Privacy Policy
Last updated: November 12, 2026
Pierre Robert takes privacy seriously. We process personal data in accordance with applicable privacy legislation, including the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR).
The website pierrerobert.no lets you view and buy our products, create a customer account, and use our other services, including the membership program Min Pierre Robert. Some services and features, such as the membership program, may be launched at a later date. What this policy says about them applies from the time they are available.
The website is owned and operated by Pierre Robert Group AS, organization number 912 692 094, with its address at Karenslyst allé 9, 0278 Oslo, Norway.
If you have questions about privacy, you can contact us at forbruker@pierrerobert.no.
The Norwegian Data Protection Authority (Datatilsynet) supervises compliance with privacy legislation. If you believe we process personal data in violation of the rules, you can file a complaint with the Norwegian Data Protection Authority at www.datatilsynet.no.
About our privacy policy
It is important to us that you can trust us and the way we process your personal data. In this privacy policy we explain why we collect information about you, how we use it, who we may share it with, and how we protect your privacy.
Personal data is information that can be linked, directly or indirectly, to an identifiable person. Examples include name, address, phone number, email address, purchase history, and information about how you use our website.
Processing of personal data includes collecting, recording, storing, analyzing, using, sharing, and deleting such information.
When you shop with us or use services offered through pierrerobert.no, it may be necessary to process personal data in order to fulfill the agreement between you and Pierre Robert Group AS.
We may also process personal data when we have another lawful basis for processing, for example your consent, a legal obligation, or a legitimate interest that, after a specific assessment, outweighs your privacy interests.
We use your personal data for the purposes described in this policy.
Providing personal data to us is voluntary, but some information is necessary to complete a purchase, create a customer account, or use certain services.
The website pierrerobert.no
Our website pierrerobert.no gives you information about Pierre Robert and our products, and lets you buy products directly from us.
You can also create a customer account and register as a member of Min Pierre Robert.
When you use the website, we may collect information about you in accordance with this policy.
We use external providers to operate and develop the website and related services. Our e-commerce platform is Centra, while Voyado is used for CRM and customer communication. TRY assists with development and implementation. We use Google Analytics for statistics on how the website is used, and Cookiebot to collect and store your cookie consent choices.
Which information these providers have access to, and how it is processed, depends on the services they deliver and their agreed roles.
Who is the data controller?
Pierre Robert Group AS is the data controller for the processing of personal data in connection with pierrerobert.no and our related services, unless otherwise specifically stated.
As the data controller, we are responsible for ensuring that personal data is processed in accordance with applicable privacy legislation.
We use providers and partners who assist us with, among other things, e-commerce, payment, logistics, customer communication, analytics, and technical operations.
When they process personal data on our behalf, the processing is governed by data processing agreements. If a provider has independent or joint controller responsibility for certain information, this will be handled and disclosed in accordance with the regulations.
Information security
We take information security seriously and have established technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, and misuse.
Only employees and providers with a work-related need shall have access to personal data.
We use relevant security measures, including access control, secure storage, and procedures for handling personal data.
We also require our providers to safeguard information security in accordance with applicable regulations and the agreements we have entered into.
How do we process your personal data?
Pierre Robert Group AS processes personal data when it is necessary to deliver our products and services, fulfill agreements with you, administer customer accounts and memberships, respond to inquiries, or comply with legal obligations.
We may also use personal data for customer communication, marketing, analysis, and improvement of our services when we have a valid legal basis for doing so.
When you shop in the online store
When you order products through pierrerobert.no, we process information such as:
First and last name
Address and delivery information
Phone number
Email address
Products ordered, order number, and purchase history
Payment status and necessary payment information
Information about delivery, returns, refunds, and complaints
IP address and relevant technical information when necessary
We use the information to process and deliver the order, complete payment, send order confirmation and delivery information, and handle any inquiries.
The legal basis is primarily GDPR Article 6(1)(b), because the processing is necessary to fulfill the purchase agreement.
Information may also be processed to comply with legal obligations, for example under accounting legislation, cf. GDPR Article 6(1)(c).
Payments in the online store are handled by our payment provider Kustom. Pierre Robert Group AS processes necessary information about the order and payment status in order to complete the purchase, administer the order, and handle any returns and refunds. Payment information is processed by the payment provider and any associated payment services. We do not store complete payment card details.
