Privacy notice

When you sign in, we process your email address, authentication identifiers and session information. Guide access records may contain a user identifier, guide identifier, payment status, Stripe checkout and payment references, and timestamps.

If you contact us by email or telephone, we process your contact details and the content of your enquiry in the relevant email or telephone system. The project enquiry form is currently a preview: its contents are not transmitted or stored by us.

Our hosting provider processes technical and security data, which may include IP address, browser information, time and requested page. Separately, Vercel Web Analytics records anonymous, aggregated page-view information without third-party cookies or personal identifiers. Analytics events are not stored with IP addresses.

Account, guide-access and purchase data is processed to provide the service or take steps at your request before entering into a contract. Payment references and status changes are used to confirm purchases and handle refunds, disputes and access rights. Required transaction and accounting records are processed to comply with legal obligations.

Enquiries are processed only to respond to you, follow up the dialogue and assess a possible assignment, based on our legitimate interest in communicating with prospective and existing customers. We consider this limited use expected and minimally intrusive. Technical logs and anonymous statistics are used for security, fault diagnosis and improvement based on our legitimate interests in operating a secure and useful website.

We do not sell personal data, use it for behavioural advertising or make decisions about you solely by automated means.

Vercel hosts the website and provides privacy-focused, aggregated web analytics. Supabase provides authentication, database and private audio storage. Stripe receives a Supabase user identifier, guide identifier, checkout and payment references, payment status and the payment details needed to process digital-guide purchases. Stripe may also notify us about refunds or disputes. A2B Design Partner AS does not receive full card details.

The providers process data under their own terms and, where relevant, as processors on our instructions. Stripe retains information under its own retention obligations and privacy notice. Data may be processed outside Norway or the EEA. Where required, transfers are protected by approved transfer mechanisms such as the European Commission’s standard contractual clauses.

Account and guide-access information is kept while needed to provide access and document the purchase, unless you request deletion and no legal obligation requires continued storage. Payment and accounting documentation is retained for the period required by Norwegian law.

Enquiries that do not lead to an assignment are normally deleted within 12 months after the dialogue ends. Project and customer records may be retained longer where needed to perform an agreement, document professional work or handle legal claims.

Technical and analytics data follows the retention periods configured by the relevant provider and is not retained by us longer than needed for security, operation and aggregate reporting.

You may request access, correction, deletion, restriction or portability where the conditions in data-protection law are met. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time.

We may need to verify your identity before answering a request. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet).

We use access controls, encrypted connections and restricted server-side service credentials to protect data. No online service can guarantee absolute security.

The website and paid services are not directed at children, and we do not knowingly collect children’s personal data. We update this notice when the services or processing change and show the latest revision date above.