This policy explains what personal data this website collects, why, and what you can do about it. It was last updated on 29 September 2026.

Who is responsible

North Degrees Norway (NDI Norway) is the data controller for this website and for enquiries sent through it.

North Degrees Norway
Storgaten 48
4319 Sandnes
Norway
info@northdegrees.com

Because we are established in Norway, this policy follows the General Data Protection Regulation as it applies through the Norwegian Personal Data Act.

What we collect

When you send us an enquiry

The contact form asks for your name, your email address, your company and the type of project you are enquiring about. All four are required, because without them we cannot reply usefully. You can also describe your project, which is optional. Before submitting, you confirm that you have read this policy.

When you submit the form, the enquiry is emailed to us and a copy is stored in this website’s database. The stored record also carries the date and time and the IP address the form was sent from, which our form software records to help identify automated abuse.

When you simply read the site

If you accept statistics cookies, we use Google Analytics to see which pages get read, roughly where visitors are in the world, and which site sent them to us. It runs under Google’s consent mode, which holds the measurement tags back until you have answered the banner — decline, and nothing is sent to Google at all. We use no advertising and no social media tracking, and we embed no content from other platforms.

Whichever way you answer the banner, we store a cookie recording your choice, so that we do not ask again on every page. Google Analytics sets further cookies only if you accepted statistics. Our Cookies page lists them in full.

Separately, our web host keeps standard server logs of requests to the site, including IP addresses. These are a normal part of running and securing a server rather than something we analyse.

Why we are allowed to process it

We handle enquiries on two grounds. Where you are asking about working with us, the processing is necessary to take steps at your request before entering into a contract. Otherwise we rely on our legitimate interest in receiving and answering business enquiries addressed to us — an interest we consider proportionate, since you chose to contact us and we ask for nothing beyond what a reply requires.

The tick box on the form confirms you have read this policy. It is not the legal basis for the processing, and withdrawing it would not oblige us to ignore an enquiry you had already sent — though you can ask us to erase it, as set out below.

Server logs and the consent cookie rest on our legitimate interest in keeping the site running, secure, and compliant with the rules on cookies.

Google Analytics rests on your consent, given in the cookie banner. You can withdraw it at any time through cookie settings. Withdrawing stops any further measurement; it does not erase what was collected before, though you can ask us to have that deleted as well.

Who sees it

Enquiries sent through this website are handled by our Norway office. We do not sell personal data, and we do not share it for anyone else’s marketing.

Three suppliers process data on our behalf, under contract and on our instructions only: the company that hosts this website, the provider that carries our email, and Google, which provides the analytics described above. None of them uses your data for its own purposes.

Our contracting party for analytics is Google Ireland Limited, but Google may process the data on servers outside the EEA, including in the United States. Those transfers are covered by the European Commission’s Standard Contractual Clauses together with the additional safeguards set out in Google’s data processing terms.

How long we keep it

We keep an enquiry for as long as we need it to deal with that enquiry and anything that follows from it, then delete it. Oil and gas procurement runs slowly and an enquiry can turn into a project long after the first email, which is why we do not set a short fixed period. If an enquiry becomes a contract, the records that belong to that contract are kept under the rules that apply to business records, not under this policy.

Your cookie choice is remembered for 180 days, after which the banner asks again. Analytics measurement data is deleted by Google 14 months after it is collected — the longest of the two periods Google offers, chosen deliberately because the enquiries this site generates take a long time to turn into anything.

Your rights

You can ask us for a copy of the personal data we hold about you, to correct it if it is wrong, or to delete it. You can ask us to restrict what we do with it, object to our relying on legitimate interest, or receive what you gave us in a portable form.

Write to info@northdegrees.com and we will respond within one month. There is no charge.

If you think we have handled your data badly, please tell us first so that we can put it right. You also have the right to complain to the Norwegian Data Protection Authority, Datatilsynet, at datatilsynet.no.

Keeping it safe

The site is served over an encrypted connection, access to the administration area is limited to named accounts, and the software behind it is kept up to date. No website can promise perfect security, but we do not collect more than we need, which is the most effective protection there is.

Changes

If we change how this site handles personal data, we will update this page and change the date at the top. Material changes will be described here rather than made quietly.

Contact

Questions about this policy, or about a request under it, go to info@northdegrees.com, or by post to North Degrees Norway, Storgaten 48, 4319 Sandnes, Norway.