PRIVACY POLICY - Nettify.no

Last updated: 23.10.2026

This privacy policy explains how Nettify collects and uses personal data.

Data controller: Nettify subscriptions and domains are currently provided by Nguyen Development ENK (org. no. 930 509 477), which is the data controller for the personal data described in this policy. The business is moving to Nettify AS (org. no. 938 437 955), and the migration is planned from 1 January 2027. From then on, Nettify AS becomes the data controller for the same data, for the same purposes and on the same terms. We will notify you by email before the change.

1. What data do we collect?

We may collect:

  • Name and email
  • Mobile number (used for support and to help you with any questions)
  • Account information
  • Payment information (handled by third parties)
  • Usage data (how you use the service)
  • Content you generate in Nettify
  • Leads collected via the websites you create
  • When registering a .no domain: name, address, and organisation number (businesses). Private individuals supply their national identity number/D-number directly to Norid to obtain an anonymous PID; Nettify handles only the PID, not the national identity number itself – see section 5.1

2. What is the data used for?

We use data to:

  • Deliver and improve the service
  • Manage accounts and subscriptions
  • Deliver leads to your dashboard
  • Support and customer service
  • Security and abuse prevention

We process personal data based on the following legal grounds:

  • Performance of a contract (GDPR Art. 6(1)(b)): Account creation, service delivery, subscription management, and delivering leads to your dashboard.
  • Legitimate interest (GDPR Art. 6(1)(f)): Analysis and improvement of the service, security and abuse prevention, and sending operational updates and service-related information.
  • Legal obligation (GDPR Art. 6(1)(c)): Transfer of data to Norid when registering a .no domain in accordance with Norid’s rules – see section 5.1.

4. Data Storage and Deletion

Data is stored securely with our providers. We retain data for the following periods:

  • Account data (name, email, and mobile number) is stored as long as your account is active.
  • Upon account deletion, we delete all personal data we hold about you - including name, email, mobile number, account information, and content you have generated - within 30 days. You can delete your account yourself from the profile page in the dashboard.
  • Payment information is handled by Stripe and is not stored by us.
  • Usage data is anonymized after 12 months.
  • Some data may be retained longer where required to comply with statutory obligations (e.g., the Norwegian Bookkeeping Act requires retention of invoice data for 5 years).

5. Sharing with Third Parties

We only share data with:

  • Payment provider - Stripe
  • Hosting and infrastructure providers
  • GitHub (Microsoft) - for customers on a paid plan we keep a private backup copy of the website’s source code and version history. It is accessible to Nettify only, never public, and is deleted when you delete the project or your account
  • Norid (the registry for .no) when you register a .no domain through us – see section 5.1

We never sell data.

5.1 Specifically about .no domains (Norid)

When you register a .no domain through Nettify, we act as a registrar/reseller affiliated with Norid, the registry for the Norwegian top-level domain .no. To complete the registration, the necessary data is transferred to Norid:

  • Name and address
  • Email address
  • Organisation number (businesses). For private individuals, the national identity number/D-number is supplied directly to Norid (not via Nettify) to create an anonymous PID linked to the national identity number; Nettify only receives and handles this PID, not the national identity number itself

Moving a .no domain to Nettify. When you move a .no domain from another registrar to Nettify, Norid sends a one-time code to the email address registered for the domain holder. The code you paste is sent directly to Norid and is not stored by Nettify. After the transfer, we receive the holder’s name and contact details from Norid so the domain can be linked to your account. If you choose to move DNS to Nettify, we copy the domain’s public DNS records, including those for email, so your email keeps working.

Nettify and Norid are independent data controllers for this processing. The legal basis is performance of a contract (GDPR Art. 6(1)(b)) and legal obligation under Norid’s rules (Art. 6(1)(c)).

Norid publishes certain data via its domain lookup service (whois) – for example the holder’s name for organisations. Your national identity number is never published. For private individuals, the name is not published either – only the email address and country are shown in the domain lookup. You can read more in Norid’s privacy policy and in Norid’s rules for .no.

6. Transfers outside the EEA

Some of our providers, such as Stripe and GitHub (Microsoft), may process data outside the EEA. In such cases, the transfer is secured through EU Standard Contractual Clauses or equivalent approved transfer mechanisms.

7. Cookies

Nettify uses cookies for:

  • Login
  • Functionality
  • Analysis and improvement

8. Email and SMS Communication

As a Nettify user, you may receive emails with operational updates and information about the service.

In addition, we may send you one support SMS - only once, at the start of the user relationship - to the mobile number you have provided, to offer help getting started. You are free to reply if you want help, or to ignore the message. If you ignore it, we will not contact you on SMS again. Both are based on our legitimate interest in helping you as an active user.

You can unsubscribe from email communication at any time by replying to any email you receive from us with a request to unsubscribe. You can opt out of support SMS by sending an email to [email protected].

9. Right of Withdrawal and Refunds

In accordance with the Norwegian Right of Withdrawal Act (Angrerettloven), you have a 14-day right of withdrawal from the date of purchase (see the terms §2.3.8 for domains). To exercise this right, send an email to [email protected].

Please note that upon refund, your account and associated website(s) will be deactivated.

10. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectification of inaccurate data
  • Deletion - this can be done under your profile in the dashboard
  • Data portability
  • Withdraw consent

If you believe we are not processing your personal data in accordance with applicable regulations, you have the right to file a complaint with the Norwegian Data Protection Authority (datatilsynet.no).

11. Security

We use technical and organizational measures to protect your data.

12. Changes

This declaration may be updated. Significant changes will be notified.

13. Contact

📩 [email protected]

For formal inquiries, please contact: Nguyen Development ENK - Org. no. 930 509 477 (data controller until 31 December 2026)

From 1 January 2027: Nettify AS - Org. no. 938 437 955