Privacy and security
Privacy and cookies
This notice explains how Intellipush AS processes personal data as a controller and how we act as a processor when customers use the service for their own recipient data. It also covers cookies and local storage on the website and in the customer portal.
Language choices and suggestions
Your browser language may be used locally to show a suggestion for the other language version, but the website does not redirect you automatically. If you dismiss the language suggestion, the value “1” is stored under “intellipush_language_suggestion_dismissed” in session storage until the browser session ends.
Who is responsible
Intellipush AS, Norwegian organisation number 912 302 806, Veumveien 23, 1613 Fredrikstad, Norway, is the controller for the processing described in this notice. Questions and requests may be sent to info@intellipush.com or +47 46 20 90 90.
Our roles
Intellipush is the controller for its own purposes, including the website, sales, account administration, billing, support, security and legally required records. When a customer determines the purpose of business messaging and uses Intellipush to process recipient data on the customer's instructions, the customer is normally the controller and Intellipush the processor. The Data Processing Addendum is automatically incorporated as Schedule 1 to the service terms.
Data, purposes and legal bases
What we process depends on how you or your organisation uses and contacts us. We limit processing to what is necessary for the relevant purpose. References below are to Article 6(1) GDPR.
| Category | Purpose | Legal basis | Legitimate interest, where used |
|---|---|---|---|
| Name, contact details, organisation and enquiries | Respond to enquiries, sales dialogue and business follow-up | Article 6(1)(b) for requested pre-contract steps or contract; Article 6(1)(f) for relevant business dialogue not necessary for a contract | Responding to genuine business enquiries, maintaining relevant business relationships and preventing misuse |
| Account, user, login, role and language preference | Create, secure and administer the account and service | Article 6(1)(b) where necessary to provide the account and service; Article 6(1)(f) for secure administration and access control | Secure operation, authorised access and account documentation |
| Purchases, payments, invoices and accounting data | Process purchases and payments, invoice customers, prevent payment abuse and meet bookkeeping and tax duties | Article 6(1)(b), Article 6(1)(c), and Article 6(1)(f) for proportionate fraud prevention | Protecting Intellipush and customers against fraud, chargebacks and payment misuse |
| Support cases and communications | Guidance, troubleshooting, request documentation and support improvement | Article 6(1)(b) where necessary for the service; Article 6(1)(f) for efficient support and documentation | Resolving issues, improving support and maintaining proportionate records |
| IP addresses, logs, security events, complaints and abuse data | Operations, security, fault resolution, enforcement and claims | Article 6(1)(f); Article 6(1)(c) where a specific duty applies | Security, integrity, abuse prevention and legal claims |
| Contract, acceptance and governance records | Agreement administration, acceptance evidence, accountability, disputes and legal duties | Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) according to purpose | Documenting agreements, compliance and claims |
Sources of personal data
We normally receive data directly from you, the organisation you represent, other authorised account users, or through use of the website and service. We may also receive necessary data from payment, accounting, communications and security providers. When we act as processor, recipient data and instructions come from the customer or its integrations.
Who receives personal data
Internal access is granted according to need. We use provider categories for core infrastructure and backups, electronic communications and mobile networks, payments and accounting, email and support, and security and operational tools. Public authorities or advisers may receive data where required by law or necessary to establish or defend legal claims. We do not sell personal data.
Processing locations and international processing
Core infrastructure and backups are located with AWS in Ireland. This does not mean that all processing takes place in Norway or the EEA. Message transmission, mobile networks, recipient destinations and some supporting functions may involve processing in other countries. Where the rules on transfers outside the EEA apply, the relevant transfer basis and necessary safeguards must be assessed for the processing concerned.
How long data is retained
Data is retained for as long as needed for the purpose. Account and contract records may be kept while the relationship continues and afterwards where necessary for claims, security or legal records. Accounting data is retained for statutory periods. Support and security data is assessed according to the case, risk and documentation need. When Intellipush acts as processor, the export and erasure rules in Schedule 1 apply: normally a 30-day export opportunity, erasure from active systems within 60 days and then expiry through the ordinary 14-day backup cycle, subject to lawful exceptions.
