How we use your information.

The short version: we only ask for what we need, use it for what you ask for, and don’t share it for other purposes. Here is the full picture.

Last updated 18 October 2026

Who is responsible

Nordic Web Agency is the data controller for the information you give us.

Business: Nordic Web Agency, Jessheim, Norway
Org. no.: 936 627 013 MVA
Contact: hei@nordicwebagency.no

What we collect, and when

The onboarding form. When you submit the form, we receive:

name, email and optionally a phone number, and how you’d like us to get in touch
business name, what you do, location and any website
what you need help with, and optionally language, package, timing and style
what you write in the free-text fields, links, and files you upload (for example a logo, images or a PDF)

Your answers are only sent to us when you press “Submit” and have ticked the consent box. Along the way they are only stored in your browser (not the files), so you can pick up where you left off. The draft deletes itself after 30 days, and when you submit or press “Start over”. We never see it.

The chat. The chat is an AI assistant, not a person. The messages you write are sent to the AI provider (Anthropic) to get an answer. Don’t write sensitive information in the chat, such as health details, national ID numbers or card numbers. We don’t store the conversation unless you choose to leave your contact details. Then we receive the name and contact details you wrote, what you’ve told us about the business (for example needs and approximate budget), a short summary and the conversation.

Free website check. If you write a web address in the chat, our server fetches the public front page and two files anyone can see (robots.txt and sitemap) to make the check. We don’t store the content we read. The address is only kept with us if you leave contact details in the same conversation.

Technical data. The website runs with a hosting provider, which sees the IP address and browser information in ordinary server logs. We use the IP address briefly in memory to stop spam by limiting the number of attempts. We don’t store it ourselves.

You decide about tracking. What the page needs to work is always stored. Statistics and marketing are only switched on if you say yes in the banner, and you can change your choice at any time under “Cookie settings” at the bottom of the page. Until you choose, your browser does not contact Google.

What we use it for, and why we’re allowed to

Make your preview and contact you. The basis is your consent, and that you ask us to do something before a possible agreement.
Answer what you write in the chat. The basis is your consent when you leave contact details.
Become a customer with us. Then we use the information to deliver the agreement and for bookkeeping, as the law requires.

You can withdraw your consent at any time. It’s as easy as giving it: send us an email.

Cookies and tracking

The website uses three kinds of storage. You choose in the banner shown the first time you visit.

Necessary. Your language choice, your draft in the form and a small marker for smooth page transitions. No tracking, and they cannot be switched off.
Marketing (Google Ads). Measures which ads lead to an enquiry and lets Google show more relevant ads. When you submit the form, we can then record that an ad led to the enquiry. Your browser then sends an encrypted (hashed) copy of the email address and phone number you entered, and Google uses it only to match the enquiry to the ad. Only with consent.

The basis is your consent (the Norwegian Electronic Communications Act § 3-15 and GDPR Article 6(1)(a)). Your choice is stored in your browser for 12 months, then we ask again. You can withdraw consent at any time under “Cookie settings” at the bottom of the page. Google sets its own cookies, which can last up to two years, and processes data in the USA on a basis the EU accepts.

Who processes the information for us

We use a few providers to run the service. They may only process the information on our behalf.

Hosting: Runs the website and the service that receives the form and the chat.
Email: Sends us a notification with the contents of the form, including the files you attached.
Push notification: Notifies us on the phone. The notification contains name, business and contact details.
Google: Our lead list is kept in Google Sheets, with your answers except the files.
Anthropic: The AI in the chat. The messages you write there, and the result of a website check, are sent there to get an answer.
Google Analytics and Google Ads: Statistics and ad measurement, only if you have said yes in the banner.

Some of them process data in the USA. The transfer happens on a basis the EU accepts, such as standard contractual clauses or the Data Privacy Framework. If you want to know exactly which providers we use, write to us and you’ll get the list.

How long we keep it

Enquiries and onboarding answers that don’t end in an agreement are deleted at the latest 12 months after the last contact.
If you become a customer, we keep the information for as long as the agreement lasts, and accounting records for the time the law requires.
If you want us to delete something sooner, tell us and we’ll do it.

Your rights

You can ask for access to what we hold about you, have it corrected or deleted, restrict its use, object, and get a copy you can take with you. Write to us and we’ll answer within 30 days.

If you’re not satisfied with how we’ve handled the matter, you can complain to Datatilsynet (the Norwegian Data Protection Authority).

hei@nordicwebagency.no

Security

All traffic between you and the website is encrypted. Only those working on your assignment have access to what you submit. Files you upload are not published, and they are only used for the job you asked us to do.