Privacy Policy
Last updated: 7 November 2026
Who is responsible
What is truth AS (org. no. 938 821 127) is the data controller for personal data collected through whatistruth.studio and its checkout. Questions: hello@whatistruth.studio.
What we collect and why
- Orders: name, delivery address, email, phone number (if given) and what you bought — to make, ship and support your order (contract), and to keep accounting records as required by Norwegian bookkeeping law (legal obligation).
- Payments: handled by our payment providers. We receive confirmation of payment, not your full card details.
- Newsletter: your email address, only if you sign up — in the footer, via the drop list pop-up, or by ticking “Also notify me about future drops” when you vote (consent). The 15% welcome code you receive is a one-time offer. You can unsubscribe at any time via the link in every email or by emailing us.
- Customer service: what you write to us, to answer you.
Drop votes: your email address, to verify your vote and to tell you when the drop you voted for launches (consent). Kept until that drop launches or you ask us to delete it.
Drop suggestions: your idea and verified email address, to review your suggestion and let you know if it goes up for voting (consent). Approved ideas may be displayed publicly, but your email stays private. You can ask us to delete your suggestion by emailing us. Future drop news is sent only if you separately opt in.
Favourites: if you confirm your email to keep your favourites, we store your email address and the products you save, to show them on all your devices (contract), and — only if you tick the box — your consent and its time, to email you when your favourites go on sale or new drops land (consent). Your profile shows the same email address and lets you send us feedback; we store each message with your email address and the time it was sent, only to read it and reply by email (legitimate interest). You can remove favourites on the Favourites page and switch off these emails on your Profile page at any time. To have your feedback messages or account deleted, email us and we’ll remove them.
Who we share data with
Only with providers that help us run the shop, and only what they need:
- Shopify — online store and checkout
- Printful — production and shipping of your order
- Payment providers shown at checkout (e.g. card processor, Vipps MobilePay)
- Lovable — hosting of this website and our newsletter list
- Shipping carriers — delivering your parcel
Some of these providers process data outside the EU/EEA (for example in the USA). Where they do, they use approved safeguards such as the EU Standard Contractual Clauses.
We never sell your personal data.
How long we keep it
- Order and accounting records: 5 years after the end of the financial year, as required by Norwegian law.
- Newsletter: until you unsubscribe.
- Customer service emails: as long as needed to resolve your request, then deleted.
Cookies
This site uses only the cookies needed for it to work. Checkout runs on Shopify, which uses its own cookies to process your order. If we add analytics or marketing cookies, we will update this policy and ask for your consent first.
If you choose a shipping country, we save it in a small cookie (wit_country) on your device for up to a year so prices show in your currency. It isn't used for anything else.
Your rights
You can ask for access to, correction or deletion of your data, ask us to restrict or stop processing, and ask for a copy of your data (portability). Email hello@whatistruth.studio. If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet).