Legal

Privacy Policy

Last updated: March 2026  ·  Effective date: March 2026

This Privacy Policy explains how ENK Nalbandian EG, trading as nevne (org.nr. 931 670 921, Grenseveien 21, 4313 Sandnes, Norway), collects, uses, and protects your personal data when you visit nevne.co or interact with our services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (personopplysningsloven), and applicable Norwegian marketing law.

1. Data controller

The data controller responsible for your personal data is:

2. What data we collect and why

We collect personal data only when necessary and always with a lawful basis under GDPR Article 6.

Data collected	How	Purpose	Legal basis
Name, email, message	Contact form on site	Responding to enquiries	Legitimate interest (Art. 6(1)(f))
Name, email, meeting time	Calendly booking	Scheduling discovery calls	Legitimate interest (Art. 6(1)(f))
Email address	Mailchimp sign-up	Sending marketing emails and newsletters	Consent (Art. 6(1)(a))
IP address, browser data, pages visited	Google Analytics	Understanding site usage and improving content	Consent (Art. 6(1)(a))
Browsing behaviour, ad interactions	Meta Pixel (Facebook/Instagram)	Measuring ad performance, retargeting	Consent (Art. 6(1)(a))
Professional profile data	LinkedIn Insight Tag	Measuring LinkedIn campaign performance	Consent (Art. 6(1)(a))

We do not sell your personal data. We do not use your data for automated decision-making or profiling that produces legal effects.

3. Cookies and tracking

Our website uses cookies and similar tracking technologies. When you first visit the site, you will be asked for your consent before any non-essential cookies are placed.

Essential cookies

These are required for the site to function and cannot be disabled. They do not track you across other websites.

Analytics cookies (requires consent)

Google Analytics — placed by Google LLC. Data may be transferred to the US under Google's Standard Contractual Clauses. You can opt out via Google's opt-out tool.

Marketing cookies (requires consent)

• Meta Pixel — placed by Meta Platforms Ireland Ltd. Used for ad measurement and retargeting on Facebook and Instagram.
• LinkedIn Insight Tag — placed by LinkedIn Ireland Unlimited Company. Used for campaign analytics and retargeting on LinkedIn.

You can withdraw your consent at any time by clicking "Cookie settings" in the site footer, or by clearing cookies in your browser.

4. Third-party processors

We share data with the following third-party service providers who process data on our behalf. All processors are bound by data processing agreements (DPAs) in accordance with GDPR Article 28.

Processor	Purpose	Location
Calendly LLC	Meeting scheduling	USA (SCCs apply)
Google LLC	Analytics (Google Analytics)	USA (SCCs apply)
Meta Platforms Ireland Ltd	Advertising and analytics	Ireland / USA (SCCs apply)
LinkedIn Ireland Unlimited Company	Advertising and analytics	Ireland / USA (SCCs apply)
Mailchimp (Intuit Inc.)	Email marketing	USA (SCCs apply)
Netlify Inc.	Website hosting	USA (SCCs apply)

SCCs = Standard Contractual Clauses approved by the European Commission for lawful data transfers outside the EEA.

5. How long we keep your data

• Contact form enquiries — up to 2 years, or until the enquiry is resolved
• Client project data — up to 5 years for accounting and legal purposes
• Email marketing list — until you unsubscribe or withdraw consent
• Analytics data — as per the retention settings of each platform (typically 14 months for Google Analytics)

6. Your rights under GDPR

As a data subject, you have the following rights. To exercise any of them, contact us at hello@nevne.co. We will respond within 30 days.

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — ask us to limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interest or for direct marketing
• Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of prior processing

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no or by post: PO Box 458 Sentrum, 0105 Oslo, Norway.

7. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular review of our data practices.

8. Children's privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "last updated" date at the top of this page will indicate when changes were made. For significant changes, we will notify you by email where we have your contact details.