Privacy

Your data, handled with the same care as our brands.

This policy explains what personal data Concept Agency AS collects through this website, why we collect it, and the rights you hold under the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.

01 — Who we are

Data controller

Concept Agency AS, Norway, is the controller of personal data collected through conceptagency.no. The company is represented by Erik Spade, Managing Partner.

Questions about this policy or your data: info@conceptagency.no or +47 934 64 432.

02 — What we collect

Personal data we process

When you submit a contact form on this site, we collect the details you choose to provide: your name, company or store name, email address, and the content of your message.

We collect nothing in the background. This site uses no analytics, no advertising trackers, and no marketing cookies. Our hosting provider may keep standard technical server logs (such as IP addresses) for security and operational purposes.

03 — Why we collect it

Purpose and legal basis

We use your contact details for one purpose: to respond to your enquiry and, where it leads further, to establish a business relationship. The legal basis is GDPR Article 6(1)(b) — steps taken at your request prior to entering into a contract — and Article 6(1)(f), our legitimate interest in responding to business enquiries.

We do not use your data for marketing without your consent, and we never sell or share it for commercial purposes.

04 — Where it goes

Processors and transfers

Form submissions are delivered to us through Zapier Inc. (workflow automation) and Slack Technologies (internal notification), and our correspondence runs on Google Workspace. The website is hosted by Netlify Inc. Typefaces are served by Google Fonts, which involves a technical transfer of your IP address to Google when the page loads.

These providers act as data processors and may process data in the United States. Transfers are safeguarded under the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses.

05 — How long we keep it

Retention

We keep enquiry data only as long as needed to handle your enquiry and any business relationship that follows. Enquiries that do not lead to a relationship are deleted within 12 months. Accounting and contractual records are retained as required by Norwegian law.

06 — Your rights

Access, correction, deletion

You may at any time request access to the personal data we hold about you, ask us to correct or delete it, restrict or object to our processing, or receive your data in a portable format. Write to info@conceptagency.no — we respond within 30 days.

If you believe we have handled your data improperly, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.

Last updated: June 2026