Privacy Policy

Last updated: 15th January 2026

Data Controller Information

stellargrowth AS (registration number 369852147) is the data controller responsible for the processing of your personal data. We are committed to protecting your privacy and ensuring that your personal information is handled in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data We Collect

When you visit our website or use our services, we may collect various types of personal data. The data we collect includes information you provide directly to us, such as when you contact us through our website forms, email, or phone. This may include your name, email address, phone number, company name, and any messages or enquiries you send to us.

We also collect technical data automatically when you visit our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and the date and time of your visit. This information helps us understand how our website is used and improve our services.

How We Use Your Information

We use the personal data we collect for several purposes. How we use your information depends on the services you use and the choices you make. We process your personal data to respond to your enquiries and provide customer support, to deliver our vendor lifecycle management services, and to communicate with you about our services and any updates.

We may also use your data to improve our website and services, conduct analytics to understand user behaviour, and ensure the security and proper functioning of our systems. When we have your consent, we may use your information for marketing purposes, including sending you information about our services that may be of interest to you.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we must have a legal basis for processing your personal data. The legal basis we rely on includes:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legal obligation: Where processing is necessary for compliance with legal obligations
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms

Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and delivering our services, provided they agree to keep your information confidential and secure.

We may also disclose your information if required by law, to protect our rights or safety, or in connection with a business transfer or merger.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or appropriate contractual clauses.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. The specific retention periods depend on the type of data and the purpose for processing. Generally, we retain contact information and communication records for up to seven years after our last interaction with you, unless a longer retention period is required by law.

Your Rights

Under GDPR, you have several rights regarding your personal data:

• Right of access: You can request information about the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request limitation of how we process your data
• Right to data portability: You can request transfer of your data to another organisation
• Right to object: You can object to certain types of processing
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have not complied with data protection laws. In Norway, the supervisory authority is Datatilsynet (The Norwegian Data Protection Authority).