Cookies, local storage and similar technologies
The public website uses first-party local storage to remember the active language. The value “nb” or “en” is stored under the key “intellipush_language” until you change the language or clear browser data. Navigation, filters and search functions that run only in the browser do not by themselves send those interactions to an analytics provider. The contact form uses Google reCAPTCHA v2 to prevent automated abuse. It is not loaded on an ordinary page view, but only after you begin using the form. Google may then receive data including the IP address, browser and device information and interaction data, and may use cookies or local storage under its own terms. Intellipush uses the control on the basis of our legitimate interest in protecting the website and handling genuine enquiries under Article 6(1)(f) GDPR. You may contact us by email or phone without using the form. The customer portal uses technologies necessary for sign-in, session management, language, security and delivery of requested functions. At publication, the website does not load analytics or advertising technologies. If Intellipush later introduces such non-essential technology, we will update this inventory and prevent it from loading until the required consent has been obtained.
Your rights
You may request access, rectification, erasure, restriction or portability, or object to processing, where the conditions under data-protection law are met. You may withdraw consent without affecting processing carried out before withdrawal. You may complain to the Norwegian Data Protection Authority. We may request information needed to verify your identity. If the request concerns a customer's SMS campaign, you should normally contact the organisation that determined its purpose; Intellipush assists the customer under the agreement and applicable law.
Automated decisions
Intellipush does not make decisions as a controller that are based solely on automated processing and produce legal or similarly significant effects for you. Technical security controls may automatically restrict suspicious activity, but relevant cases may be reviewed manually.
Children and young people
The service is designed for organisations and is not marketed to children. Customers planning processing or communications directed at children must make a separate assessment of lawfulness, risk, language and security before use. High-risk use may require written clarification with Intellipush or may be rejected under the Acceptable Use Policy.
Security and breaches
We use organisational and technical measures appropriate to the processing and risk. A high-level description is available on the security page. If a personal-data breach occurs, we follow applicable notification duties. When acting as processor, we notify and assist the customer in accordance with Schedule 1 and the law.
Changes to this notice
The notice is reviewed at least annually and when the processing or law changes materially. The current version and effective date appear at the top of the page. Material changes will be communicated in an appropriate way, depending on their significance and the customer relationship.
Last fact-checked: · Responsible function: Intellipush Management
Updated website analytics information – 18 October 2026
This supplement replaces the cookie-section statement that the website does not load analytics. With your consent, Intellipush AS uses Google Analytics 4 to measure visits and content use and improve the website. The legal basis is consent. Google receives information about pages visited, browsers, devices and technical connection data, and may process data outside the EEA. Google’s privacy information describes its processing in more detail.
Analytics loads only after you accept analytics. Your choice covers Google Analytics by Intellipush AS on www.intellipush.com and portal.intellipush.com. GA4 may use first-party cookies such as _ga and _ga_*, normally lasting up to two years. Your choice, timestamp and policy version are stored in __Secure-intellipush_analytics_consent_v2 on intellipush.com for up to 180 days, without automatic renewal on visits. A local copy signals changes and remembers rejection if cookies are blocked; that copy can never grant consent on its own. The portal must support the same arrangement before it can reuse the choice. You can reject or withdraw using “Change analytics choice”. Withdrawal stops further measurement and removes accessible GA cookies; it does not erase information already received by Google. Contact us with questions or rights requests.
Analytics consent does not grant advertising storage or ad personalisation. Page context is limited to known public pages and fixed titles, without query parameters or fragments. Once both sites support this arrangement, open active tabs detect changes through cookie events or periodic checks, and when you return to a tab. Background tabs may be delayed. Cookies on intellipush.com are technically readable by subdomains, but this choice does not cover keyshare or other services. Removing GA cookies on .intellipush.com may also affect analytics identifiers in other apps. Previous website-only acceptance is not automatically extended to the portal.