Privacy Policy

This policy explains how personal data is processed in relation to this website and contact communication.

Applicable law

Processing is carried out in line with the EU General Data Protection Regulation (GDPR) and the Norway Personal Data Act.

Data categories

We may process name, email address, message content, technical logs, and cookie preference records.

Lawful basis

Data is processed based on consent, legitimate interest for secure site operations, and steps taken at user request before communication follow-up.

Retention period

Contact submissions are generally retained for up to 24 months, unless longer storage is required by legal obligations.

Data sharing

We may use trusted service providers for hosting and technical maintenance under data processing agreements. We do not sell personal data.

User rights

You may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent where relevant.

Security practices

We apply role-based access limits, software updates, and technical safeguards designed to reduce unauthorized access risk.

Complaints

If you believe processing is non-compliant, you may contact us first or lodge a complaint with Datatilsynet in Norway.

Controller contact

Bloomflex, Ustedalen 367, 3580 Geilo, Norway. Email: assist@bloomflex.world. Phone: +4747633478.