To deliver your orders, we share necessary information, such as name, contact information, delivery address, and order information, with our delivery and logistics partners. These include HeltHjem, nShift, and Ingrid.
When you create a customer account
When you create a customer account with Pierre Robert, we process the information necessary to create and administer the account.
This may include name, contact information, login information, customer ID, and purchase history.
The purpose is to give you access to your account, administer your information, and make it easier to follow up on orders and use available account features.
The legal basis is GDPR Article 6(1)(b), to the extent the processing is necessary to deliver the account service.
When you become a member of Min Pierre Robert
Min Pierre Robert is Pierre Robert's membership program, where you as a member get access to the member benefits and offers we make available at any given time.
When you register as a member, we process the personal data necessary to create and administer the membership, identify you as a member, and give you access to the member benefits. This includes name, contact information, membership status, and information about relevant purchases and member benefits.
We may also record voluntary information about interests and product preferences if you choose to share this with us.
The legal basis for the necessary administration of the membership is GDPR Article 6(1)(b) (performance of a contract).
You can be a member without consenting to marketing by email or SMS. Any consents to marketing can be withdrawn at any time, independently of the membership.
You can end your membership at any time on My Page or by contacting us at forbruker@pierrerobert.no. When you cancel, your access to the member benefits ends. Personal data that is no longer necessary is deleted or anonymized, unless we have another lawful basis for retaining it.
You can find more information about member benefits and conditions in our membership terms.
When you receive newsletters and marketing
If you have consented, we may send you newsletters, product information, inspiration, campaigns, and offers by email or SMS.
We obtain separate consents for marketing by email and by SMS.
We record the necessary information about your consents, including what you have consented to and when the consent was given.
You can withdraw your consent at any time, for example on My Page, through the unsubscribe links in our emails and SMS messages, or by contacting us.
We may also send you necessary information about orders, deliveries, your account, and other agreed services without marketing consent, when we have another valid legal basis.
Electronic marketing is carried out in accordance with the Norwegian Marketing Control Act. In some cases the law may allow marketing in existing customer relationships without separate prior consent, provided that all conditions are met and the customer has the option to opt out.
Analysis, customer insight, and personalization
We use customer and analytics tools, including Voyado and Google Analytics, to understand our customers' needs and develop better products, assortments, services, and customer experiences.
We may analyze information about purchase history, shopping patterns, product interests, and how customers use our online store and respond to our communication. The information may be used to analyze customer behavior, evaluate marketing activities, and divide customers into groups (segments) based on, for example, purchase frequency and interests.
When you have given the necessary consent, we may also use the information to tailor offers, product recommendations, and marketing to your interests and needs.
The legal basis depends on the purpose. For general customer analysis and business development we may rely on legitimate interest under GDPR Article 6(1)(f), provided that we have weighed our interests against your rights and privacy interests. For individual profiling and personalized marketing we rely on consent under GDPR Article 6(1)(a).
We may also use anonymized or aggregated information for statistics and business analysis. You can withdraw consents you have given at any time, without affecting the lawfulness of processing already carried out.
When you contact customer service
When you contact us, we process the information you give us, as well as the information necessary to respond to and follow up on the inquiry.
This may include, for example, name, contact information, order number, and information about products or orders.
The legal basis will depend on the inquiry and may be performance of a contract, a legal obligation, or our legitimate interest in providing customer service.
Security and prevention of misuse
We may process necessary information to protect our systems and services, prevent fraud, and investigate possible misuse.
The legal basis is normally our legitimate interest in securing the services, cf. GDPR Article 6(1)(f), or a legal obligation where applicable.
Do others get access to your personal data?
Pierre Robert Group AS uses external providers and partners to operate the online store, administer the membership program, handle payment and delivery, and carry out customer communication and analysis.
These include Centra (e-commerce), Voyado (CRM, membership administration, and customer communication), TRY (technical development and assistance), Google Analytics (statistics, when you have consented), and Cookiebot (cookie consent solution). We also share necessary information with payment providers, carriers, and other service providers when this is necessary to deliver our services.
When providers process personal data on our behalf, we enter into data processing agreements that govern how the information may be processed and secured.
Some partners, such as payment providers and carriers, may be independent data controllers for parts of the processing. This means that they have an independent responsibility to process the information in accordance with applicable privacy legislation.
