Liis

Privacy notice

Last updated 23 October 2026

This notice explains how LiiS.com handles personal data when you order a product for your child, such as Parkdressen, and what your rights are.

Who is responsible

LiiS.com AS (org. no. 931 729 381), Thorvald Meyers gate 7, 0555 Oslo, Norway, is the data controller. Send privacy questions to support@liis.com.

The barnehage and the municipality hand out the campaign code, but they do not receive the details you give us. LiiS.com alone is responsible for the processing.

What we collect

  • About you: name, email, mobile number and home address.
  • About the product: the text on the name label, size, barnehage and avdeling.
  • About the order: campaign code, reference number, time, order and delivery status, and which product you received.
  • Customer service: what you write to us, and changes we make to your order at your request.
  • Technical: IP address and browser details in server logs.

We do not ask for national ID numbers, payment details or sensitive data. We need the details above to deliver the product. Without them we cannot accept the order.

About your child

The name label is usually your child's name. We only need it so the product reaches the right child at the barnehage. We do not ask for age, date of birth or anything else about your child. You are welcome to use a nickname or initials instead.

The tag in the product

Each product has an RFID tag. The tag carries a number that identifies the product, not your child, and it holds no personal data. We read the tag only at the warehouse, when the product is packed and when it is returned, never at the barnehage or anywhere else. The link between the product and your child exists only in our database, and it ends when your contact details are erased.

What we use it for

  • Delivering and looking after the product: registering the order, packing the product with its name label, sending it to the barnehage, swapping sizes, handling returns, answering your questions and emailing you about the order. The legal basis is our agreement with you (GDPR Art. 6(1)(b)).
  • Security and operations: logs to keep the service stable and prevent misuse. The legal basis is our legitimate interest in a secure service (Art. 6(1)(f)).
  • Product development and research: anonymised data on how the products hold up. The legal basis is our legitimate interest (Art. 6(1)(f)), and the purpose is compatible with the original one (Art. 6(4) and Art. 89).

Each product is used by several families. We record its condition, repairs and lifespan without names or contact details. We use this to make better products, and manufacturers only receive aggregated figures. Our research partners, NILU and the Norwegian School of Economics (NHH), receive anonymised product data for research on product lifespan and environmental impact. They never receive names, contact details, orders or anything else that can be linked to you. Once your contact details are erased, none of this data can be linked to you.

We send no newsletters or marketing, and we do not sell data. We make no automated decisions about you and do no profiling.

Who receives it

  • The barnehage receives the products in a box with name label and avdeling, so staff can hand them out.
  • Aksell, our warehouse and logistics partner, packs and delivers the boxes. They receive name label, size, barnehage and avdeling, but not your contact details.
  • Providers that process data on our behalf, under a data processing agreement with us:

  • Neon: Database

    Neon Inc., USA. Stored in: EU (Frankfurt). Transfer basis: EU standard contractual clauses.

  • Vercel: Hosting the website

    Vercel Inc., USA. Stored in: EU (Frankfurt). Transfer basis: EU standard contractual clauses.

  • Postmark: Email: sign-in links, order confirmations and shipping notices

    ActiveCampaign, LLC, USA. Stored in: USA. Transfer basis: EU standard contractual clauses.

  • Microsoft 365: Customer support email and documents

    Microsoft Ireland Operations Ltd., Ireland. Stored in: EEA. Transfer basis: EU standard contractual clauses.

We disclose data to authorities only when the law requires it.

Transfers outside the EEA

The database and the website run in the EU. Some providers are US companies or owned by US companies, and data may be processed in or accessed from the USA. These transfers rely on the EU standard contractual clauses in the data processing agreement. Providers certified under the EU–US Data Privacy Framework are also covered by the European Commission's adequacy decision. You can ask for a copy of the safeguards at support@liis.com.

How long we keep it

We keep your contact details and the name label while you have the product, and for 12 months after the subscription ends, so we can follow up returns and questions. After that we erase or anonymise them. Server logs are deleted after a short time. Database backups may still contain erased data, but we never restore erased data from them.

Your rights

You have the right to

  • access the data we hold about you, and get a copy
  • have mistakes corrected
  • have your data erased
  • restrict processing
  • receive your data in a machine-readable format
  • object to processing based on our legitimate interest

Email support@liis.com from the address you ordered with. We reply within 30 days, free of charge. If you believe we handle your data unlawfully, you can complain to Datatilsynet, the Norwegian Data Protection Authority.

Cookies

We use no cookies for analytics, tracking or advertising, and load no third-party content. The site sets only strictly necessary cookies: two sign-in security cookies that are deleted when you close the browser, and a sign-in cookie if you log in. These do not require consent (Norwegian Electronic Communications Act § 3-15).

Changes

We update this notice when our processing changes. Last updated 23 October 2026.

Personvern – LiiS.com