Privacy Policy

Data Controller Information

The data controller for your personal information is:

Data We Collect

We collect various types of personal data to provide and improve our services. The data collection includes information you provide directly to us and information we collect automatically when you use our website.

Information You Provide

• Contact Information: Name, email address, phone number, company name, and website URL when you submit enquiries or request consultations
• Communication Data: Messages, feedback, and correspondence when you contact us through forms, email, or phone
• Consultation Data: Information about your business, SEO needs, current tools, and objectives shared during consultation sessions
• Newsletter Data: Email address and preferences when you subscribe to our newsletter

Information We Collect Automatically

• Website Usage Data: Pages visited, time spent on pages, click patterns, and navigation behaviour
• Technical Data: IP address, browser type and version, device information, operating system, and screen resolution
• Cookie Data: Information collected through cookies and similar tracking technologies as detailed in our Cookie Policy
• Analytics Data: Website performance metrics, user interactions, and traffic sources through analytics services

How We Use Your Information

We use the personal data we collect for various purposes related to providing our services and improving your experience. Our use of your data is always based on a lawful basis under GDPR.

Primary Uses

• Service Provision: To provide consultation services, respond to enquiries, and deliver requested information about SEO tools
• Communication: To respond to your messages, provide customer support, and send service-related notifications
• Consultation Delivery: To prepare for and conduct consultation sessions, provide personalised recommendations, and follow up on our services
• Website Improvement: To analyse website usage, improve user experience, and optimise our content and services

Marketing and Communications

• Newsletter: To send our newsletter with SEO tool updates, industry insights, and company news (with your consent)
• Service Updates: To inform you about new services, consultation offerings, and relevant business updates
• Follow-up: To follow up on consultation sessions and provide additional resources or support

Legal and Compliance

• Legal Compliance: To comply with applicable laws, regulations, and legal obligations
• Business Records: To maintain accurate business records and financial documentation
• Dispute Resolution: To resolve disputes, investigate complaints, and protect our legal rights

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please see our Cookie Policy, which forms part of this Privacy Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities, such as newsletter subscriptions or marketing communications
• Contract Performance: When processing is necessary to perform our consultation services or respond to your service enquiries
• Legitimate Interests: For website analytics, business development, and improving our services, where our interests do not override your privacy rights
• Legal Obligation: When we need to comply with legal requirements, such as tax obligations or regulatory compliance

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

Service Providers

• Website Hosting: Our web hosting providers who store and serve our website content
• Email Services: Email service providers for delivering newsletters and business communications
• Analytics Providers: Google Analytics and similar services to understand website usage and improve user experience
• Payment Processors: Secure payment processing services for consultation fees (when applicable)

Legal Requirements

We may disclose your information when required by law, such as in response to court orders, legal processes, or government requests, or to protect our rights, property, or safety.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Our data retention periods are as follows:

• Contact Enquiries: Retained for 3 years from last contact to maintain business records and provide ongoing support
• Consultation Records: Retained for 7 years for business and tax compliance purposes
• Newsletter Subscriptions: Retained until you unsubscribe or request deletion
• Website Analytics: Anonymised data retained for up to 26 months for analysis purposes
• Cookie Data: Varies by cookie type, typically 30 days to 2 years as detailed in our Cookie Policy

After the retention period expires, we securely delete or anonymise your personal data unless longer retention is required by law.

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data. You can exercise these rights by contacting us at privacy@simplegridhubum.world or +47 55 247 542.

Your Rights Include

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing activities that require your consent

Response Time

We will respond to your requests within one month of receipt. In complex cases, we may extend this period by an additional two months and will inform you of any delay.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: Data transmission and storage encryption using industry-standard protocols
• Access Controls: Restricted access to personal data on a need-to-know basis
• Regular Updates: Regular security updates and patches for all systems and software
• Staff Training: Regular training for staff on data protection and security best practices
• Incident Response: Procedures for detecting, investigating, and responding to security incidents

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

International Data Transfers

As a Norwegian company operating within the European Economic Area (EEA), we primarily process your data within the EEA. When we use service providers outside the EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses approved by the European Commission
• Certification schemes and codes of conduct

Children's Privacy

Our services are intended for business use and are not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email if you have subscribed to our newsletter
• Display a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Contact Information

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us using the following information:

Supervisory Authority

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe we have not handled your personal data in accordance with applicable law:

Datatilsynet
Website: www.datatilsynet.no
Phone: +47 22 39 69 00