Template — pending legal review. This policy is provided as a working draft. Have it reviewed by qualified counsel before relying on it for production traffic.

Privacy Policy

Last updated: June 2026

1. Data Controller

Nordvakt Cybersecurity (the "Company", "we", "us") is the data controller for personal data collected through this website and our phishing simulation services. Contact: hello@nordvakt.co.

2. Personal Data We Collect

  • Contact details you submit through our forms (name, email, company).
  • Information about your organization (size, sector, training context).
  • Aggregated, pseudonymized telemetry from phishing simulation campaigns (when you are a customer).

3. Lawful Basis (Art. 6 GDPR)

  • Consent for marketing follow-up and demo requests.
  • Performance of a contract when we deliver simulations to a paying customer.
  • Legitimate interest for service security, fraud prevention, and aggregate analytics.

4. Retention

Lead and contact form data are retained for up to 24 months after our last interaction with you, unless you request deletion sooner. Customer campaign data is retained for the duration of the contract plus 12 months for audit purposes.

5. Subprocessors

We use EU/EEA-based subprocessors only. A current list is available in our DPA and on request. We never transfer personal data outside the EU/EEA without an adequacy decision or appropriate safeguards.

6. Data Processing Agreement

A standard EU-aligned DPA is available for all paying customers. Contact hello@nordvakt.co to receive it.

7. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data, and to object to processing. To exercise these rights, email hello@nordvakt.co. You also have the right to lodge a complaint with your local supervisory authority.

8. Security

We apply technical and organizational measures appropriate to the risk, including encryption in transit and at rest, principle-of-least-privilege access controls, and routine security testing.

9. Changes

We may update this policy. Material changes will be communicated to active customers and to anyone who has opted into marketing communications.

10. Contact

Questions? Email hello@nordvakt.co.