Privacy Policy

Last updated: 1st January 2026

Introduction

primestrategy AS ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our spa equipment maintenance services.

As a Norwegian company, we comply with the General Data Protection Regulation (GDPR) and Norwegian data protection laws in our handling of personal data.

Data Controller Information

Company: primestrategy AS

Registration Number: 254613879

Address: Bryggen 64, 0116 Oslo, Norway

Email: privacy@primestrategy.top

Phone: +47 21557324

Data We Collect

We collect various types of personal data to provide our spa equipment maintenance services effectively. The data we collect includes:

Personal Information

Name and contact details (email address, phone number)
Company or spa facility information
Service enquiry details and maintenance requirements
Communication preferences

Technical Data

IP address and browser information
Website usage data and page visits
Device information and operating system
Cookies and similar tracking technologies

Service Data

Equipment details and maintenance history
Service reports and compliance documentation
Billing and payment information
Communication records related to our services

How We Use Your Information

We process your personal data for various purposes based on legitimate interests and legal obligations. Here's how we use your information:

Service Provision

Delivering spa equipment maintenance services
Responding to service enquiries and support requests
Scheduling maintenance appointments and inspections
Providing emergency repair services

Business Operations

Processing payments and managing accounts
Maintaining service records and compliance documentation
Improving our services and customer experience
Internal business administration and record keeping

Legal Compliance

Meeting regulatory requirements for spa equipment maintenance
Maintaining safety and compliance records
Responding to legal requests and investigations
Protecting our legal rights and interests

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

Contract Performance: To provide spa equipment maintenance services as agreed
Legitimate Interests: For business operations, customer support, and service improvement
Legal Obligation: To comply with Norwegian regulations and safety requirements
Consent: For marketing communications and non-essential cookies (where applicable)

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

With trusted service providers who assist in delivering our services
With regulatory authorities when required by law
With professional advisors for legal or business purposes
In connection with business transfers or acquisitions
To protect our rights, property, or safety, or that of others

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. Our data retention periods are as follows:

Service Records: 7 years after service completion (regulatory requirement)
Customer Data: Duration of business relationship plus 3 years
Website Data: 26 months for analytics data
Marketing Data: Until consent is withdrawn or 2 years of inactivity

Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data (subject to legal requirements)
Right to Restrict Processing: Request limitation of data processing
Right to Data Portability: Receive your data in a structured format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us at privacy@primestrategy.top or +47 21557324.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and employee training
Secure backup and recovery procedures

International Data Transfers

As we operate primarily within Norway and the EU, your data is generally processed within the European Economic Area (EEA). If we need to transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the "last updated" date.

Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: