Privacy Policy

Last updated: March 5, 2026

Leadkit Inbox is operated by Nettbureau AS (“we”, “our”, or “us”). This Privacy Policy explains how personal data is processed in the Leadkit Inbox applications, the Leadkit web platform, and related Nettbureau services.

Leadkit Inbox is a business tool used by authorized partners of Nettbureau AS to receive and manage leads generated through Nettbureau-operated services.

1. Roles and Responsibilities

Nettbureau AS acts as a data controller for the collection, generation, and distribution of leads through its services and platforms.

When a lead is delivered to a partner through Leadkit, the receiving partner acts as an independent data controller for their own processing of the personal data contained in the lead. This may include contacting the consumer, providing services, or managing their own customer relationships.

Nettbureau AS and partner companies therefore operate as independent controllers (controller–controller) for their respective processing activities. Each party is responsible for complying with applicable data protection laws for the processing under their control.

Partners receiving leads are responsible for providing their own privacy information to consumers regarding how they process personal data after receiving a lead.

2. Lead Sources

Leads delivered through Leadkit originate from consumers submitting requests for products or services through Nettbureau-operated websites and digital services across multiple markets and service categories.

These services may include comparison services, request forms, and other lead-generation platforms operated or managed by Nettbureau or its partners. The specific website or service used by the consumer may vary depending on the country and the type of service requested.

Depending on the service requested and geographic location, leads may be shared with authorized partner companies operating in the relevant country or service area.

3. Purpose and Legal Basis for Processing

Nettbureau processes personal data for the following purposes:

• Delivery of leads to authorized business partners
• User authentication and account management for partner users
• Notifications about new leads (push notifications)
• Operation and monitoring of the service
• Security and fraud prevention

The legal bases for processing may include performance of a contract, legitimate interests in operating and improving the service, and compliance with legal obligations.

4. Categories of Personal Data

Depending on the service type, personal data processed may include:

• Name
• Email address
• Phone number
• Address or location information
• Details about the requested service

The service may also process certain technical information, such as:

• IP address
• Device identifiers
• Push notification tokens
• Application usage logs
• Crash reports and diagnostic data

5. Recipients of Data

Personal data may be shared with the following categories of recipients:

• Authorized business partners receiving leads relevant to their services
• Service providers and data processors used to operate the service

Examples of service providers include:

• Firebase (Google): authentication, infrastructure, and notifications
• Sentry: application monitoring and error reporting
• Hosting and infrastructure providers used to operate the Leadkit platform

6. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA). When such transfers occur, Nettbureau uses appropriate safeguards in accordance with applicable data protection laws, such as Standard Contractual Clauses (SCCs) or adequacy decisions where available.

7. Data Retention

Personal data is retained only as long as necessary to provide the service and fulfill legal obligations. Typical retention periods include:

• Lead data: retained as necessary for the delivery and documentation of services
• Account information: retained while the partner relationship is active
• Technical logs and security data: typically retained for up to 90 days
• Crash and diagnostic reports: retained for a limited operational period

8. Data Security

Nettbureau AS implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

9. Data Subject Rights

Individuals whose personal data is processed through Nettbureau services may have rights under applicable data protection laws, including the right to:

• Access their personal data
• Request correction of inaccurate data
• Request deletion of personal data
• Object to certain processing activities
• Request restriction of processing

Requests regarding personal data can be sent to data@nettbureau.com.

Information about how Leadkit Inbox users can request account deletion is available here: Account Deletion Instructions.

10. Right to Lodge a Complaint

If you believe your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority.

Individuals in the EEA may lodge a complaint with their local data protection authority. In Norway, the competent authority is Datatilsynet.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with an updated revision date.

12. Contact

Nettbureau AS

General inquiries: contact@nettbureau.com

Data protection inquiries: data@nettbureau.com