Privacy Policy
Effective Date: 1 April 2026 | Last Updated: 27 September 2026
Our Commitment to Privacy
NordicCreast ("we," "us," "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with our website and services.
We comply with the General Data Protection Regulation (GDPR), the European Privacy Directive, and the Norwegian Personal Data Act (Personvernloven). If you have questions about our privacy practices, please contact us at contact@nordiccreast.com.
1. Information We Collect
1.1 Contact Form Information
When you submit our contact form, we collect: name, email address, subject line, and message content. This information is used solely to respond to your inquiry and provide our concierge services.
1.2 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address and device identifiers
- Browser type, operating system, and referrer URL
- Pages visited, time spent, and interaction patterns
- Geographic location (approximate, from IP)
1.3 Cookies and Tracking Technologies
We use cookies to enhance your experience and understand website usage. Specifically:
- Affiliate Networks: Our affiliate links pass through our own /go/ redirect, which sets no cookie. The network that receives the click (CJ, Impact, Rakuten Advertising, Awin, Tradedoubler or AddRevenue) records it and may set a cookie on its own domain so that a resulting purchase can be credited to us. After you click Accept, the Impact and Rakuten Advertising tags also load on our pages.
- Analytics: Google Analytics 4 measures how the site is used. It runs in Consent Mode: until you accept cookies it sends cookieless measurement signals and stores nothing on your device; analytics cookies (such as _ga) are set only after you click Accept.
- Essential Cookies: Required for basic website functionality.
2. How We Use Your Information
We use collected information for:
- Responding to your inquiries and providing concierge services
- Sending you confirmation emails and service updates
- Improving website functionality and user experience
- Analyzing website traffic and usage patterns
- Compliance with legal obligations
- Fraud prevention and security
- Affiliate partner engagement tracking (with cookie consent where required)
3. Legal Basis for Processing (GDPR)
Under the GDPR, we process personal data based on:
- Contractual Necessity: Processing contact information to fulfill your service requests
- Legitimate Interests: Improving our services, cookieless website measurement, and fraud prevention
- Consent: Analytics and affiliate-attribution cookies, which load only after you click Accept
- Legal Compliance: Meeting regulatory and legal requirements
4. Data Retention
Contact Form Data
We retain contact submissions for up to 2 years to maintain service records and respond to inquiries.
Affiliate Cookies
We set no affiliate cookie of our own. A cookie set by an affiliate network follows that network's own cookie period.
Analytics Data
Google Analytics data is kept for the retention period set in our Google Analytics property, after which Google deletes it.
5. Data Sharing and Transfers
We do not sell, rent, or lease your personal data. We may share information with:
- Service Providers: Email delivery (Resend), analytics (Google Analytics 4) and the affiliate networks named in section 1.3.
- Legal Obligations: When required by law enforcement or regulatory authorities.
- Business Transfers: In the event of merger, acquisition, or sale of assets, user data may be transferred as part of due diligence.
6. Your Data Rights (GDPR & Norwegian Law)
Under GDPR and the Norwegian Personal Data Act, you have the right to:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete personal data.
Right to Erasure ("Right to Be Forgotten")
Request deletion of your personal data, subject to legal obligations.
Right to Restrict Processing
Request that we limit how we use your data.
Right to Data Portability
Request your data in a structured, portable format.
Right to Object
Object to certain types of data processing, including marketing.
Right to Lodge a Complaint
Contact the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no
7. Data Security
We implement industry-standard security measures:
- HTTPS encryption for all data in transit
- Secure headers including Content-Security-Policy and X-Frame-Options
- Rate limiting on sensitive endpoints (contact form)
- Restricted cookie attributes (HttpOnly, Secure, SameSite)
8. Third-Party Services
Resend (Email Service)
We use Resend to send confirmation emails. Your email address is processed only to deliver service communications. See Resend's Privacy Policy
Google AdSense (Advertising)
This site has applied to Google AdSense. Where Google ads are shown:
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
- You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info.
- How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.
Google Analytics
We use Google Analytics 4 in Consent Mode to measure website performance and user engagement; analytics cookies are set only after you click Accept. See Google's Privacy Policy
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will delete it promptly.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or prominent notice on our website. Your continued use of our services constitutes acceptance of the updated policy.
11. Data Controller & Contact Information
Data Controller: NordicCreast Luxury Advisory
Location: Oslo, Norway
For data subject requests, privacy inquiries, or to exercise your rights, contact us at:
Email: contact@nordiccreast.com
Phone: +47 23 45 67 890
Norwegian Data Protection Authority (Datatilsynet):
www.datatilsynet.no