Privacy Policy

Last updated: May 2026

1. Who We Are

Drågen Smokehouse is a premium Norwegian smoked salmon producer selling direct to consumers across the United Kingdom. We are committed to protecting your personal data and handling it with the same care and integrity we bring to every product we make.

Company No. 12345678. Registered in Norway.

For any privacy-related questions, contact us at: Contact Us

2. What Data We Collect

We may collect and process the following personal data:

Identity & Contact Data Your name, email address, phone number and delivery address when you place an order or contact us.

Order & Transaction Data Details of products you have purchased, order history and payment confirmation. We do not store your full card details — all payments are processed securely via our payment provider.

Account Data If you create an account, we store your login credentials and saved preferences.

Marketing Data Your preferences regarding receiving marketing communications from us, if you have opted in.

Technical Data Your IP address, browser type, device information and how you interact with our website, collected via cookies and analytics tools.

3. How We Use Your Data

We use your personal data for the following purposes:

To process and fulfil your orders
To communicate with you about your order status and delivery
To respond to your enquiries and customer service requests
To send you marketing communications, where you have given consent
To improve our website and understand how visitors use it
To comply with legal and regulatory obligations

We will never sell your data to third parties.

4. Legal Basis for Processing

We process your data on the following legal grounds:

Contract — to fulfil orders you have placed with us
Legitimate interests — to improve our service and prevent fraud
Consent — for marketing communications and non-essential cookies
Legal obligation — where required by law

5. Sharing Your Data

We share your data only where necessary with trusted third parties, including:

Payment processors (e.g. Stripe, PayPal) to handle transactions securely
Delivery and logistics partners to fulfil your order
Email marketing platforms, where you have opted in
Analytics providers to help us understand website usage

All third parties are required to handle your data in accordance with applicable data protection law.

6. Cookies

Our website uses cookies to improve your browsing experience and analyse site traffic. These include:

Essential cookies — necessary for the website to function
Analytics cookies — help us understand how visitors use our site
Marketing cookies — used to personalise content and ads, where consent is given

You can manage your cookie preferences at any time via our cookie settings banner.

7. Data Retention

We retain your personal data only for as long as necessary:

Order and transaction data: 7 years (legal requirement)
Account data: until you request deletion
Marketing preferences: until you unsubscribe or withdraw consent

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Delete your data, where there is no legal obligation to retain it
Restrict or object to how we process your data
Withdraw consent for marketing at any time
Data portability — request a copy of your data in a portable format
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at: Contact Us

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. All transactions on our website are encrypted using SSL technology.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.