Your Data
Last updated 7 September 2026
This policy sets out what happens to information you give us, in plain terms. It describes what this website actually does, not what a template says a website might do.
The short version:
The rest of this page is the detail behind those five points.
NQL Properties is the trading name of NordicQL Real Estate, registered in Norway. We are the data controller for the information described here, which means we decide why it is collected and what happens to it.
NordicQL Real Estate
Fridtjof Nansens vei 16
1366 Lysaker, Norway
info@nordicql.com
+47 984 84 738
Norway is part of the EEA, so the GDPR applies to everything described below, and you have every right it grants. Our supervisory authority is the Norwegian Data Protection Authority (Datatilsynet).
Only what you type into a form, plus the page you were reading when you sent it. Separately, we count page views without identifying anyone, which is set out in full in section 03. There is no hidden collection.
| What | Why we need it | Lawful basis |
|---|---|---|
| Name | To address you properly | Legitimate interest |
| Email address | To reply to you | Legitimate interest |
| Phone number, if you give it | To call you if that is easier | Legitimate interest |
| Your message | To understand what you are asking | Legitimate interest |
| Budget, if you give it | To send you properties in range | Legitimate interest |
| The property or project you enquired about | To know what the enquiry concerns | Legitimate interest |
| Meeting format, date and time | To arrange the meeting you asked for | Steps toward a contract |
| The page you enquired from | To know which listing prompted it | Legitimate interest |
| Email address alone, for the newsletter | To send you the updates you asked for | Consent |
“Legitimate interest” means we rely on the fact that you contacted us about buying property and would reasonably expect us to use your details to answer. You can object to that at any time and we stop.
Newsletter signups rest on consent, which is a higher bar and which you can withdraw whenever you like. We keep newsletter addresses in a separate database from enquiries, because agreeing to receive updates is not the same as asking to be sold to.
These companies are involved in getting your enquiry to us and keeping it safe. Each is bound by a data processing agreement and none may use your information for their own purposes.
| Company | What they do | Where |
|---|---|---|
| Vercel | Hosts this website, receives the form submission, and counts page views | EU and US |
| Supabase | Stores enquiries in our database | Ireland (EU) |
| Formspree | Emails the enquiry to our team | United States |
| Google Workspace | Our email | EU and US |
Transfers to the United States rely on the EU to US Data Privacy Framework and standard contractual clauses. If you would rather your details never left the EU, email us instead of using the form and say so.
We work with local agencies across the Mediterranean, and buying a property abroad usually means one of them handling the viewing and the paperwork. If your enquiry needs an agency involved, we will tell you which one and why, and ask you, before we pass anything on. We do not hand your details to a partner and hope for the best.
Those agencies sign in to a private board of ours to say which enquiries they could help with. That board carries no name, no email address, no phone number and nothing you wrote to us in your own words. An agency sees the search and not the searcher: a reference number, where you are looking, your budget, the sort of place, how many bedrooms, how much land, what it must have, what would rule it out, what you want it for, when you hope to buy, and how long ago you enquired. It exists so that the agency who asks about you is one that can genuinely help, rather than us passing you to whoever is nearest.
Anything you type to us as a message stays with us. It is read by our own team and is not on that board.
When an agency asks for an introduction, we come to you first and name them. Only if you say yes does that agency see who you are. If you say no, or say nothing, they never do. You can change your mind afterwards and we will tell them to stop.
Some pages load fonts from Google, styling from a Tailwind CDN, and on a few property pages an embedded Google map. Loading any of these tells that company your IP address and roughly where you are. That is how the open web works, but you deserve to know it happens. None of it identifies you by name, and the Google map is the only one that may set a cookie of its own.
| Type | Kept for |
|---|---|
| An enquiry that goes nowhere | Two years from your last contact with us |
| An enquiry that becomes a purchase | Ten years, as accounting and anti-money-laundering law requires |
| Newsletter subscription | Until you unsubscribe |
| Record that you unsubscribed | Three years |
That last one may look odd. When you unsubscribe we keep a note of the date rather than erasing you entirely, because if you later say we contacted you without permission, that record is what proves when you opted out. If you would rather we erased it completely, ask and we will.
Under the GDPR you can ask us to do any of the following, free of charge. We answer within thirty days.
Email info@nordicql.com with what you want. You do not need to cite the law or use particular wording, “please delete my data” is enough.
If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain directly to the Norwegian Data Protection Authority (Datatilsynet), or to the equivalent authority in the EEA country where you live.
No system is perfect. If there is ever a breach that puts you at risk, we will tell you and the supervisory authority within 72 hours, as the law requires.
This site is meant for adults buying property. We do not knowingly collect information from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.
This version is dated 21 August 2026. If we change how we handle your information we will update this page and change that date. For anything significant, a new category of data, a new recipient, we will tell the people it affects directly rather than expecting them to re-read this page.
Ask us. A privacy policy nobody can follow is not transparency, and we would rather explain it than have you guess.
Email usWe speak
Write to us in any of them. The website itself is in English.