Privacy Policy
Last updated: 28 July 2026
This Privacy Policy explains how [ZAGA MARKETING AS], organisation number [ORG.NR], registered in Norway ("Zaga Marketing", "we", "us"), collects and uses your personal data when you use [Zagamarketing.com] (the "Site") or submit an application through it.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
1. Data controller
2. What data we collect
Information you give us through the application form:
- Name
- Email address
- Country
- Social media handle or profile link
- Current monthly revenue range (if you choose to provide it)
- Whether you currently work with an agency
- Any information you include in the free-text/message field
Information collected automatically when you visit the Site:
- IP address
- Browser type and device information
- Pages visited and time spent
- Referring website
- Cookie and similar identifier data (see section 8)
We do not knowingly collect data from anyone under 18. If you are under 18, please do not use the Site or submit an application.
3. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Reviewing and responding to your application | Steps taken at your request prior to entering an agreement, Art. 6(1)(b) |
| Contacting you about your application | Our legitimate interest in responding to enquiries, Art. 6(1)(f) |
| Operating, securing and improving the Site | Our legitimate interest in a functioning, secure Site, Art. 6(1)(f) |
| Analytics and non-essential cookies | Your consent, Art. 6(1)(a) |
| Complying with legal obligations | Legal obligation, Art. 6(1)(c) |
Where we rely on consent, you may withdraw it at any time (see section 7).
4. How we share your data
We do not sell your personal data.
We share data only with:
- Service providers who help us run the Site and process applications, for example website hosting, database and form storage, and email providers. These act as our data processors under written agreements and may only use your data on our instructions.
- Public authorities, where we are legally required to disclose it.
- Professional advisers (such as legal or accounting advisers) where necessary.
5. International transfers
Some of our service providers may process data outside the EU/EEA. Where that happens, we ensure an appropriate safeguard is in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision, so your data receives a level of protection equivalent to that under EU law. You can request more information about these safeguards using the contact details above.
6. How long we keep your data
We keep your data only as long as necessary for the purpose it was collected:
- Applications that do not lead to a working relationship: kept for up to [12 months], then deleted, unless you ask us to remove them sooner.
- Applications that lead to a working relationship: kept for the duration of that relationship and as required afterwards by law (for example accounting records under Norwegian law).
- Site analytics data: kept for [14 months] or the retention period set in our analytics tool.
7. Your rights
Under the GDPR you have the right to:
- Access: request a copy of the data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: ask us to delete your data ("right to be forgotten")
- Restriction: ask us to limit how we use your data
- Objection: object to processing based on our legitimate interests
- Data portability: receive your data in a portable format
- Withdraw consent: where processing is based on consent, at any time
To exercise any of these rights, contact us at [EMAIL]. We will respond within one month.
If you believe we have handled your data unlawfully, you have the right to complain to the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.
8. Cookies
The Site uses cookies and similar technologies.
Essential cookies are required for the Site to function and do not require consent.
Analytics and other non-essential cookies are used only if you consent through our cookie banner.
You can withdraw or change your cookie choices at any time through the banner or your browser settings. Blocking some cookies may affect how the Site works.
[If you use a specific analytics or cookie tool, name it here, e.g. Google Analytics.]
9. How we protect your data
We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse, including access controls, encryption in transit, and agreements with our processors. No system is completely secure, but we work to keep your data safe and to address any breach in line with our legal obligations.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always published on the Site, with the date of the most recent update shown at the top. Where changes are significant, we will take reasonable steps to make you aware of them.
11. Contact
For any question about this Privacy Policy or your personal data:
[ZAGA MARKETING AS]
[EMAIL]
[ADDRESS]
Supervisory authority: Datatilsynet (Norwegian Data Protection Authority), www.datatilsynet.no