Privacy Policy

Thirdlinks is run by the sole proprietorship (enkeltpersonforetak) Thirdlinks Spyros, org. no. 938 631 417, Selma Ellefsens vei 6, 0581 Oslo, Norway. Thirdlinks Spyros is the data controller for the processing described here. Contact: team@thirdlinks.no.

When you use our contact form, project request form, booking form, or free-audit form, we collect the information you provide — such as name, email, company, phone, message, and website URL. In the project request form you also tell us the type of solution you need, your budget, timeline and a description of the project. We also process limited technical data needed to deliver the website securely. To stop spam and abuse of the forms, we limit the number of submissions using a keyed hash of your IP address. The IP address itself is not stored.

We use the data to respond to enquiries, prepare quotes, deliver our services, and follow up on the relationship. The legal basis is the performance of, or steps prior to, an agreement, and our legitimate interest in responding to enquiries.

We use these data processors, each under a data processing agreement: Convex (database, data stored in the EU), Cloudflare (website hosting, and spam protection for the forms with Cloudflare Turnstile) and Resend (sending email).

Where a processor handles data outside the EU/EEA, the transfer is based on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Enquiries and project, booking, package and audit requests are deleted 24 months after our last contact with you, unless you have become a customer. Customer data is kept for as long as the customer relationship lasts.

Accounting documents, such as invoices, are kept for 5 years after the end of the financial year, as required by the Norwegian Bookkeeping Act (bokføringsloven).

Emails we send you from our admin system are deleted 24 months after they were sent, unless you are a customer. If an email to you bounces or is reported as spam, we add the address to a suppression list so that we do not send to it again. We keep that entry until you ask us to remove it.

Logs of actions in our admin system are deleted after 24 months. Deletion runs automatically every day.

You have the right to access, rectify, and erase your data, and to object to or restrict processing. You may also complain to the Norwegian Data Protection Authority (Datatilsynet). To exercise your rights, contact team@thirdlinks.no.

We use a single functional cookie to remember that you closed the cookie notice. If you close the language suggestion or switch language, that choice is stored only locally in your browser. We do not use tracking or advertising cookies unless this policy is updated to say otherwise.

Questions about privacy can be sent to team@thirdlinks.no.