract, fault claims and legal claims. Account information is kept while the account is in use, with separate retention where law or specific claims require it. Marketing information is used until you unsubscribe or the legal basis ends; necessary records of consent and opt-out requests may be retained. Technical logs are retained as needed for security. Cookie lifetimes vary by function and provider.

Your rights

Subject to applicable law, you may request access, correction, erasure, restriction and portability, and object to processing. You can always object to direct marketing. Withdrawing consent does not affect the lawfulness of earlier processing. We may need to verify your identity and normally respond within one month. Records required by law cannot always be erased immediately.

Contact support@off-pitch.no. You may complain to the Norwegian Data Protection Authority or the relevant authority where you live. Additional local privacy rights remain available. We do not discriminate against customers for exercising their rights.

Young customers and updates

Young people also use our equipment. Purchases must be made by an adult or with valid parental or guardian consent. We do not ask children to provide unnecessary information; parents and guardians can contact us about children's data. We update this notice when practices change and provide additional notice where required.