Privacy
Privacy Policy
Your privacy matters to us. Here we explain which personal data Brudevalsen collects, why we collect it, how long we keep it, and what rights you have.
Last updated: 2026-06-04
1. Data controller
Brudevalsen is the data controller for the personal data collected through this website. This means we decide why and how your data is processed.
- Brudevalsen
- Organisation number
- 123456789
- Address
- Bergen, Norge
- post@brudevalsen.no
2. What personal data we collect
When you contact us via the contact form, your enquiry is emailed to us — it is not stored in any database.
When you book a consultation, we store the details you provide in order to handle the appointment. In both cases this may include:
- Name
- Email address
- Phone number
- Wedding details: date, location and approximate number of guests
- Which services you are interested in
- Any free-text message you write to us
- For bookings: preferred date, time and meeting type (phone, video or in person)
We do not collect sensitive personal data, and we use no tracking or profiling.
3. Why we process the data (purpose and legal basis)
We process your data so we can respond to your enquiry, give you a quote and plan a possible consultation or assignment.
- For contact enquiries, the basis is our legitimate interest in replying to you and taking steps prior to a possible agreement at your request (GDPR art. 6(1)(f) and (b)).
- When you book a consultation, we process your data to carry out the appointment you request and to take steps prior to entering an agreement at your request (art. 6(1)(b)). Before you submit, you confirm that you have read this privacy policy.
- Wedding photos shown in the gallery are published only with the couple's explicit, written consent (art. 6(1)(a)). You may withdraw consent at any time — contact us and we will remove the images.
You must provide your name, email and phone so we can reply to you. Without these we cannot give you a quote.
4. Who we share the data with (data processors)
We never sell your personal data, and we do not share it with anyone other than the providers needed to run the service. These process data on our behalf and are bound by data processing agreements.
Data processors we use:
- Supabase — Database og innlogging (hostet i EØS, region Nord-Europa)
- Resend — Utsending av e-postvarsel om henvendelser
- Vercel — Drift av nettsiden (hosting)
Some of our providers (e.g. Resend and Vercel) are based in the USA, and using them may involve transferring personal data outside the EEA. Any such transfer is made on the basis of the EU Standard Contractual Clauses (SCC) and/or the EU–US Data Privacy Framework. Supabase, where bookings are stored, operates within the EEA.
5. How long we keep the data
Contact enquiries are not stored in any database — they are only emailed to us and then kept in our mailbox for as long as needed to follow up.
Booking requests that do not lead to a customer relationship are deleted no later than 12 months after the last contact.
If you become a customer, we store necessary data for the duration of the customer relationship, and thereafter for up to 5 years if the Bookkeeping Act requires it.
You can ask us to delete your data at any time — see "Your rights" below.
6. Your rights
You have the following rights regarding the personal data we hold about you:
- Access — find out which data we hold about you
- Rectification — have incorrect or outdated data corrected
- Erasure — ask us to delete your data (“the right to be forgotten”)
- Restriction — ask us to restrict the processing
- Data portability — receive your data in a common file format
- Objection — object to the processing
- Withdraw consent — you can withdraw your consent at any time, without affecting processing already carried out
To exercise your rights, get in touch with us. We normally respond within 30 days.
7. Cookies and local storage
Brudevalsen uses no tracking or marketing cookies, and no analytics tools such as Google Analytics or Meta Pixel.
The only storage in your browser is your chosen colour theme, saved locally on your own device. This is a purely functional setting that is not linked to your identity and is not shared with anyone.
Fonts are loaded via Bunny Fonts, a privacy-friendly service that does not log IP addresses for marketing.
8. Complaint to the Norwegian Data Protection Authority
If you believe we process your personal data unlawfully, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). We appreciate it if you contact us first so we can correct any mistakes.
You can find contact information at www.datatilsynet.no.
9. Contact us about privacy
Do you have questions about how we process your personal data, or would you like to exercise your rights? Contact us at:
10. Changes to this privacy policy
We may update this privacy policy when needed, for example due to changes in the service or in legislation. The date at the top shows when it was last updated.
