Privacy policy

This privacy policy describes how Unilab collects, uses and protects personal data when you use our website or purchase services from us. The processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.

Data controller

Unilab AS (org. no. 935 854 369) is the data controller for the personal data processed via our website and services. We have not appointed a Data Protection Officer (personvernombud). Privacy inquiries can be sent to post@unilab.no.

What data we collect

When you fill in the contact form, we store your name, email address, phone number and message in order to respond to your inquiry. When you purchase a subscription, we also store company details, the selected package, payment information (handled by Stripe – we never see the full card number) and subscription status. We collect aggregated, privacy-friendly usage data (page views, device type, approximate region) via Vercel Analytics and Vercel Speed Insights to understand how the site is used.

How we use the data

The data is used to contact you about your inquiry, deliver the services you order, manage the subscription and payment, and to comply with statutory requirements (including the Norwegian Bookkeeping Act, the Anti-Money Laundering Act and the Tax Act for customers). We do not sell data to anyone.

Legal basis for the processing

We rely on the following legal bases under GDPR Article 6 for each processing purpose:

• Contact form data – consent (Art. 6(1)(a)). You provide the data voluntarily so that we can respond to your inquiry.
• Subscription and customer data – performance of a contract (Art. 6(1)(b)). The data is necessary to deliver the agreed services.
• Accounting and anti-money-laundering retention – compliance with a legal obligation (Art. 6(1)(c)) under the Bookkeeping Act and the Anti-Money Laundering Act.
• Analytics – consent (Art. 6(1)(a)), given through the cookie-consent banner.

Data processors

We use the following data processors to deliver the services:

• Smart Økonomi AS (authorised accounting firm) – processing of accounting data, vouchers, payroll and VAT.
• Nordic Defence AS – cybersecurity services.
• Stripe Payments Europe, Ltd. (Dublin, Ireland) – payment processing and subscription management. PCI DSS certified.
• Webhuset AS – operation of the email mailbox and delivery of inquiries from the contact form.
• Vercel Inc. – web hosting and analytics. Storage in an EU region.

All data processors are bound by data processing agreements in accordance with GDPR Article 28.

International transfers

Stripe and Vercel store data within the EU, but both have US parent entities. Where personal data is nonetheless transferred outside the EU/EEA – for example for support or administration – such transfers rely on the EU Standard Contractual Clauses (SCCs) approved by the European Commission, together with supplementary safeguards where necessary.

Retention period

Inquiries that do not lead to a customer relationship are deleted within 12 months. Customer data is stored for as long as the customer relationship lasts and thereafter in accordance with statutory retention periods (the Bookkeeping Act §13 requires, among other things, 5 years' retention of accounting documentation). Payment history is stored by Stripe in accordance with their policies and our agreements.

Your rights

You have the right to access, rectify and erase the data we have stored about you, the right to data portability, the right to object to the processing, the right to restriction of processing, and the right to withdraw consent. Contact us at post@unilab.no to exercise these rights. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no).

Cookies

We use necessary cookies for the site to function, including remembering your cookie choice. We also use analytics through Vercel Analytics and Vercel Speed Insights. These analytics tools load only after the visitor actively consents via our cookie-consent banner; the legal basis for analytics is your consent. You can decline analytics, and you can withdraw a consent already given at any time via the banner. The analytics collects aggregated, privacy-friendly usage data – page views, device type and approximate region – and does not identify you individually. We use no cookies for third-party advertising or profiling.

Contact information

Unilab AS
Org. no. 935 854 369
Svaneveien 2, 1661 Rolvsøy
Email: post@unilab.no
Phone: (+47) 405 57 101