Privacy policy

Last updated: 12 September 2026

1. Who we are

Saga Verify AS is the data controller for personal data processed through this website.

• Saga Verify AS, Norway
• Organisation number: TODO — add org. number
• Postal address: TODO — add postal address
• Email: [email protected]

2. Cookies and browser storage

This website sets no cookies. We use no analytics, advertising, profiling or social media cookies, and no third-party tracking of any kind.

The only thing we store in your browser is a single entry in local storage:

• sv-cookie-notice — records that you have dismissed the cookie notice, so it is not shown again on every page you open. It contains only the value v1, it is readable only by this website, it is never sent to our server, and it identifies nothing about you.

You can remove it at any time by clearing site data for sagaverify.com in your browser settings. Doing so simply makes the notice appear again.

3. The contact form

If you send us a message through the contact form, we process the information you enter:

• Name (required)
• Email address (required)
• Company (optional)
• Your message (required)

In addition, the notification email we receive records the time the message was sent and the IP address it was sent from. We use the IP address only to identify and block spam and abuse of the form.

Purpose: to read and reply to your enquiry.
Legal basis: GDPR Article 6(1)(b), steps taken at your request prior to entering into a contract, and Article 6(1)(f), our legitimate interest in responding to enquiries and protecting the form from abuse.
How it is handled: the message is delivered as an email to [email protected] and is not stored in any database on this website.
Retention: TODO — state how long enquiry emails are kept, e.g. "up to 12 months after the enquiry is closed".

4. Web server logs

Like any website, this site is served by a web host that keeps standard access logs. These typically contain the visitor's IP address, the time of the request, the page requested and the browser's user agent. The logs are generated by our hosting provider and are used for operating and securing the website, on the basis of our legitimate interest under GDPR Article 6(1)(f).

Hosting provider (acting as our data processor): TODO — add hosting provider name. Log retention is governed by that provider's own routines.

5. Fonts loaded from Google

This site uses the Inter typeface, loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When your browser fetches the font files, your IP address and user agent are transmitted to Google, and may be processed outside the EU/EEA. Google Fonts does not set cookies and we do not use it to recognise or track visitors.

6. What we do not do

• We do not use analytics, statistics or heat-mapping tools.
• We do not use advertising, remarketing or conversion tracking.
• We do not build profiles of visitors and carry out no automated decision-making.
• We do not embed social media plugins, comment widgets or chat widgets.
• We do not sell, rent or trade personal data.

7. Your rights

Under the GDPR you have the right to request access to the personal data we hold about you, and to request rectification, erasure, restriction of processing or data portability. You may also object to processing based on our legitimate interests. To exercise any of these rights, contact us at [email protected].

If you believe we handle your personal data unlawfully, you may lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (www.datatilsynet.no).

8. Changes to this policy

If we change how this website handles personal data — for example if we ever introduce analytics — we will update this policy and the date above before the change takes effect. Any use of non-essential cookies would first require your explicit consent.