At Yallow, we value your privacy and are committed to protecting your personal information in accordance with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and other applicable international privacy laws.

Information We Collect

When you use our website, we may collect:

  • Personal information you voluntarily provide, such as your name, email address, phone number, company name, and any information submitted through contact forms.
  • Technical information including your IP address, browser type, device information, operating system, pages visited, referral source, and usage statistics.
  • Cookies and similar technologies to improve website functionality, security, analytics, and user experience.

How We Use Your Information

We process personal data to:

  • Respond to enquiries and provide requested services.
  • Communicate with you regarding our services and business relationship.
  • Improve our website, products, and user experience.
  • Maintain website security and prevent fraud.
  • Comply with legal and regulatory obligations.

We only process personal information where we have a lawful basis under the GDPR, including consent, legitimate interests, contractual necessity, or legal obligations.

Cookies

Our website uses cookies and similar technologies to enhance performance, analyze website traffic, and improve user experience. You can manage or disable cookies through your browser settings, although certain features of the website may not function properly.

Data Sharing

We do not sell or rent your personal information.

We may share information with trusted service providers who assist us in operating our website or delivering our services. These providers process data only on our behalf and under appropriate contractual and confidentiality obligations.

Personal information may also be disclosed where required by applicable law or to protect our legal rights.

International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms required under GDPR.

Data Security

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. While no internet transmission can be guaranteed to be completely secure, we continuously work to maintain high security standards.

Data Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Your Rights

Subject to applicable law, you have the right to:

  • Access your personal information.
  • Request correction of inaccurate information.
  • Request deletion of your personal data.
  • Restrict or object to processing.
  • Request data portability where applicable.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with the relevant data protection authority, including the Norwegian Data Protection Authority (Datatilsynet).

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites and encourage users to review their respective privacy policies.

Children’s Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal, technical, or operational changes. The latest version will always be published on this page together with the updated effective date.

Contact Us

If you have any questions regarding this Privacy Policy or our data processing practices, please contact us using the contact information provided on our website.