Privacy Policy

This Privacy Policy describes how nebulorix AS ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website, use our services, or interact with our business automation platforms. We are committed to protecting your privacy and ensuring transparency about our data practices.

Data Controller Information

nebulorix AS is the data controller for the personal information we collect and process. Our contact details are:

• Company: nebulorix AS
• Registration Number: 794613258
• Address: Torggata 93, 0146 Oslo, Norway
• Email: privacy@nebulorix.world
• Phone: +47 21478212

Data We Collect

We collect various types of personal data to provide and improve our business automation services. The data we collect includes information you provide directly to us, information collected automatically through your use of our services, and information from third-party sources where legally permitted.

Information You Provide

We collect personal information that you voluntarily provide to us, including:

• Contact information (name, email address, phone number, company name)
• Professional information (job title, industry, business requirements)
• Communication preferences and enquiry details
• Account information for our platforms and services
• Technical specifications and integration requirements
• Feedback, testimonials, and support requests

Automatically Collected Information

When you visit our website or use our services, we automatically collect certain information:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, interaction patterns)
• Technical logs and performance metrics
• Location information (country/region based on IP address)
• Referral sources and marketing attribution data

How We Use Your Information

We use the personal data we collect for various business purposes, all aimed at providing excellent service and improving our automation platforms. Our use of your data is based on legitimate business interests, contractual necessity, legal obligations, and your consent where required.

Service Provision

We use your information to:

• Provide and maintain our business automation platforms
• Process your enquiries and service requests
• Deliver customer support and technical assistance
• Configure and customise our platforms to your requirements
• Process payments and manage billing
• Communicate important service updates and changes

Business Operations

We use your data for legitimate business operations including:

• Analysing usage patterns to improve our services
• Developing new features and automation capabilities
• Conducting market research and business analysis
• Managing our customer relationships
• Ensuring security and preventing fraud
• Complying with legal and regulatory requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy, which explains the types of cookies we use, their purposes, and how you can control them.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for specific processing activities
• Contract: Where processing is necessary to perform our services or enter into a contract
• Legitimate Interests: Where we have legitimate business interests that don't override your rights
• Legal Obligation: Where we must process data to comply with legal requirements

Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your data in the following circumstances:

• With service providers who assist us in delivering our services
• With business partners for joint service delivery (with your consent)
• To comply with legal obligations or respond to lawful requests
• To protect our rights, property, or safety, or that of others
• In connection with business transfers or corporate restructuring

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses, or other approved mechanisms under GDPR.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention periods vary depending on the type of data and the purpose for processing:

• Customer account data: For the duration of the relationship plus 7 years
• Marketing data: Until you withdraw consent or request deletion
• Website analytics: Up to 26 months
• Legal and compliance records: As required by applicable law

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us at privacy@nebulorix.world or +47 21478212. We will respond to your request within one month, though this may be extended in complex cases.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response and breach notification procedures

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Supervisory Authority

If you have concerns about our processing of your personal data that we cannot resolve, you have the right to lodge a complaint with the relevant supervisory authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet).

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

• Email: privacy@nebulorix.world
• Phone: +47 21478212
• Post: nebulorix AS, Torggata 93, 0146 Oslo, Norway

We are committed to addressing your privacy concerns and will respond to your enquiries promptly and professionally.