Privacy Policy

Last updated: 15th January 2026

Data Controller Information

timecryw AS is the data controller responsible for your personal data. We are registered in Norway with registration number 369852147 and VAT number NO367412586MVA. Our registered address is Torgallmenningen 143, 0119 Oslo, Norway.

Data Collection

We collect personal data when you interact with our website and services. The data we collect includes information you provide directly to us and information collected automatically through your use of our website. This data collection is essential for providing our data quality management services and maintaining effective communication with our clients.

Personal information we may collect includes:

• Contact details (name, email address, phone number)
• Company information and job title
• Communication preferences
• Website usage data and analytics information
• Technical information such as IP address and browser details

How We Use Your Information

We use your data to provide our data quality management services, respond to enquiries, and improve our website functionality. The use of your data is based on legitimate business interests, contractual necessity, and your consent where required by law.

Specifically, we use your information to:

• Respond to your enquiries and provide customer support
• Deliver our data quality management services
• Send you relevant information about our services
• Improve our website and service offerings
• Comply with legal obligations and regulatory requirements
• Protect our business interests and prevent fraud

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for specific processing activities
• Contract: Where processing is necessary for performing a contract with you
• Legitimate Interests: Where we have legitimate business interests that don't override your rights
• Legal Obligation: Where processing is required to comply with legal requirements

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and delivering our services, subject to appropriate confidentiality agreements.

We may share your data with:

• Technical service providers for website hosting and maintenance
• Analytics providers for website performance monitoring
• Professional advisors including lawyers and accountants
• Regulatory authorities when required by law

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy or as required by law. Contact information is typically retained for seven years after our last interaction, whilst website analytics data is retained for 26 months. We regularly review our data retention practices to ensure compliance with applicable regulations.

Your Rights

Under GDPR and applicable privacy laws, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for specific processing activities

To exercise any of these rights, please contact us using the information provided below.

International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe we have not handled your personal data in accordance with applicable law.

Norwegian Data Protection Authority:
Website: www.datatilsynet.no
Email: postkasse@datatilsynet.no