At Bebran Digital ("Bebran, we, us, or our"), we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website no.bebran.com, engage our digital marketing and web development services, or interact with us.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) as incorporated into Norwegian law by the Personal Data Act (personopplysningsloven), the Electronic Communications Act (ekomloven), and the Marketing Control Act (markedsføringsloven). For the purposes of these laws, Bebran Digital is the data controller of your personal data.
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.
1. Information We Collect
We collect information that identifies, relates to, or can reasonably be linked to an individual ("Personal Data").
- Information You Provide Voluntarily: When you fill out a contact form, book a strategy call, sign up for a resource, or communicate with us via email, telephone, or WhatsApp, we may collect: contact identifiers (full name, business email address, phone number); company information (company name, organisation number, website URL, industry, estimated marketing budget); and communication records (notes from strategy sessions, chat logs, project briefs).
- Information Collected Automatically: When you visit our website, our servers and analytics tools automatically collect technical data, including log and usage data (IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, diagnostic data); device information; and data from cookies, pixels, and similar technologies, as explained in our Cookie Policy.
We do not intentionally collect special category data (such as health information) and ask that you do not send it to us.
2. Use of Your Personal Data and Our Legal Basis
Under the GDPR, we must have a legal basis for every use of your Personal Data. We use it for the following purposes:
- To provide and maintain our Service: including monitoring the usage of our website and client infrastructure. (Legal basis: performance of a contract; legitimate interests.)
- To manage your enquiries and interactions: including contact form submissions, proposals, and communications. (Legal basis: legitimate interests; steps taken at your request before entering into a contract.)
- For the performance of a contract: the development, compliance, and delivery of service agreements, proposals, or contracts for marketing and web development services you have purchased or enquired about. (Legal basis: contract.)
- To contact you by email, telephone, SMS, WhatsApp, or other electronic communication: regarding updates, technical updates, or security notifications related to contracted services. (Legal basis: contract; legitimate interests.)
- To provide marketing insights: news, offers, and information about services similar to those you have enquired about. Under the Marketing Control Act, we send electronic marketing to individuals only with prior consent, or to existing customers about similar services with a clear, free opt-out in every message. For business contacts, we rely on legitimate interests. You can opt out at any time.
- To manage your requests: including support requests and data protection requests. (Legal basis: legal obligation; legitimate interests.)
- For business transfers: to evaluate or conduct a merger, restructuring, or sale of some or all of our assets. (Legal basis: legitimate interests.)
- For analytics: to understand usage trends, measure campaign effectiveness, and improve our website and services. (Legal basis: consent, given through our cookie banner.)
3. Sharing Your Information & Service Providers
We do not sell, rent, or trade your personal data. We may share your personal data in the following situations:
- Service Providers: We use third-party companies and individuals to help us operate our Service ("Service Providers"), such as hosting, CRM, email, scheduling, and payment providers. They process Personal Data only on our instructions, under a data processing agreement as required by Article 28 GDPR, and may not use it for any other purpose.
- Analytics — Google Analytics: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. It is only activated if you accept analytics cookies. You can withdraw consent at any time through the "Cookie Settings" link on our website or by installing the Google Analytics opt-out browser add-on. For more information, please visit the Google Privacy & Terms page.
- Behavioural Remarketing: With your consent, we use remarketing services to show our ads on third-party websites after you visit our Service. Advertising and remarketing cookies are only set if you accept them in our cookie banner.
- Google Ads: Google provides the Google Ads remarketing service. You can manage or turn off ad personalisation through Google's My Ad Center / Ads Settings page. For more information, please visit the Google Privacy & Terms page.
- Meta (Facebook and Instagram): Meta provides remarketing and conversion-measurement services. You can manage interest-based advertising through your Meta ad preferences, and opt out of interest-based advertising from participating companies through Your Online Choices (youronlinechoices.eu), run by the European Interactive Digital Advertising Alliance. For more information, please see Meta's Privacy Policy.
- For business transfers: We may share or transfer your personal data in connection with any merger, sale of company assets, financing, or acquisition of all or part of our business.
