Legal

Privacy & Cookie Policy

Last updated 29 October 2026

Who we are

This website, norrspect.se, is run by NorrSpect, based in Umeå, Sweden. NorrSpect is the controller of the personal data described below. You can reach us at norrspect@gmail.com.

What we collect and why

Contact, careers and newsletter forms

When you send a form we receive the details you type in: your name, email address, optional phone number, subject and message (and, on the careers form, the role you are interested in). The newsletter form collects only your email address. We use this to reply to you, to consider job enquiries, and to send the newsletter you signed up for. We also record the IP address the form was sent from, only to limit spam and repeated submissions.

Submissions are stored in our database (hosted by Convex) and a copy is emailed to our team through Resend. Only people at NorrSpect who need to answer you can see them.

Team accounts

People who administer the website have an account (name, email address and sign-in details). This does not apply to ordinary visitors.

Server logs

Our hosting provider processes technical request data, such as IP address and browser type, to deliver the site and keep it secure.

Legal bases

We answer your messages and enquiries because you asked us to (taking steps at your request) and because it is in our legitimate interest to run the business and protect the site from abuse. We send the newsletter, and we use analytics cookies, only with your consent, which you can withdraw at any time.

Cookies

Cookies and similar storage on this site fall into two groups.

NamePurposeType
norrspect-consent (local storage) Remembers whether you accepted or declined analytics, so we do not ask on every visit. Necessary
Sign-in session cookie Keeps team members signed in to the admin area. It is not set for ordinary visitors. Necessary
_ga, _ga_* Google Analytics 4: counts visits and shows which pages are used, with IP addresses anonymised. Set only if you accept. Analytics (consent)

Google Analytics is not loaded and no analytics cookies are set until you press Accept in the cookie notice. Declining costs you nothing: the site works the same. To change your mind, use Cookie settings in the footer. Choosing Decline there removes the analytics cookies from this site.

Who receives your data

We use these service providers to run the site, each acting on our instructions:

  • Convex, for the database that stores form submissions and site content.
  • Resend, for sending the notification email about a form submission.
  • Our hosting and content delivery provider, for serving the website.
  • Google, for analytics, only if you accept analytics cookies.

Some of these providers are outside the EU/EEA. Where that applies, transfers rely on the safeguards the provider offers, such as standard contractual clauses.

How long we keep data

We keep form submissions only as long as needed to handle your enquiry and any follow-up, and delete them when they are no longer needed. Analytics data is kept in Google Analytics for the retention period configured on our account.

Your rights

You can ask us for access to your personal data, correction, deletion, restriction or a copy of it, and you can object to processing based on legitimate interest or withdraw consent at any time. Write to norrspect@gmail.com. If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.

Changes

If we change this policy we will update the date at the top of this page.