Privacy policy
Last updated: 4 August 2026
This privacy policy applies to the website avently.avent.no and the Avently website platform, operated by Avent Digital AS (org. no. 915 920 934), Strandgata, 6900 Florø, Norway. We process personal data in accordance with the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR).
Data controller
Avent Digital AS (org. no. 915 920 934) is the data controller for personal data processed via avently.avent.no. Contact us at kontakt@avent.no or +47 47 28 30 01.
What personal data we process
When you submit the contact form, we process your name, company (optional), email address, phone number (optional) and the content of your message. For ordinary visits, IP address and technical data are processed briefly in our hosting provider's operational logs. We use no analytics or tracking tools.
Purpose and legal basis
The data is used to answer and follow up your enquiry. The legal basis is GDPR Article 6(1)(b) (steps prior to entering into a contract) and 6(1)(f) (legitimate interest in answering enquiries). We do not send newsletters or marketing without separate consent.
Newsletter
If you subscribe to our newsletter, we process your email address to send you articles and insights from Avent Digital. The legal basis is consent (GDPR Article 6(1)(a)), given through double opt-in — you must confirm your subscription by email before anything is sent. Delivery is handled by our data processor Resend. Every newsletter contains an unsubscribe link that takes effect immediately, and once unsubscribed you receive no further emails. Unconfirmed sign-ups are deleted in periodic reviews.
Customer account on the platform
If you are a customer, we process your contact details (name, email, phone, company, organisation number and billing address) to deliver the service, give you access to your website and invoice you. The legal basis is contract (GDPR Article 6(1)(b)), and for accounting data a legal obligation. If you pay by card, the card transaction itself is handled by Stripe — we never see the card number, only status, amount and invoice. If you pay by invoice, the data is processed in our accounting system. We also store sign-in times and a log of emails sent, for security and troubleshooting.
Enquiries on customers' websites (we are the processor)
If you submit a contact form on a website built with Avently, the business owning that website is the data controller — not us. We store and forward the enquiry on their behalf as a data processor, governed by a data processing agreement. Such enquiries are never used for our own purposes and are not part of our customer records. For access or erasure, contact the business in question — we assist them.
Customer records and follow-up
We keep an internal contact register for our own enquiries: the contact form on avent.no, the free visibility check, guide downloads, waiting list, newsletter and customer accounts. It gathers the dialogue in one place, with notes and status, so we can follow up. The legal basis is legitimate interest (GDPR Article 6(1)(f)). You may request access or erasure at any time.
Artificial intelligence (AI)
The platform uses AI from Anthropic to generate and edit website content, translate between Norwegian and English, and suggest SEO improvements. When a website is created, the business information you provide — including contact person, phone, email and address — is sent to Anthropic to produce the content. Content is not used to train AI models. We never send contact form enquiries or our customer register to AI services.
Data processors and sharing
We do not sell or share your data. We use these processors: Vercel (hosting and operations), Supabase (database and sign-in), Resend (email delivery), Anthropic (AI processing of content) and Stripe (payments, when card payment is enabled). Data processing agreements are in place. Data is otherwise only disclosed where required by law.
Where is the data stored?
Our database is hosted by Supabase in the EU (Ireland), and the servers running the platform are located in Stockholm. Core operations therefore take place within the EEA. Some providers — in particular Anthropic and Resend — may process data in the United States. Such transfers rely on a valid mechanism: the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses (SCC).
Retention
Deletion is automated, not just periodic: enquiries and visibility checks are deleted after 24 months, the email log after 12 months, and sign-ups never confirmed after 30 days. If the dialogue leads to a customer relationship, necessary information is kept for its duration. Accounting records are retained per the Norwegian Bookkeeping Act (5 years), and unsubscribed addresses are kept on a suppression list so we do not email them again.
Visitor statistics
Customers on a paid plan see visitor numbers for their own website in the customer panel. The figures are pure aggregates: views per day, language and referring domain. No IP address, cookie, device ID or other identifier is stored, so the statistics cannot be traced back to individuals. This is also why the websites need no consent banner.
Cookies
avently.avent.no sets no cookies for ordinary visitors and uses no tracking or analytics tools. Strictly necessary login cookies are set only when signing in to the administration tool. No consent banner is shown, as consent is only required for cookies that are not strictly necessary (Norwegian Electronic Communications Act § 2-7b).
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Contact us at kontakt@avent.no — we respond without undue delay and within 30 days at the latest.
Complaints
If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (datatilsynet.no). We appreciate you contacting us first so we can put things right.