Privacy Policy

Last updated: 5 December 2025

Contact

01Personal Data We Collect

Depending on your interaction with Northbased and the Services you use, we may collect the following personal data:

Name and contact details (including phone number and email address)
Contact preferences
Authentication data and login credentials
Billing address and payment information (including debit/credit card numbers where applicable)

Northbased does not process special categories of personal data (e.g. health data, racial or ethnic origin, political opinions, etc.). You are responsible for ensuring that all personal data provided to us is accurate, complete and kept up to date.

02Purposes and Legal Basis for Processing

We process your personal data only for the following purposes and on the following lawful bases:

Performance of our contract with you or to take steps prior to entering into a contract (e.g. delivering Services, invoicing, support);
Compliance with legal obligations to which Northbased is subject;
Pursuit of our legitimate interests (e.g. fraud prevention, network and information security, service improvement, direct marketing where permitted);
Your explicit consent where required (e.g. marketing communications). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

03Cookies and Similar Technologies

Our website and Portal Account use cookies and similar technologies to ensure functionality, remember preferences and analyse usage. Detailed information and your management options are set out in our separate Cookie Policy.

04Your Rights under Applicable Data Protection Law

Subject to the conditions set out in the GDPR and, where applicable, the California Consumer Privacy Act (CCPA), you have the following rights:

The right to access your personal data;
The right to rectification of inaccurate data;
The right to erasure (“right to be forgotten”);
The right to restriction of processing;
The right to object to processing (including direct marketing);
The right to data portability;
For California residents: the right to know, the right to deletion, the right to opt-out of sale of personal information, and the right to non-discrimination.

05Exercising Your Rights

To exercise any of the above rights, please contact us at legal@northbased.net. We will respond to verifiable requests without undue delay and in any event within one month (extendable in complex cases). Requests submitted through an authorised agent must be accompanied by written proof of authorisation.

06Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy or as required by law. When personal data is no longer required, it is securely deleted or anonymised. Accounting and tax-related data is retained for the periods required under Danish law.

07International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including the use of EU Standard Contractual Clauses or other mechanisms approved under the GDPR.

08Third-Party Websites

Our website and Portal may contain links to third-party sites. Northbased is not responsible for the privacy practices or content of such sites. We encourage you to review their respective privacy policies.

09Children’s Privacy

Our Services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

10Contact and Complaints

For any questions about this Privacy Policy or our data processing practices, please contact us at legal@northbased.net.

If you believe your rights have been infringed, you may lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at datatilsynet.dk/english.

11Client Portal and Services

By using the Client Portal and our Services, you acknowledge that the processing of your personal data as described in this Privacy Policy is necessary for the performance of our contractual relationship and the delivery of the agreed Services.

By using our website, Portal Account or Services, you confirm that you have read and understood this Privacy Policy.

01Personal Data We Collect

Depending on your interaction with Northbased and the Services you use, we may collect the following personal data:

Name and contact details (including phone number and email address)

Contact preferences

Authentication data and login credentials

Billing address and payment information (including debit/credit card numbers where applicable)

02Purposes and Legal Basis for Processing

We process your personal data only for the following purposes and on the following lawful bases:

Performance of our contract with you or to take steps prior to entering into a contract (e.g. delivering Services, invoicing, support);

Compliance with legal obligations to which Northbased is subject;

Pursuit of our legitimate interests (e.g. fraud prevention, network and information security, service improvement, direct marketing where permitted);

Your explicit consent where required (e.g. marketing communications). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

04Your Rights under Applicable Data Protection Law

Subject to the conditions set out in the GDPR and, where applicable, the California Consumer Privacy Act (CCPA), you have the following rights:

The right to access your personal data;

The right to rectification of inaccurate data;

The right to erasure (“right to be forgotten”);

The right to restriction of processing;

The right to object to processing (including direct marketing);

The right to data portability;

For California residents: the right to know, the right to deletion, the right to opt-out of sale of personal information, and the right to non-discrimination.

05Exercising Your Rights