Privacy policy
Last updated: 2 October 2026
This privacy policy explains how Blue Whale Consulting AS ("we", "us") collects and uses personal data when you visit www.bluewhale.no or contact us. We process personal data in accordance with the Norwegian Personal Data Act (personopplysningsloven) and the EU General Data Protection Regulation (GDPR).
Data controller
Blue Whale Consulting AS, Sørsletta 12b, 0756 Oslo, Norway — email contact@bluewhale.no, phone +47 46 96 59 28. We are the data controller for the personal data described in this policy.
What we collect
- When you use our contact form: your name, company (optional), email address, phone number (optional), the topic of your enquiry, any guide you ask about and the content of your message.
- When you email or call us: the information you choose to share with us.
- When you visit the website: our hosting provider processes technical data such as your IP address, browser type and the pages requested, to deliver the website and protect it against abuse. We do not use advertising or tracking cookies.
Why we use your data, and our legal basis
- To answer your enquiry and take steps before entering into an agreement, for example scheduling a consultation or providing a guide you have asked to purchase (GDPR art. 6(1)(b)).
- To deliver services and invoice you if you become a client, and to comply with our accounting and bookkeeping obligations (GDPR art. 6(1)(b) and (c)).
- To operate and secure the website (our legitimate interest, GDPR art. 6(1)(f)).
We do not sell your personal data and we do not use it for automated decision-making.
Who we share data with
We use a small number of trusted service providers that process data on our behalf under data processing agreements:
- Cloudflare, Inc. — website hosting, security and delivery of contact form messages.
- Our email delivery provider — to forward contact form messages to our inbox.
- Our email and office software provider — to store and manage our correspondence.
Some of these providers may process data outside the EEA. Where this happens, transfers are protected by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
We may also disclose personal data where required by law, for example to public authorities.
How long we keep your data
We keep enquiries for as long as needed to handle them and follow up, and normally no longer than 24 months after our last contact unless you become a client. Client and invoicing information is kept for as long as required by Norwegian bookkeeping legislation (bokføringsloven).
Cookies and analytics
The website does not set advertising or tracking cookies. If we use website statistics, we use a privacy-friendly, cookieless solution that does not identify individual visitors.
Your rights
You have the right to request access to, correction or deletion of your personal data, to restrict or object to our processing, and to data portability. Where we rely on your consent, you can withdraw it at any time. To exercise your rights, email contact@bluewhale.no.
If you believe we process your personal data unlawfully, you can lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet, or with the supervisory authority in your country.
Changes to this policy
We may update this policy from time to time. The latest version is always available on this page, with the date of the last update shown at the top.