We do not share personal data with others for their own marketing purposes without a valid legal basis, and we do not sell your personal data.
Where is your personal data stored?
Personal data processed by Pierre Robert Group AS is, as a general rule, stored on servers in Norway and elsewhere in the EU/EEA.
Some of our providers, for example Google, may process information outside the EU/EEA. Such transfers only take place when there is a valid transfer mechanism under privacy legislation, for example the European Commission's adequacy decision (the EU-U.S. Data Privacy Framework) or the EU Standard Contractual Clauses.
Use of cookies in our online store
Cookies are small text files that are stored on your device when you visit a website. We also use similar technologies, such as local storage in the browser.
We divide cookies into four categories:
Necessary: used for the website to work, for example for the shopping cart, login, and security. These cannot be turned off.
Preferences: remember your choices, for example language and region.
Statistics: help us understand how the website is used, so that we can improve it.
Marketing: used to tailor content and communication and to measure the effect of our marketing.
Necessary cookies are always set. We only use the other categories if you consent, and you can change or withdraw your consent at any time.
An overview of the cookies we use, with purpose, provider, and storage period, is available on the page Information about cookies. You can also change your consent there.
Right of access, rectification, and erasure
You have rights under privacy legislation relating to how Pierre Robert Group AS processes your personal data.
Among other things, you can:
Request access to the personal data we process about you.
Require that incorrect or incomplete information be corrected.
Request erasure of personal data when the conditions for erasure are met.
Request restriction of processing in certain cases.
Object to processing based on legitimate interest.
Object to the processing of personal data for direct marketing.
Withdraw consents you have previously given.
Request data portability when the conditions are met.
As a general rule, you have the right not to be subject to important decisions about you that are made automatically, without human review, if the decisions may have significant consequences for you. There are certain exceptions to this right.
If you wish to exercise your rights, you can contact us at forbruker@pierrerobert.no.
We may ask for the information necessary to confirm your identity before we process the request.
We will respond to the request as quickly as possible and normally within 30 days, in accordance with privacy regulations. If the law allows an extension of the deadline, we will inform you of this.
You can also manage certain information and communication preferences through your customer account if this functionality is available.
If you withdraw your consent to marketing, we may still send you necessary messages about orders and other services you have agreed with us.
We cannot always delete all personal data immediately. Some information must be retained to comply with legal requirements, for example accounting obligations, or because we have another valid legal basis. We cannot delete information that we are legally obliged to retain, for example vouchers, which are stored for 5 years under the Norwegian Bookkeeping Act.
If you believe that we process your personal data in violation of the law, you have the right to file a complaint with the Norwegian Data Protection Authority.
Retention of personal data
We retain your personal data for as long as necessary for the purposes for which it was collected, or for as long as we are required to retain it under applicable law.
Information linked to the customer account and the membership in Min Pierre Robert is, as a general rule, retained for as long as the account or membership is active. When it ends, information that is no longer necessary is deleted or anonymized, unless we have another lawful basis for continued retention.
Customer accounts and memberships with no activity during the last 24 months are deleted or anonymized. By activity we mean, for example, purchases, logging in, or clicking in an email from us.
Information used for customer analysis, segmentation, and personalized marketing is retained for as long as it is necessary for the relevant purpose and we have a valid legal basis. If you withdraw a consent, we stop the processing based on that consent, unless there is another lawful basis for the processing in question.
We retain necessary documentation of consents and withdrawals of consent for as long as necessary to document that we have complied with our legal obligations.
Information from customer service is retained for as long as necessary to handle the inquiry and any subsequent claims or disputes.
Order, payment, and accounting information is retained in accordance with applicable legal requirements, including accounting legislation.
When the information is no longer necessary, and we have no other lawful basis for keeping it, it is deleted or anonymized.
Purchase history is stored for up to 5 years, in accordance with the Norwegian Bookkeeping Act.
Changes to the privacy policy
We may update the privacy policy if our services, the processing of personal data, or applicable regulations change.
The updated policy will be available on pierrerobert.no, with the date of the latest update.
In the event of significant changes, we will inform you when this is required.
Contact us
If you have questions about privacy or wish to exercise your rights, you can contact:
Pierre Robert Group AS
Organization number: 912 692 094
Address: Karenslyst allé 9, 0278 Oslo, Norway
Email: forbruker@pierrerobert.no