Privacy Policy

Surfact AS ("Surfact", "we", "us") is a Norwegian company providing cold chain monitoring hardware and software. We are the data controller for personal data processed through this website and our direct communications with you.

Questions about this policy or your data: sales@surfact.com.

• Contact data you submit in forms: name, company, email, phone and the content of your message.
• Usage data: pages visited, referrer, approximate location derived from IP, browser and device type.
• Cookie data: strictly necessary cookies plus analytics cookies where you consent.
• Platform data for customers: account details and shipment telemetry such as temperature, humidity, shock and location. Telemetry describes goods and assets, not individuals.

• To answer enquiries and provide quotes (legitimate interest, or steps prior to a contract).
• To deliver and support our products and services (contract).
• To improve our website and understand traffic (consent for analytics cookies).
• To send product or company updates you asked for (consent, withdrawable at any time).
• To meet legal, accounting and compliance obligations (legal obligation).

We use strictly necessary cookies to run the site, and analytics cookies only where you have given consent. You can change or withdraw your cookie choices at any time through your browser settings or the consent banner.

We share personal data only with processors that help us operate: hosting and infrastructure, email delivery, analytics and CRM providers. They act on our instructions under data processing agreements. We never sell personal data.

Data is primarily stored within the EU/EEA. Where a provider processes data outside the EEA, we rely on EU Standard Contractual Clauses or an adequacy decision.

Enquiry data is kept for up to 24 months after our last contact unless a customer relationship begins. Customer and telemetry data is retained for the duration of the agreement plus any legally required period. Accounting records are kept for five years as required by Norwegian law.

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. You may withdraw consent at any time. Contact us at sales@surfact.com. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

We apply access control, encryption in transit, least privilege and regular review of our systems. No method of transmission is completely secure, but we work continuously to protect your data.

We may update this policy. Material changes will be reflected by a new "last updated" date on this page.