Privacy policy

This Privacy Policy explains how Dybng collects and uses personal information when you visit dybng.com or dybng.no, contact us, or use our services. We've tried to keep it short and in plain English.

1. Who we are

Dybng is a one-person company in Norway, run by Ole Magnus Dybing. We build websites, apps and automation for service businesses in the US, Canada and Norway, and work as an external IT partner (Managed IT) for small businesses.

Dybng is the controller of the personal information described in this policy.

Dybng
Aarstadgaten 23, 4370 Egersund, Norway
Org. no. 935 337 623
Email: [email protected]

Because Dybng is based in Norway, we follow the EU General Data Protection Regulation (GDPR), which applies in Norway through the EEA Agreement and the Norwegian Personal Data Act.

2. What we collect and why

Contact form. When you send us a request through the contact form on dybng.com, we collect:

• your name
• your company name
• your email address
• your phone number and country, if you choose to add them
• what you're interested in (for example a website plan or Managed IT) and, if relevant, which plan
• your website, if you choose to add it
• your message
• your consent to be contacted about your request

The contact form on dybng.no asks for less: your name, your email address, your phone number if you choose to add it, your message, and your consent to be contacted.

We use this to answer your request, for example to build your free website preview, set up a call, or send you a proposal.

Support form. When you send an IT support request, we collect your name, company name, email address, how urgent the issue is, your description of the issue, and your consent to be contacted. You can also attach a file (an image, PDF or text file, up to 5 MB) if it helps explain the problem. Please don't include passwords or other sensitive information in attachments. We use this to handle and follow up your support request.

Confirmation email. When you send a support request, we email you a confirmation with your case number.

Spam protection. Our forms use Cloudflare Turnstile to check that a request comes from a person and not a bot. To do this, Cloudflare processes technical information about your visit, such as your IP address and browser. We also keep a shortened, scrambled (hashed) version of your IP address for up to 24 hours to limit repeated submissions, and then delete it.

Visitor statistics. We use Cloudflare Web Analytics to see how many people visit our websites and which pages they read. It doesn't use cookies or other storage in your browser, and it doesn't identify or follow individual visitors. We only see totals, such as the number of visits per page.

Customers. If you become a customer, we use your contact details and the information you share with us to deliver the service we've agreed, to communicate with you about it, and to send invoices.

Managed IT. When we look after a customer's IT systems, we may have access to personal information stored in those systems. We handle that information only on the customer's behalf and according to our agreement with them, including a separate data processing agreement.

We don't use your information for anything else, and we don't sell it.

3. Our legal basis

Under the GDPR, we need a legal reason to use your personal information:

• Consent: when you tick the box on our forms, you agree that we can contact you about your request. You can withdraw your consent at any time by emailing [email protected].
• Legitimate interest: to answer requests sent to us, to keep our forms free of spam, to keep simple records of our communication with you, and to see in summary form how our websites are used.
• Contract: when you are a customer, we use your information to deliver the service we've agreed and to handle invoicing.
• Legal obligation: we keep accounting records, such as invoices and contracts, for 5 years, as required by the Norwegian Bookkeeping Act.

4. Who we share it with

We don't sell your personal information, and we don't share it with anyone for marketing.

We use a small number of service providers (processors) to run our website and email. They only process your information on our behalf:

• Cloudflare – hosts our websites, stores support requests (contact form requests are only sent by email and not stored on our website), provides spam protection (Turnstile), and provides our visitor statistics (Web Analytics). For support requests, our database only records whether a file was attached, not the file itself.
• Microsoft (Microsoft 365) – our email. Contact form requests go to [email protected], and support requests go to [email protected], where they are received and answered.
• Sanity – our content management system, which we use to edit the text and images on our website. It doesn't receive the information you send through our forms.
• Resend – sends emails from our forms: a copy of your request to us (including any attachment), and the confirmation with your case number to you.

We may also share information if the law requires it.

5. International transfers

Our service providers may store or process your information outside Norway and the EEA, for example in the United States. When that happens, we rely on the EU Standard Contractual Clauses and, where the provider is certified, the EU–U.S. Data Privacy Framework. Each provider has a data processing agreement with us.

6. How long we keep it

• Requests that don't lead to a customer relationship: we keep them for 12 months, then delete them.
• Website previews: if you're not interested, we delete your preview within 14 days.
• Customers: we keep your information for as long as you're a customer and delete it 2 years after the customer relationship ends. Accounting records, such as invoices and contracts, are kept for 5 years, as required by the Norwegian Bookkeeping Act.
• Support requests: we keep them for 24 months, then delete them.
• Managed IT: when a Managed IT agreement ends, we return or delete the personal data in the customer's own systems within 30 days, at the customer's choice, unless the law requires us to keep it.
• Attachments: we don't store attachments on our website. They are sent by email to [email protected] and kept with the support request in our mailbox for as long as we keep that request. Resend, the service that sends our form emails, keeps a copy of each email, including attachments, for 30 days, and its backups for up to 7 days.

7. Your rights

You have the right to:

• access the personal information we hold about you
• correct information that is wrong
• delete your information
• object to or restrict how we use it
• withdraw your consent at any time
• receive your information in a common format (data portability), where this applies

To use any of these rights, email [email protected]. We'll answer as soon as we can, and no later than the time limit set by the GDPR (normally one month).

If you think we handle your information in the wrong way, please tell us first, so we can try to fix it. You can also complain to the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.

Visitors in Canada can also contact the Office of the Privacy Commissioner of Canada, www.priv.gc.ca.

Visitors in the United States may have additional privacy rights under the laws of their state. Where those laws apply, we'll respect them. Contact us at [email protected].

8. Cookies

We don't use analytics, tracking or advertising cookies on dybng.com or dybng.no. Our visitor statistics (Cloudflare Web Analytics) work without cookies.

We set two strictly necessary cookies ourselves. If you arrive at dybng.no having chosen Norwegian, dybng.no saves that choice in a cookie (dybng-lang) for one year, so you aren't sent on to the English site. It isn't used for tracking. Our own editors also get a cookie when they preview unpublished content. It lasts one hour and is never set for regular visitors.

If you close the language banner at the top of the page, your browser remembers that in local storage (dybng-lang-banner-closed), so the banner doesn't show again. This isn't a cookie, and we don't use it for tracking.

Our forms use Cloudflare Turnstile to protect against spam. To check that a request comes from a person, Turnstile processes technical information such as your IP address and browser details. It doesn't read what you type in the form and doesn't use cookies to track you. Cloudflare may set strictly necessary security cookies to do this, which don't require consent. See Cloudflare's Turnstile privacy policy and Cloudflare's cookie list.

9. Children

Our services are for businesses. We don't knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we'll delete it.

10. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last updated.

11. Contact

Questions about this policy or your personal information? Contact us:

Dybng
Aarstadgaten 23, 4370 Egersund, Norway
Org. no. 935 337 623
[email protected]

Dybng, Aarstadgaten 23, 4370 Egersund, Norway · Org. no. 935 337 623