Privacy policy

The data controller for personal data processed in NordLeads’ business is NordLeads.

Contact: email info@nordleads.no, phone +47 93 61 01 88, website nordleads.no. Organisation number is provided on request in connection with contracts or invoices.

This policy applies when you visit our websites, contact us, use our chat widget, book a meeting, or are a customer using our platform (dashboard) and related services.

If you are a business customer and use NordLeads to communicate with your own customers (for example via a chatbot on your website), you are generally the controller of personal data relating to your end users. NordLeads processes such data as a processor on your behalf, in accordance with our agreement and data processing agreement.

Contact and enquiries: name, email address, phone number, company name, message content, and other information you voluntarily provide in forms or email.

Account and customer relationship: login details, profile and company data, contract and billing information, platform usage logs, and technical identifiers required for operations and support.

Chat and AI features: message content, technical metadata (such as timestamps and session IDs), and information you enter in the conversation. AI-driven parts of the service are delivered under NordLeads’ responsibility, with technical processing that is contractually defined and security-assessed (see section 8).

Website visits: IP address, browser type, device and screen information where technically necessary or permitted, pages visited, and referring URL where relevant for analytics.

We do not ask for special categories of personal data (such as health, religion, trade union membership) via our forms. Please do not send us such data unless strictly necessary and agreed in writing in advance.

To deliver and improve our services, provide customer support and security (contract with you as a customer, legitimate interests in operations and security, GDPR Art. 6(1)(b) and (f)).

To respond to enquiries and follow up with potential customers (legitimate interests and/or steps prior to entering into a contract, Art. 6(1)(b) and (f)).

Marketing by email or SMS where consent is required (consent, Art. 6(1)(a) and applicable marketing law). You may withdraw consent at any time.

Optional analytics on the marketing part of the website after consent (consent, Art. 6(1)(a)); see also our cookie information.

Accounting, invoicing, and legal claims (legal obligation and legitimate interests, Art. 6(1)(c) and (f)).

Some of our services rely on language models and other AI to generate answers, summaries, or suggestions. Processing is performed to deliver the service you requested or as part of the agreement with a business customer.

We recommend that you do not submit trade secrets or unnecessary personal data in open chat fields. Content may be logged for quality, security, and support within the scope of our agreement and this policy.

We retain personal data for as long as necessary for the purpose and as permitted by law.

Contact enquiries without a subsequent customer relationship are generally deleted no later than 24 months after the last contact, unless longer retention is necessary for disputes or documentation.

Customer data is retained in accordance with the contract, accounting law, and other applicable requirements, and is deleted or anonymised when the purpose ceases and retention is no longer required.

Technical logs may have shorter retention periods and are anonymised where possible.

You have the right of access, rectification, erasure, restriction of processing, data portability (where applicable), and the right to object to processing based on legitimate interests, under GDPR Articles 15–22.

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact info@nordleads.no. We normally respond within one month. We may ask for proof of identity where needed to prevent unauthorised access.

You may lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no) if you believe processing is unlawful.

NordLeads delivers the services and is accountable to you. For operations, security, storage, authentication, messaging, payment facilitation, analytics for stability and improvement, and technical components such as AI inference, we use carefully selected sub-processors who process personal data on our behalf under data processing agreements and our instructions.

Sub-processors only receive access to data necessary for their purpose. An up-to-date list of sub-processors who process personal data in your customer relationship may be documented in the data processing agreement and is available on request at info@nordleads.no. Material changes are notified in line with the agreement.

Some processing may take place outside the EU/EEA (including the USA). We then apply lawful transfer mechanisms, such as the EU Commission Standard Contractual Clauses (SCCs) and/or the EU–US Data Privacy Framework where applicable, together with technical and organisational measures.

We use cookies and similar technologies as described on our cookie information page. There you will also find information about consent for optional analytics on the marketing part of the website.

Our services are aimed at businesses and adults in a professional context. We do not knowingly collect personal data from children under 16. Contact us if you believe we have received such data and we will delete it.

We implement technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including encryption where appropriate, access control, and data minimisation.

We may update this policy when our practices or regulations change. The current version is always published on this page with the “last updated” date at the top.

Privacy questions: info@nordleads.no or phone +47 93 61 01 88.