Privacy Policy.

1. Who this applies to

This Privacy Policy applies to visitors to dearden.no, people who submit an enquiry through the contact form, and people who contact Dearden Solutions directly about a possible project or service.

It covers personal data processed while discussing, preparing, delivering or supporting websites, hospitality consultancy and consistency work, custom dashboards, business systems and related services.

2. Data controller

The data controller for this website and general business enquiries is:

A separate data-processing agreement may be required if Dearden Solutions later operates a system or processes personal data on behalf of a client.

3. Personal data collected

Dearden Solutions aims to collect only the information reasonably needed to answer an enquiry, discuss a project and provide agreed services.

Contact form data

The website form may collect:

• your name and email address;
• your optional business/property name and website URL;
• the service you select and your privacy acknowledgment;
• the message and project details you choose to provide;
• basic submission metadata, including the submission time.

Email and direct communication

If you contact Dearden Solutions directly, information may include your contact details, business name or role, project requirements, files, examples and the communication history needed to manage the enquiry.

Technical website data

Hosting and security providers may process basic technical information so the website can load and remain secure. This can include IP address, browser and device information, access time, requested pages and server logs.

Client and project data

If you become a client, Dearden Solutions may process business contact information, website content, brand assets, project notes, requirements, feedback, invoice information and support history needed to deliver the agreed work.

Sensitive information

Do not submit passwords, financial account details, identification documents, health information, special-category data or confidential information about third parties through the general contact form unless this has been specifically requested and an appropriate arrangement is in place.

4. How data is used

Personal data may be used to:

• receive and respond to enquiries;
• understand the problem or project you describe;
• prepare proposals, estimates and practical next steps;
• deliver agreed websites, dashboards, systems or support;
• manage project communication and support history;
• maintain the website’s security and technical reliability;
• keep accounting, tax and normal business records;
• protect against spam, fraud, misuse or security issues.

Dearden Solutions does not sell personal data.

5. Legal basis

Where the GDPR applies, the legal basis depends on why the information is being processed.

6. Third-party services

Dearden Solutions uses a limited number of service providers to operate the website and normal business communication.

Netlify hosting and forms

The website is hosted on Netlify and uses Netlify Forms to receive contact submissions. Information entered into the form may be processed and stored by Netlify so the enquiry can be delivered and managed. The form also uses a hidden honeypot field intended to reduce automated spam.

Email provider

Messages and contact details are processed by the email service used to send, receive and store business email.

Exchange-rate reference data

Indicative currency conversions use dated European Central Bank reference data fetched during the build or retained in a local build cache. Your browser does not contact the ECB for rates. External source links follow the destination website’s privacy policy.

Private consistency reports

This marketing website does not host client reports or provide report authentication. Report delivery, access arrangements and any data-processing terms are agreed separately for each engagement. Public previews use synthetic or redacted information.

Website fonts

The website uses self-hosted IBM Plex Sans font files, with system-font fallbacks. Font files are served by the website’s hosting provider; your browser does not request fonts from Google Fonts or another external font provider.

7. Cookies and tracking

At the time this policy was last updated, the website is designed to operate without non-essential analytics, advertising or cross-site tracking cookies.

Front-end JavaScript supports navigation, indicative currency conversion and form submission. Your display-currency choice is saved in browser local storage only if you tick “Remember my currency”. The record contains your selected currency (EUR, GBP or NOK), a preference version and an expiry time, and is not used for tracking. The choice is remembered for up to 180 days; expired records are ignored and removed when you next use the pricing page. Untick the box to remove the saved preference, or clear it in your browser settings. The converter works without saving anything. Choices saved by the older version without explicit opt-in are removed rather than restored.

Essential technical processing may still occur through hosting, browser and security infrastructure so the website can load and function correctly.

8. How long data is kept

Personal data is kept only for as long as reasonably needed for the purpose it was collected, unless law requires a longer period.

• General enquiries: normally up to 24 months unless the enquiry becomes an active client relationship or there is a clear business reason to retain it longer.
• Client and project records: while the relationship is active and for a reasonable period afterwards for support, reference, dispute handling and business continuity.
• Accounting and invoice records: for the period required by applicable bookkeeping, tax and accounting rules.
• Technical logs: according to the operational and security practices of relevant hosting providers.

9. Sharing and transfers

Personal data is not sold. It may be shared only where reasonably necessary, including with:

• hosting, form, email and technical service providers;
• accountants, legal advisers or other professional advisers;
• public authorities when required by law;
• trusted providers involved in delivering agreed work, where relevant and appropriate.

Some providers may process information outside Norway or the European Economic Area. Where this occurs, Dearden Solutions aims to rely on recognised transfer mechanisms, contractual safeguards or provider commitments intended to support GDPR compliance.

10. Security

Reasonable steps are taken to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. These may include HTTPS, reputable hosting, account security, access controls, limited collection and avoiding unnecessary storage of sensitive information.

No website, email account or online system can be guaranteed completely secure. Avoid sending passwords or highly confidential information through the general contact form.

11. Your rights

Depending on the circumstances and applicable law, you may have the right to:

• request access to personal data held about you;
• ask for inaccurate or incomplete data to be corrected;
• request deletion where there is no continuing reason to keep the data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability where applicable;
• withdraw consent where processing relies on consent;
• complain to a data-protection authority.

To make a request, email sam@dearden.no. Identity may need to be confirmed before certain requests can be completed.

12. Complaints

Contact Dearden Solutions first if you have a concern so it can be reviewed. You may also contact the Norwegian Data Protection Authority, Datatilsynet, or another appropriate supervisory authority if you believe personal data has not been handled correctly.

13. Policy updates

This policy may be updated when services, website features, providers or legal requirements change. The current version will be published on this page with a revised update date.