Privacy Policy

1. Who we are (Data Controller)

The data controller responsible for your personal data is listed below.

2. What personal data we collect

We collect only what we need to run the studio and do the work. Depending on how you deal with us, that can include the following.

• Contact details such as name, email address, phone number, and company name that you provide through our contact form or by email.
• Project information, meaning any information you share with us in the course of a project or enquiry.
• Technical & usage data such as IP address, browser type, device information, referring pages, and how you use our website, collected automatically through cookies and similar technologies.

3. How we use your data and our legal basis

The GDPR says we need a lawful basis for every purpose we use your data for. Here is ours, purpose by purpose.

• To respond to enquiries and communicate with you about a project, based on our legitimate interest in answering the people who contact us, or on taking steps at your request before entering into a contract.
• To provide our services (design, development, hosting, and SEO), based on the performance of a contract with you.
• To operate and improve our website, based on our legitimate interest in maintaining a secure, functional, and effective website. Non-essential cookies are used only with your consent.
• To comply with legal obligations, for example keeping accounting records as required by Norwegian law.

4. Cookies

Our site uses cookies. The essential ones keep the site working and don't need your permission. We only set analytics or marketing cookies if you agree. You choose when you first arrive, and you can change your mind whenever you like.

You can also manage cookies in your browser. Block some and parts of the site may stop behaving as they should.

5. Sharing your data

We never sell your data. We share it only when there's a genuine need, and only with the following.

• Service providers (data processors) that help us operate, for example hosting, email, and analytics providers, who process data only on our instructions and under a data processing agreement.
• Public authorities where we are legally required to do so.

A current list of our main sub-processors is available on request from ask@webrise.no.

6. International transfers

If one of our providers handles your data outside the EU/EEA, we make sure it's still properly protected, usually through the European Commission's Standard Contractual Clauses.

7. How long we keep your data

We hold on to your data only as long as we actually need it, or as long as the law says we must. We keep enquiry and project emails while we're working together and for a reasonable while after. Accounting records we keep for as long as Norwegian bookkeeping law requires.

8. Your rights

The GDPR gives you these rights.

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data (“right to be forgotten”).
• Restrict or object to our processing of your data.
• Receive your data in a portable format (data portability).
• Withdraw consent at any time, where processing is based on consent.

Want to use any of these? Email us at ask@webrise.no and we'll sort it out within the GDPR's time limits.

9. Complaints

If you think we've mishandled your data, you can complain to the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no. We'd rather you came to us first so we can put it right, but the choice is yours.

10. Changes to this policy

We'll update this page now and then. The “Last updated” date up top tells you when we last changed it, and we'll flag anything major on the site.

11. Contact us

Questions about this policy or how we handle your data? Email us at ask@webrise.no, and a real person will get back to you.