Privacy Policy

 

Last updated: 23 July 2026

 

7Analytics AS (“7Analytics”, “we”, “us”) is committed to protecting your personal data. This privacy policy explains what personal data we collect through our website 7analytics.ai and in the course of our business, why we collect it, who we share it with, and what rights you have.

 

1. Who we are (data controller)

7Analytics AS
Organisation number: 919 844 523
Solheimsgaten 7C, 5058 Bergen, Norway
Email: info@7analytics.ai

7Analytics AS is the data controller for the personal data described in this policy. We are a Norwegian company and process personal data in accordance with the EU General Data Protection Regulation (GDPR) as implemented in Norway through the Personal Data Act (personopplysningsloven). Where the UK GDPR, the Australian Privacy Act 1988, or other local data protection laws apply to our processing, we comply with the corresponding requirements of those laws (see section 10).

We are not required to appoint a data protection officer. Questions about data protection can be directed to info@7analytics.ai, which is our designated contact point for privacy matters.

 

2. What personal data we collect and why

 

2.1 When you contact us

When you contact us by email at info@7analytics.ai, we process your name, email address, and any information you include in your message.

Purpose: To respond to your enquiry and follow up on your request.
Legal basis: Our legitimate interest in responding to enquiries (GDPR Art. 6(1)(f)), or steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)).

 

2.2 When you download content or register for material

When you download reports, product documentation, or other gated content from our website, we ask for your name, business email address, company, and job title.

Purpose: To deliver the requested content and, where permitted, to follow up with relevant information about our products and services.
Legal basis: Our legitimate interest in marketing our services to business contacts (GDPR Art. 6(1)(f)). Where applicable e-marketing rules require it, we obtain your consent (GDPR Art. 6(1)(a)) before sending electronic marketing. You can opt out at any time using the unsubscribe link in any message or by contacting us.

 

2.3 When you book a demo

Demo bookings are handled through Calendly. When you book a meeting, Calendly processes your name, email address, and the meeting details you provide, and shares them with us. Calendly’s own privacy policy applies to their processing as an independent controller of their platform data.

Purpose: To schedule and hold the meeting you requested.
Legal basis: Steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)).

 

2.4 Business contacts and prospects (including data we collect from other sources)

As a business-to-business company, we process contact details of people in relevant roles at current and prospective customer and partner organisations. This section also serves as the information notice required by GDPR Article 14 for personal data we do not collect from you directly.

Categories of data: name, job title, employer, business email address, business phone number, business address, professional profile information (such as a public LinkedIn profile URL), and records of our interactions with you.

Sources: This information may come directly from you (for example at a conference, meeting, or industry event), from your employer or colleagues, from publicly accessible sources such as LinkedIn and company websites, or from business contact data providers that supply professional contact information. Where we have obtained your data from a source other than you, we will make this policy available to you no later than in our first communication with you, and in any event within one month of collecting the data.

Purpose: Relationship management, sales outreach, and marketing of our flood risk analytics products to people whose professional role makes them relevant recipients. We store this information in our customer relationship management (CRM) system.

Legal basis: Our legitimate interest in developing and maintaining business relationships and marketing our services to relevant businesses (GDPR Art. 6(1)(f)). We have carried out a balancing assessment and consider this processing to have limited privacy impact: we process only professional contact details relating to your business role, in a business context you can reasonably expect, we do not process sensitive data, and we do not carry out profiling. Where we send electronic direct marketing, we do so in accordance with the e-marketing laws that apply in your jurisdiction, including the Norwegian Marketing Control Act, the EU ePrivacy rules, the UK Privacy and Electronic Communications Regulations, the Australian Spam Act 2003, and the US CAN-SPAM Act, and every electronic marketing message includes a functioning opt-out.

2.5 Customers and users of our platform

When your organisation is a customer, we process the names, business contact details, and login credentials of the people your organisation authorises to use our platform at portal.7analytics.ai, together with usage logs needed to operate and secure the service.

Purpose: To provide, support, secure, and improve our services under the agreement with your organisation.
Legal basis: Performance of a contract (GDPR Art. 6(1)(b)) and our legitimate interest in securing and improving our services (GDPR Art. 6(1)(f)).

 

2.6 Job applicants

If you send an application to info@7analytics.ai, we process the information you provide, such as your CV, cover letter, and contact details.

