Restored hamlet in the Mugello

Your Data

Privacy Policy

NQL Logo
Properties Investment Opportunities About How to Buy Contact For agencies

info@nordicql.com

Staff login

Back to Home

Last updated 7 September 2026

This policy sets out what happens to information you give us, in plain terms. It describes what this website actually does, not what a template says a website might do.

The short version:

The rest of this page is the detail behind those five points.

01 Who we are

NQL Properties is the trading name of NordicQL Real Estate, registered in Norway. We are the data controller for the information described here, which means we decide why it is collected and what happens to it.

NordicQL Real Estate
Fridtjof Nansens vei 16
1366 Lysaker, Norway

info@nordicql.com
+47 984 84 738

Norway is part of the EEA, so the GDPR applies to everything described below, and you have every right it grants. Our supervisory authority is the Norwegian Data Protection Authority (Datatilsynet).

02 What we collect, and why

Only what you type into a form, plus the page you were reading when you sent it. Separately, we count page views without identifying anyone, which is set out in full in section 03. There is no hidden collection.

WhatWhy we need itLawful basis
NameTo address you properlyLegitimate interest
Email addressTo reply to youLegitimate interest
Phone number, if you give itTo call you if that is easierLegitimate interest
Your messageTo understand what you are askingLegitimate interest
Budget, if you give itTo send you properties in rangeLegitimate interest
The property or project you enquired aboutTo know what the enquiry concernsLegitimate interest
Meeting format, date and timeTo arrange the meeting you asked forSteps toward a contract
The page you enquired fromTo know which listing prompted itLegitimate interest
Email address alone, for the newsletterTo send you the updates you asked forConsent

“Legitimate interest” means we rely on the fact that you contacted us about buying property and would reasonably expect us to use your details to answer. You can object to that at any time and we stop.

Newsletter signups rest on consent, which is a higher bar and which you can withdraw whenever you like. We keep newsletter addresses in a separate database from enquiries, because agreeing to receive updates is not the same as asking to be sold to.

03 What we do not collect

This is the part most privacy policies leave vague, so to be explicit:

The only browser storage we use is on our internal staff login at /crm, which keeps a session token so our own team is not signed out every few minutes. It is not set for visitors.

The one thing we do count

We use Vercel Web Analytics to see which pages are read and which are ignored. It is deliberately the least invasive tool we could find, and this is the whole of what it records:

It sets no cookies and uses no browser storage, which is why there is still no cookie banner on this site. It does not follow you to other websites, it does not build a profile of you, and it has no way of connecting a page view to your name or email address. To avoid counting one visit twice, Vercel derives a scrambled value from your IP address that changes every day and cannot be turned back into an IP; your IP address itself is never stored.

The script is served from our own domain, so nothing about your visit is sent to an outside tracking network. Our lawful basis is legitimate interest: knowing which properties people actually read about is how we decide what to publish. You can object at any time using the contact details below, and browser or extension level blocking of this script has no effect on how the site works.

Our internal staff area at /crm is excluded from it entirely.

04 Who else sees it

These companies are involved in getting your enquiry to us and keeping it safe. Each is bound by a data processing agreement and none may use your information for their own purposes.

CompanyWhat they doWhere
VercelHosts this website, receives the form submission, and counts page viewsEU and US
SupabaseStores enquiries in our databaseIreland (EU)
FormspreeEmails the enquiry to our teamUnited States
Google WorkspaceOur emailEU and US

Transfers to the United States rely on the EU to US Data Privacy Framework and standard contractual clauses. If you would rather your details never left the EU, email us instead of using the form and say so.

Partner agencies

We work with local agencies across the Mediterranean, and buying a property abroad usually means one of them handling the viewing and the paperwork. If your enquiry needs an agency involved, we will tell you which one and why, and ask you, before we pass anything on. We do not hand your details to a partner and hope for the best.

Those agencies sign in to a private board of ours to say which enquiries they could help with. That board carries no name, no email address, no phone number and nothing you wrote to us in your own words. An agency sees the search and not the searcher: a reference number, where you are looking, your budget, the sort of place, how many bedrooms, how much land, what it must have, what would rule it out, what you want it for, when you hope to buy, and how long ago you enquired. It exists so that the agency who asks about you is one that can genuinely help, rather than us passing you to whoever is nearest.

Anything you type to us as a message stays with us. It is read by our own team and is not on that board.

When an agency asks for an introduction, we come to you first and name them. Only if you say yes does that agency see who you are. If you say no, or say nothing, they never do. You can change your mind afterwards and we will tell them to stop.

Fonts, images and maps

Some pages load fonts from Google, styling from a Tailwind CDN, and on a few property pages an embedded Google map. Loading any of these tells that company your IP address and roughly where you are. That is how the open web works, but you deserve to know it happens. None of it identifies you by name, and the Google map is the only one that may set a cookie of its own.

05 How long we keep it

TypeKept for
An enquiry that goes nowhereTwo years from your last contact with us
An enquiry that becomes a purchaseTen years, as accounting and anti-money-laundering law requires
Newsletter subscriptionUntil you unsubscribe
Record that you unsubscribedThree years

That last one may look odd. When you unsubscribe we keep a note of the date rather than erasing you entirely, because if you later say we contacted you without permission, that record is what proves when you opted out. If you would rather we erased it completely, ask and we will.

06 Your rights

Under the GDPR you can ask us to do any of the following, free of charge. We answer within thirty days.

Email info@nordicql.com with what you want. You do not need to cite the law or use particular wording, “please delete my data” is enough.

If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain directly to the Norwegian Data Protection Authority (Datatilsynet), or to the equivalent authority in the EEA country where you live.

07 Keeping it secure

No system is perfect. If there is ever a breach that puts you at risk, we will tell you and the supervisory authority within 72 hours, as the law requires.

08 Children

This site is meant for adults buying property. We do not knowingly collect information from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.

09 Changes to this policy

This version is dated 21 August 2026. If we change how we handle your information we will update this page and change that date. For anything significant, a new category of data, a new recipient, we will tell the people it affects directly rather than expecting them to re-read this page.

Something here unclear?

Ask us. A privacy policy nobody can follow is not transparency, and we would rather explain it than have you guess.

Email us