Privacy Policy

1. Controller

Nordgig AS is the controller for personal data processed in connection with Importkalk.

2. What personal data we process

We process personal data necessary to provide and manage the Service.

2.1 Data you provide to us

• account information such as email address, name and language preferences,
• authentication information such as password hash or equivalent security data,
• user content and inputs such as vehicle information, registration numbers, free text, prices, dates, document references and choices you enter,
• customer communications such as support emails, bug reports and other messages,
• business-related details if you use the Service on behalf of a company or organisation.

2.2 Data collected automatically

• technical data such as IP address, device type, browser, timestamps and error logs,
• usage data such as features used, number of searches/calculations and subscription or account events,
• security and abuse data used to detect fraud, misuse and technical attacks.

2.3 Payment and subscription data

Payments are normally handled by a third-party payment provider, such as Stripe. We do not usually receive full card details, but we may receive and store:

• payment-provider customer ID,
• subscription ID,
• payment status,
• receipt and invoice data,
• information required for accounting and bookkeeping purposes.

2.4 Search and free-text fields

When you use search or free-text fields in the Service, the content may be sent to third-party providers in order to deliver lookups, search, structuring, enrichment, translation or AI-assisted processing. You should not enter sensitive or unnecessary personal data in such fields.

2.5 Registration numbers, VINs and other identifiers

If you provide registration numbers, VINs or other vehicle identifiers, those identifiers may be sent to relevant data sources or APIs in order to fetch technical details, history or other relevant information.

3. Purposes and legal bases

We use personal data for the following purposes:

3.1 Performance of a contract

• create and manage accounts,
• provide calculations, lookups and other functionality,
• manage subscriptions, payments and access,
• provide customer support and follow up user enquiries.

3.2 Legitimate interests

• operate, secure, troubleshoot and improve the Service,
• prevent misuse, fraud and security incidents,
• analyse performance, stability and user experience where consent is not required,
• establish, exercise or defend legal claims.

3.3 Legal obligation

We process personal data where necessary to comply with legal obligations, including accounting, bookkeeping, tax or security-related requirements.

3.4 Consent

Where required by law, we ask for consent before using optional analytics tools, persistent identifiers, session replay or similar technologies. Consent can be withdrawn at any time for future processing.

4. Who we share data with

We may share personal data with providers and third parties where necessary to provide, operate or protect the Service.

4.1 Processors and service providers

• payments and billing,
• authentication, databases and hosting,
• search, AI processing and data enrichment,
• public or commercial data sources,
• analytics, logging, operations and security,
• customer communication and support.

Examples of providers that may be used in or with the Service are listed on the Data Sources and Third-Party Services page, together with relevant links to terms and privacy information.

4.2 Independent controllers

Some third parties may act as independent controllers for data they receive directly or through their own services. Where that is the case, their own terms and privacy notices apply alongside this Privacy Policy.

4.3 No sale of personal data

We do not sell personal data.

5. International transfers

Some providers may process personal data outside the EU/EEA. Where this happens, we seek to use valid transfer mechanisms and appropriate safeguards, such as the EU Standard Contractual Clauses, an adequacy decision or other lawful mechanisms relevant at the time of the transfer.

6. Retention and deletion

We keep personal data only for as long as necessary for the purposes for which it was collected and for as long as required by law.

Typical retention periods:

We may retain data for longer where necessary to comply with legal obligations, handle disputes or protect our legal interests.

7. Your rights

You may have the right to:

• request access to the personal data we process about you,
• have inaccurate data corrected,
• have data erased where the conditions are met,
• request restriction of processing,
• receive data in a structured, commonly used and machine-readable format where portability rights apply,
• object to processing based on legitimate interests,
• withdraw consent where processing is based on consent.

You can exercise your rights by contacting us at contact@importcalc.com.

8. Cookies and similar technologies

We use strictly necessary cookies and similar technologies to provide login, session management, security and core functionality.

We may also use:

• limited privacy-oriented measurement where lawful without consent,
• analytics tools, persistent identifiers or session replay where permitted and where valid consent exists if consent is required.

You can manage choices relating to cookies and analytics through settings in the Service and, where relevant, through your browser.

9. Security

We use technical and organisational measures to protect personal data, including access control, encryption in transit, logging, secure development practices and incident-handling procedures. No system is entirely risk-free, but we work to maintain a level of security appropriate to the risk.

10. Changes to this Privacy Policy

We may update this Privacy Policy as needed. The current version will be published on the website. If we make material changes, we will notify registered users in an appropriate way.

11. Complaints and contact

If you have questions about how we process personal data, you can contact us at contact@importcalc.com.

If you believe our processing violates applicable law, you may lodge a complaint with the relevant supervisory authority, including the authority in the country where you live, work or where the alleged infringement took place.