Purpose: Recruitment and evaluation of your application.
Legal basis: Steps taken at your request prior to entering into an employment contract (GDPR Art. 6(1)(b)) and our legitimate interest in recruiting (GDPR Art. 6(1)(f)). Applications are deleted after the recruitment process ends unless you agree that we may retain them for future opportunities.

 

2.7 Website visits, cookies, and analytics

When you visit 7analytics.ai, we and our service providers may collect technical data such as your IP address, browser type, device information, pages visited, and referring website, using cookies and similar technologies. Our website also loads certain third-party resources (such as web fonts and embedded maps) that may transfer your IP address to the relevant provider.

Purpose: To operate the website, understand how it is used, improve it, and measure the effectiveness of our marketing.
Legal basis: Consent (GDPR Art. 6(1)(a)) for non-essential cookies and analytics, obtained through our cookie banner; legitimate interest (GDPR Art. 6(1)(f)) for strictly necessary cookies.

For details of the specific cookies we use and to change your preferences at any time, see our cookie settings page.

 

2.8 Links to other websites

Our website may contain links to third-party websites we do not operate. Their privacy policies apply to any data you provide there, and we are not responsible for their content or practices.

 

3. Automated decision-making

We do not use your personal data to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

 

4. Who we share personal data with

We do not sell personal data. We share personal data only with:

• Service providers (data processors) who help us run our business, including our CRM provider (HubSpot), scheduling provider (Calendly), website hosting, email, analytics, and IT providers. They process personal data on our behalf under data processing agreements that meet the requirements of GDPR Article 28.
• Business contact data providers, where we verify or enrich professional contact information for the purposes described in section 2.4.
• Professional advisers such as auditors and lawyers, where necessary.
• Public authorities where we are legally required to do so.

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity subject to this policy or an equivalent level of protection.

 

5. International transfers

We are headquartered in Norway and primarily process personal data within the EU/EEA. Some of our service providers are located in, or have group companies in, countries outside the EU/EEA, including the United States. Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as the EU Commission’s Standard Contractual Clauses or an adequacy decision (including the EU-US Data Privacy Framework where the recipient is certified). You can contact us for more information about the safeguards applied to specific transfers.

 

6. How long we keep personal data

We keep personal data only as long as necessary for the purposes described above:

• Enquiries: as long as needed to handle the enquiry and any follow-up, and no longer than 24 months after our last contact.
• Marketing and prospect data: for as long as we have an active dialogue or a legitimate reason to stay in contact. Prospect records with no meaningful interaction for 24 months are deleted or anonymised. If you opt out of marketing, we retain the minimum information needed to honour your opt-out permanently.
• Customer data: for the duration of the customer relationship plus any period required for legal claims and bookkeeping legislation (in Norway, generally five years under the Bookkeeping Act).
• Job applications: deleted after the recruitment process ends, unless you consent to longer retention.
• Website analytics: according to the retention periods stated in our cookie information.

 

7. How we protect personal data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including access controls, encryption in transit, staff confidentiality obligations, and due diligence on the vendors we use.

 

8. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you and receive a copy
• Rectify inaccurate or incomplete data
• Erase your data in certain circumstances
• Restrict processing in certain circumstances
• Data portability for data you have provided to us, where processing is based on consent or contract
• Object to processing based on legitimate interest, including direct marketing (objections to direct marketing are always honoured, without exception)
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal

To exercise your rights, contact us at info@7analytics.ai. Exercising your rights is free of charge. We may need to verify your identity before responding. We will respond within one month; for complex or numerous requests this may be extended by up to two further months, in which case we will inform you within the first month.

You also have the right to lodge a complaint with a supervisory authority. In Norway, this is Datatilsynet (the Norwegian Data Protection Authority), www.datatilsynet.no. If you are located elsewhere in the EU/EEA, you may complain to the supervisory authority in your country of residence or place of work.

 

9. Children

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from children.

 

10. If you are outside the EU/EEA

If you are in the United Kingdom, the UK GDPR gives you rights equivalent to those in section 8, and you may complain to the Information Commissioner’s Office (ICO), ico.org.uk. If you are in Australia, we handle your personal information in accordance with the Australian Privacy Principles where they apply, and you may complain to the Office of the Australian Information Commissioner (OAIC), oaic.gov.au. Residents of other jurisdictions may have similar rights under local law; contact us to exercise them.

 

11. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last revision shown at the top. Material changes will be communicated where appropriate.

 

12. Contact

7Analytics AS
Solheimsgaten 7C, 5058 Bergen, Norway
info@7analytics.ai