Privacy policy

Last updated: 23 October 2026

Who is responsible

Alpha Omega Norden AS (organisation number 984 851 324), Kjelsåsveien 29C, 0488 Oslo, Norway, is the data controller for personal data collected through riskinfos.com and our store. Contact: contact@riskinfos.com.

What we collect, why, and for how long

Purpose Data Legal basis Kept for
Orders, including the free sample report Name, email, billing country and address, order details Performance of contract; legal obligation (bookkeeping) 5 years after the end of the financial year, as required by the Norwegian Bookkeeping Act
Emails about new reports Email address Your consent, given at checkout Until you unsubscribe
Country requests Country, email, organisation and what you write in the form Our legitimate interest in answering your request 12 months
Customer service What you write to us Our legitimate interest in helping you 12 months after the case is closed
Statistics Pages visited, device and approximate location, via cookies Your consent 14 months

We do not sell personal data, and we do not use it for automated decisions about you.

Who processes data for us

  • Shopify processes orders, payments and delivery of downloads.
  • Brevo (EU) delivers country request emails to our inbox.
  • Vercel hosts the website.
  • Sanity (EU) stores website content. It holds no customer data.
  • Google Analytics, only if you accept statistics cookies.

Some of these providers may process data outside the EU/EEA. Where they do, transfers are covered by the EU Commission's standard contractual clauses or an adequacy decision.

Cookies

Necessary cookies make the store and checkout work. Statistics cookies are only set if you accept them. You can change or withdraw your consent at any time through the cookie settings link at the bottom of the page.

Your rights

You have the right to access, correct and delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Email contact@riskinfos.com and we will respond within 30 days. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).