Privacy Policy for Nordlys Hjemmevask AS

Effective date: 2026-05-05

1. Introduction and company information

This Privacy Policy explains how Nordlys Hjemmevask AS collects, uses, stores, shares, and protects personal data in connection with our home-cleaning services, customer communications, website use, booking management, invoicing, and related operations.

Data controller: Nordlys Hjemmevask AS
Address: Nordlys Hjemmevask AS, Torggata 12, 0181 Oslo, Norway
Email: [email protected]
Phone: +47 22 45 78 31

We process personal data in accordance with applicable privacy laws and principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. Data collection and processing

Nordlys Hjemmevask AS may collect and process the following categories of personal data:

• Identification and contact information: name, address, email address, telephone number, and similar contact details.
• Booking and service information: service type, cleaning frequency, preferred dates and times, access instructions, and service notes.
• Billing and payment information: invoice details, payment status, and transaction-related information.
• Communication data: emails, phone calls, messages, complaints, feedback, and customer support correspondence.
• Technical data: IP address, device information, browser type, and usage data when you visit our website or digital services.
• Special instructions relevant to service delivery: information you choose to provide about your home, preferences, or access arrangements.

We generally collect personal data directly from you, but may also receive data from third parties where necessary for service delivery, payment processing, or legal compliance.

3. Purpose of data processing

Nordlys Hjemmevask AS processes personal data for the following purposes:

• To provide and manage home-cleaning services.
• To handle bookings, scheduling, cancellations, and customer support.
• To communicate with customers regarding services, changes, reminders, and follow-up.
• To issue invoices, process payments, and manage accounting records.
• To improve our services, website, and customer experience.
• To comply with legal obligations, including accounting, tax, and record-keeping requirements.
• To prevent fraud, misuse, and unauthorized access.
• To establish, exercise, or defend legal claims where necessary.

4. Legal basis for processing

We only process personal data where we have a valid legal basis. Depending on the context, the legal basis may include:

• Performance of a contract: when processing is necessary to provide cleaning services, manage bookings, or handle payments.
• Legal obligation: when we must process data to comply with applicable accounting, tax, consumer, or other legal requirements.
• Legitimate interests: when processing is necessary for our legitimate business interests, such as service improvement, customer communication, fraud prevention, and internal administration, provided these interests are not overridden by your rights and freedoms.
• Consent: where you have given clear consent for specific processing activities, such as certain marketing communications or optional data uses.

5. Data sharing and third parties

Nordlys Hjemmevask AS may share personal data with third parties only when necessary and appropriate for the purposes described in this policy. Such third parties may include:

• IT and hosting providers: for website hosting, email services, data storage, and system maintenance.
• Payment service providers and banks: for payment processing and financial administration.
• Accounting and auditing providers: for bookkeeping, invoicing, and compliance purposes.
• Professional advisers: such as lawyers, insurers, and consultants where needed.
• Public authorities: where disclosure is required by law or a lawful request.

We require third parties that process personal data on our behalf to protect the data and to use it only according to our instructions and applicable law.

6. Data transfer to third countries

If personal data is transferred outside Norway or the European Economic Area (EEA), Nordlys Hjemmevask AS will ensure that appropriate safeguards are in place in accordance with applicable privacy laws. These safeguards may include:

• an adequacy decision by the relevant authority;
• standard contractual clauses or equivalent transfer mechanisms;
• additional technical and organizational measures where necessary.

Where required, we will inform you about relevant transfer mechanisms and the protections applied.

7. Storage duration

Nordlys Hjemmevask AS stores personal data only for as long as necessary for the purposes for which it was collected, or as long as required by law.

• Customer and service data: retained for the duration of the customer relationship and thereafter for a reasonable period to handle follow-up, disputes, or legal claims.
• Accounting and tax records: retained for the period required by applicable law.
• Communication records: retained as long as necessary to manage inquiries and service issues.
• Consent-based data: retained until consent is withdrawn, unless another legal basis applies.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with our retention procedures.

8. User rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access: to obtain confirmation of whether we process your personal data and to receive a copy of that data.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request that we limit processing in certain situations.
• Right to data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.

To exercise your rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we will stop the relevant processing unless we have another lawful basis to continue. You can withdraw consent by contacting Nordlys Hjemmevask AS using the contact details below.

10. Right to complain

If you believe that Nordlys Hjemmevask AS has processed your personal data in a way that is not compliant with applicable privacy laws, you have the right to lodge a complaint with the relevant supervisory authority.

We encourage you to contact us first so that we can try to resolve your concern directly and promptly.

11. Data security

Nordlys Hjemmevask AS implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include:

• access controls and role-based permissions;
• secure storage and encryption where appropriate;
• staff confidentiality obligations and training;
• regular review of systems and security practices;
• backup and recovery procedures;
• incident response procedures for suspected data breaches.

While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure.

12. Contact information

If you have questions about this Privacy Policy or our processing of personal data, please contact:

Nordlys Hjemmevask AS
Nordlys Hjemmevask AS, Torggata 12, 0181 Oslo, Norway
Email: [email protected]
Phone: +47 22 45 78 31

13. Changes to privacy policy

Nordlys Hjemmevask AS may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs.

The updated version will be published with a revised effective date. If changes are material, we may provide additional notice where appropriate. We encourage you to review this Privacy Policy periodically.