1. Who We Are
Norwygo AS is the data controller under GDPR. We are responsible for the processing of personal data collected through the Norwygo platform. You may contact us regarding privacy issues at privacy@norwygo.no.
2. Data We Collect
We collect only the data necessary to operate the service: contact details, consultation information, uploaded documents, technical data (IP address, device type), analytics data and payment information (without card details).
3. Purpose and Legal Basis
We process data for providing consultations, managing bookings, ensuring security, fulfilling legal obligations, analytics and service improvement. Legal bases include contract performance, legitimate interest, legal obligations and your consent.
4. Cookies
We use cookies to maintain sessions, store preferences, perform analytics and ensure security. You may manage cookies in your browser settings, but some features may not function properly.
5. Who Has Access to Your Data
Access may be granted to consultants (strictly for consultation purposes), our technical partners (such as Stripe, Vercel, Postmark and analytics providers) and governmental authorities when required by law.
6. Data Transfers Outside the EEA
We transfer data only to providers compliant with GDPR, either under an Adequacy Decision or Standard Contractual Clauses.
7. Data Retention
We retain data only as long as necessary: account data until deletion, consultation documents for up to 12 months, and financial records for 5 years as required by Norwegian law.
8. Your GDPR Rights
You have the right to access, rectify, delete and restrict processing of your data, request data portability, withdraw consent and lodge a complaint with Datatilsynet.
9. Data Security
We apply encryption, access control, logging, backups and incident monitoring to protect your information.
10. Children’s Data
The platform is not intended for individuals under 16, and we do not knowingly collect such data.
11. Changes to This Policy
We may update this Privacy Policy periodically. Changes take effect once published on the website.
12. Contact
For any privacy-related questions, please contact privacy@norwygo.no.
See also our Terms of Use.