Privacy and security
Privacy and cookies
This notice explains how Intellipush AS processes personal data as a controller and how we act as a processor when customers use the service for their own recipient data. It also covers cookies and local storage on the website and in the customer portal.
Who is responsible
Intellipush AS, Norwegian organisation number 912 302 806, Veumveien 23, 1613 Fredrikstad, Norway, is the controller for the processing described in this notice. Questions and requests may be sent to info@intellipush.com or +47 46 20 90 90.
Our roles
Intellipush is the controller for its own purposes, including the website, sales, account administration, billing, support, security and legally required records. When a customer determines the purpose of business messaging and uses Intellipush to process recipient data on the customer's instructions, the customer is normally the controller and Intellipush the processor. The Data Processing Addendum is automatically incorporated as Schedule 1 to the service terms.
Data, purposes and legal bases
What we process depends on how you or your organisation uses and contacts us. We limit processing to what is necessary for the relevant purpose. References below are to Article 6(1) GDPR.
| Category | Purpose | Legal basis | Legitimate interest, where used |
|---|---|---|---|
| Name, contact details, organisation and enquiries | Respond to enquiries, sales dialogue and business follow-up | Article 6(1)(b) for requested pre-contract steps or contract; Article 6(1)(f) for relevant business dialogue not necessary for a contract | Responding to genuine business enquiries, maintaining relevant business relationships and preventing misuse |
| Account, user, login, role and language preference | Create, secure and administer the account and service | Article 6(1)(b) where necessary to provide the account and service; Article 6(1)(f) for secure administration and access control | Secure operation, authorised access and account documentation |
| Purchases, payments, invoices and accounting data | Process purchases and payments, invoice customers, prevent payment abuse and meet bookkeeping and tax duties | Article 6(1)(b), Article 6(1)(c), and Article 6(1)(f) for proportionate fraud prevention | Protecting Intellipush and customers against fraud, chargebacks and payment misuse |
| Support cases and communications | Guidance, troubleshooting, request documentation and support improvement | Article 6(1)(b) where necessary for the service; Article 6(1)(f) for efficient support and documentation | Resolving issues, improving support and maintaining proportionate records |
| IP addresses, logs, security events, complaints and abuse data | Operations, security, fault resolution, enforcement and claims | Article 6(1)(f); Article 6(1)(c) where a specific duty applies | Security, integrity, abuse prevention and legal claims |
| Contract, acceptance and governance records | Agreement administration, acceptance evidence, accountability, disputes and legal duties | Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) according to purpose | Documenting agreements, compliance and claims |
Sources of personal data
We normally receive data directly from you, the organisation you represent, other authorised account users, or through use of the website and service. We may also receive necessary data from payment, accounting, communications and security providers. When we act as processor, recipient data and instructions come from the customer or its integrations.
Who receives personal data
Internal access is granted according to need. We use provider categories for core infrastructure and backups, electronic communications and mobile networks, payments and accounting, email and support, and security and operational tools. Public authorities or advisers may receive data where required by law or necessary to establish or defend legal claims. We do not sell personal data.
Processing locations and international processing
Core infrastructure and backups are located with AWS in Ireland. This does not mean that all processing takes place in Norway or the EEA. Message transmission, mobile networks, recipient destinations and some supporting functions may involve processing in other countries. Where the rules on transfers outside the EEA apply, the relevant transfer basis and necessary safeguards must be assessed for the processing concerned.
How long data is retained
Data is retained for as long as needed for the purpose. Account and contract records may be kept while the relationship continues and afterwards where necessary for claims, security or legal records. Accounting data is retained for statutory periods. Support and security data is assessed according to the case, risk and documentation need. When Intellipush acts as processor, the export and erasure rules in Schedule 1 apply: normally a 30-day export opportunity, erasure from active systems within 60 days and then expiry through the ordinary 14-day backup cycle, subject to lawful exceptions.
Cookies, local storage and similar technologies
The public website uses first-party local storage to remember the active language. The value “nb” or “en” is stored under the key “intellipush_language” until you change the language or clear browser data. Navigation, filters and search functions that run only in the browser do not by themselves send those interactions to an analytics provider. The contact form uses Google reCAPTCHA v2 to prevent automated abuse. It is not loaded on an ordinary page view, but only after you begin using the form. Google may then receive data including the IP address, browser and device information and interaction data, and may use cookies or local storage under its own terms. Intellipush uses the control on the basis of our legitimate interest in protecting the website and handling genuine enquiries under Article 6(1)(f) GDPR. You may contact us by email or phone without using the form. The customer portal uses technologies necessary for sign-in, session management, language, security and delivery of requested functions. At publication, the website does not load analytics or advertising technologies. If Intellipush later introduces such non-essential technology, we will update this inventory and prevent it from loading until the required consent has been obtained.
Your rights
You may request access, rectification, erasure, restriction or portability, or object to processing, where the conditions under data-protection law are met. You may withdraw consent without affecting processing carried out before withdrawal. You may complain to the Norwegian Data Protection Authority. We may request information needed to verify your identity. If the request concerns a customer's SMS campaign, you should normally contact the organisation that determined its purpose; Intellipush assists the customer under the agreement and applicable law.
Automated decisions
Intellipush does not make decisions as a controller that are based solely on automated processing and produce legal or similarly significant effects for you. Technical security controls may automatically restrict suspicious activity, but relevant cases may be reviewed manually.
Children and young people
The service is designed for organisations and is not marketed to children. Customers planning processing or communications directed at children must make a separate assessment of lawfulness, risk, language and security before use. High-risk use may require written clarification with Intellipush or may be rejected under the Acceptable Use Policy.
Security and breaches
We use organisational and technical measures appropriate to the processing and risk. A high-level description is available on the security page. If a personal-data breach occurs, we follow applicable notification duties. When acting as processor, we notify and assist the customer in accordance with Schedule 1 and the law.
Changes to this notice
The notice is reviewed at least annually and when the processing or law changes materially. The current version and effective date appear at the top of the page. Material changes will be communicated in an appropriate way, depending on their significance and the customer relationship.
Last fact-checked: · Responsible function: Intellipush Management