Privacy policy.

19. august 2026

This Privacy Policy explains how HUBEX AS (“Hubex”, “we”, “us” or “our”) collects, uses and protects personal data when you visit hubex.io, contact us, or become a customer.

HUBEX AS is the data controller for the personal data described in this Privacy Policy.

HUBEX AS
Organisation number: 924 980 729
Breiviken 1D
5042 Bergen
Norway

1. What personal data we collect

We keep the personal data we collect to a minimum.

We primarily collect information that you provide directly to us, including when you:

  • submit a form on our website;
  • contact us with a question or enquiry;
  • request information about our services;
  • subscribe to communications from us; or
  • become or are a customer of Hubex.

Depending on how you interact with us, this may include:

  • your name;
  • work email address;
  • telephone number;
  • company name and job title;
  • information relating to our customer relationship; and
  • any other information you choose to include in a form, message or other communication with us.

We ask that you do not submit sensitive personal data through our website unless it is necessary and specifically requested.

2. Website data and cookies

Our website is built using HubSpot CMS.

HubSpot and similar website technologies may process limited technical information when you visit our website, such as information about your browser, device, IP address and interaction with the website.

Where required by law, non-essential cookies and similar technologies are used only after you have provided consent through our cookie banner.

You can change or withdraw your cookie consent at any time through the cookie settings available on our website.

More detailed information about the cookies used on our website is available through our cookie settings.

3. How we use personal data

We use personal data only where we have a legitimate business or legal reason to do so.

We may use your personal data to:

  • respond to enquiries and requests;
  • communicate with prospective and existing customers;
  • provide and manage our services;
  • manage our customer relationships;
  • send marketing communications where permitted;
  • operate, maintain and improve our website;
  • protect our website and systems against misuse or security threats; and
  • comply with legal and regulatory obligations.

4. Legal basis for processing

Under the General Data Protection Regulation (“GDPR”), our processing will generally be based on one or more of the following grounds:

Contract. Processing is necessary to enter into or perform an agreement with you or the organisation you represent.

Legitimate interests. Processing is necessary for our legitimate interests in operating our business, communicating with customers and prospective customers, and managing our customer relationships, provided those interests do not override your rights and freedoms.

Consent. Where we rely on your consent, for example for certain cookies or marketing activities, you can withdraw that consent at any time.

Legal obligation. In some cases, we need to process or retain information to comply with applicable law.

5. HubSpot

We use HubSpot CMS and HubSpot CRM to operate our website and manage information submitted to us.

Information submitted through our website may therefore be stored and processed within HubSpot.

HubSpot acts as a service provider and data processor on our behalf where it processes our customer data. HubSpot maintains its own privacy, security and data-processing arrangements, including mechanisms for international transfers of personal data.

We do not sell personal data.

6. Who we share personal data with

We do not share personal data with third parties except where necessary to operate our business, provide our services or comply with the law.

This may include service providers such as HubSpot that process information on our behalf.

We require service providers that process personal data on our behalf to protect that information appropriately and process it only for the agreed purposes.

We may also disclose personal data where required by law, a court, a regulatory authority or another legally binding request.

7. International transfers

Some of our service providers may process personal data outside Norway or the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we require an appropriate legal mechanism under applicable data-protection law, such as an adequacy decision or the European Commission's Standard Contractual Clauses.

8. How long we keep personal data

We keep personal data only for as long as necessary for the purpose for which it was collected.

For enquiries and prospective-customer communications, information will normally be retained while the enquiry or potential relationship remains relevant and deleted when we no longer have a legitimate reason to retain it.

Information relating to customers may be retained for the duration of the customer relationship and afterwards where necessary to meet accounting, contractual or other legal obligations.

If you withdraw consent for marketing communications, we will stop sending those communications. We may retain limited information necessary to record your opt-out.

9. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

Personal data stored through HubSpot is also subject to HubSpot's security measures and contractual data-protection commitments.

10. Your rights

Subject to applicable law, you may have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal data;
  • request restriction of our processing;
  • object to processing based on legitimate interests;
  • receive certain personal data in a portable format;
  • withdraw consent at any time where processing is based on consent; and
  • lodge a complaint with a data-protection authority.

These rights may be subject to exceptions under applicable law.

To exercise any of these rights, contact us using the details below.

11. Complaints

If you believe that we have processed your personal data unlawfully, we encourage you to contact us first so that we can investigate the matter.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet
Postboks 458 Sentrum
0105 Oslo
Norway

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example if our services, suppliers or legal obligations change.

The latest version will always be published on our website together with the date it was last updated.

13. Contact us

For questions about this Privacy Policy, our processing of personal data, or to exercise your privacy rights, contact:

HUBEX AS
Breiviken 1D
5042 Bergen
Norway

Email: support@hubex.io