Privacy policy

16/02/2026

Canoe (Canoe.no) is the data controller for personal data processed through this website.

Contact: hello@canoe.no

This policy covers personal data collectedthrough Canoe.no, including visits, enquiries, and any information you submit through forms on the site.

It does not cover offline processing orthird-party sites you reach via links from Canoe.no.

• “Personal data” means information that can identify you directly or indirectly.
• “Processing” means any use ofpersonal data, such as collection, storage, use, sharing, or deletion.

We use cookies and similar tracking technologies. Where required by law, we ask for your consent before setting optional cookies or loading third-party marketing and analytics scripts.

You can change your choices at any time using the cookie settings link on our website.

Information you provide: contact and enquiry details (such as name, email address, company, phone number) and the message you send us, including any files or details you choose to include.

Information collected automatically: log data (IP address, browser type, device information, referring pages, time-stamps, and pages viewed) and cookie/event data where you have given consent for analytics or marketing.

• Operate, maintain, and secure Canoe.no.
• Respond to enquiries and provide customer support.
• Improve the website, its content, and user experience.
• Measure the performance of our marketing activities, where you have given consent.
• Prevent fraud, misuse, and security incidents.

• Contract or steps before contract: handling requests and project enquiries.
• Legitimate interests: maintaining security, preventing misuse, and keeping basic operational logs (balanced against your rights).
• Consent: analytics and marketing cookies, and any tracking used for measurement or retargeting.
• Legal obligation: where we must keep information to meet statutory requirements.

We use the following categories:

• Necessary: required for coresite functions.
• Analytics: helps us understandsite use and improve performance (requires consent).
• Marketing: supports measurement,retargeting, and lead enrichment (requires consent).

GoogleAnalytics (GA4) (Analytics)

Purpose: Web site analytics and performance measurement.

Typical data: Pageviews, events, device and browser data, approximate location, and IP address(subject to configuration).

Provider: GoogleLLC

‍

LinkedIn Insight Tag (Marketing)

Purpose: Conversion measurement and retargeting for LinkedIn campaigns.

Typical data: Page events, identifiers/cookies, IP  address, and device information.

Provider: LinkedIn Ireland Unlimited Company / LinkedIn Corporation (depending on region)

‍

Leadinfo (Marketing)

Purpose: Business visitor identification and lead enrichment for B2B contexts.

Typical data: IP address, company-level information derived from visits, and site activity data.

Provider: Leadinfo B.V.

• These tools are loaded only after you give consent for the relevant category (analytics or marketing).
• You can withdraw consent at any time through cookie settings. Withdrawal does not affect processing carried out before withdrawal.

We share personal data only when needed to operate our services, deliver our website, or support marketing and analytics where you have consented. This may include:

• Hosting and infrastructure providers.
• Analytics and marketing providers listed above.
• Professional advisers where required for business reasons (for example, legal or security support).

Some providers may process personal data outside the EEA. When this occurs, we rely on recognised transfer safeguards, such as the European Commission’s Standard Contractual Clauses, and apply additional measures where appropriate.

We keep personal data only for as long as needed for the purposes described in this policy:

• Enquiry data: kept for up to 24 months. If we need to keep it longer for an ongoing client relationship or to meet legal requirements, we will do so.
• Security and server logs: kept for up to 90 days. If we need it longer to investigate incidents, we will keep it for that purpose.
• Analytics and marketing data: retained according to tool settings and your consent choices, and periodically reviewed.

We use reasonable technical and organisational measures designed to protect personal data. No website can guarantee absolute security, but we work to reduce risk through access controls, monitoring, and secure hosting practices.

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion, in certain situations.
• Restrict processing, in certain situations.
• Object to processing based on legitimate interests, in certain situations.
• Request data portability, where applicable.
• Withdraw consent at any time, where consent is the lawful basis.

To exercise your rights, contact us at: hello@canoe.no.

We respond within one month, subject to lawful exceptions.

You can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe our processing breaches data protection law.

Canoe.no is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us and we will take steps to delete it.