- With Affiliates: We may share your information with our affiliates, including our parent company Bebran Digital Pvt. Ltd. in India, which provides delivery and support for our services. We require affiliates to honour this Privacy Policy.
- With business partners: We may share your information with trusted business partners to offer you relevant products, services, or promotions, only where you have agreed or where we have a legal basis to do so.
- With other users: When you share personal information in public areas, it may be viewed by others.
- With your consent: We may disclose your personal data for any other purpose with your explicit consent.
4. Retention of Your Personal Data
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, and to comply with our legal obligations, resolve disputes, and enforce our agreements. As a guide:
- Enquiries that do not become clients: up to 24 months from last contact.
- Client records and contracts: the duration of the engagement plus 3 years (the general Norwegian limitation period for claims).
- Accounting records and invoices: 5 years, as required by the Norwegian Bookkeeping Act (bokføringsloven).
- Analytics data: no longer than 14 months.
5. International Transfers of Your Personal Data
Your information may be processed at our operating offices and wherever the parties involved in processing are located, including India and the United States, which are outside the European Economic Area (EEA).
Where we transfer Personal Data outside the EEA, we ensure it is protected by an appropriate safeguard, such as an adequacy decision, the European Commission's Standard Contractual Clauses (SCCs) together with any necessary supplementary measures, or, for US providers, certification under the EU-US Data Privacy Framework. You can request a copy of these safeguards by contacting us.
6. Disclosure of Your Personal Data
Business Transactions: If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement & Legal Requirements: We may disclose your Personal Data if required by law or in response to valid requests by public authorities (e.g. a court, the police, or the Norwegian Tax Administration), or where we believe in good faith that it is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
7. Security of Your Personal Data
The security of your Personal Data is important to us. We use appropriate technical and organisational measures to protect it, but no method of transmission over the Internet or electronic storage is 100% secure. Where a personal data breach is likely to result in a risk to your rights, we will notify the Norwegian Data Protection Authority (Datatilsynet) within 72 hours and inform you without undue delay where required by law.
8. Cookies, "Do Not Track" and Your Choices
We do not currently respond to browser "Do Not Track" (DNT) signals. Instead, under the Electronic Communications Act, we ask for your consent before setting any cookies that are not strictly necessary, through our cookie banner and the "Cookie Settings" link on our website. See our Cookie Policy for details.
9. Your Data Protection Rights (GDPR)
Under the GDPR and the Norwegian Personal Data Act, you have the following rights:
- The Right of Access: You can request a copy of the personal data we hold about you.
- The Right of Rectification: You can have inaccurate or incomplete information corrected.
- The Right to Erasure: You can request deletion of your data in certain circumstances.
- The Right to Object & Restrict: You can object to or request restriction of our processing, and you can object to direct marketing at any time.
- The Right to Data Portability: You can receive your information in a structured, machine-readable format.
- The Right to Withdraw Consent: You can withdraw your consent at any time where we rely on consent.
- Rights related to automated decision-making: We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
To exercise any of these rights, please contact us at info@bebran.com. We will respond within one month of receiving your request (this may be extended by up to two further months for complex requests). We may ask you to verify your identity before responding. There is normally no fee.
Right to complain: If you are unhappy with how we handle your personal data, please contact us first. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.
10. Children's Privacy
Our services are designed for business professionals and commercial enterprises. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete it.
11. Links to Other Sites
Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will post any updates on this page and revise the "Last Updated" date at the top. Where changes are significant, we will notify you by email or through a notice on our website. Changes are effective when they are posted on this page.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Company Name: Bebran Digital Pvt. Ltd. (Norway Operations)
- Organisation Number (org.nr.): [to be confirmed]
- Official Norway Address: BeBran Digital Pvt. Ltd.Furubakken 139, Bergen, Norway -5057
- Website: no.bebran.com
- Email: info@bebran.com
- Phone / WhatsApp: +91-8349815741
- EEA Representative (Article 27 GDPR): [name and address — to be confirmed if no Norwegian/EEA establishment]