Privacy notice
This notice explains what personal data Fjordgrid collects, why, who we share it with and what your rights are under the GDPR. The website itself uses no cookies.
Last updated
Who is responsible
The controller of the personal data described here is FJORDGRID (SMC-PRIVATE) LIMITED (“Fjordgrid”, “we”), registered at House no 26D, Block A, Mohalla Hajvery Housing Scheme, Canal Road, Lahore Cantt, District Lahore, Punjab, Pakistan. For any privacy question or request, email [email protected].
We follow the EU General Data Protection Regulation (GDPR), which applies in Norway through the EEA Agreement, for everyone whose data we handle, wherever they are.
Data in your integrations
When your business uses a Fjordgrid integration, we process transaction data from the systems you connect, such as amounts, dates, references and account numbers in your books, to post it to your accounting system. For that data, your business is the controller and Fjordgrid is the processor. We process it only on your instructions, under the data processing agreement you accept when you sign up at app.fjordgrid.com. We do not request customers’ names, phone numbers or payment messages from payment providers.
What we collect, why, and for how long
| Data | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Website request data: IP address, browser type, page requested, time | Delivering the website and protecting it against abuse | Legitimate interests (art. 6(1)(f)) | Short-term security logs kept by Cloudflare |
| Anonymous visit statistics: pages viewed, referring site, country, device type | Learning which pages are useful. Cloudflare Web Analytics sets no cookies and does not identify or track you across sites. | Legitimate interests (art. 6(1)(f)) | Aggregated statistics only |
| Messages you send us: name, email address, company, what you write | Answering you and following up | Legitimate interests (art. 6(1)(f)), or steps before a contract at your request (art. 6(1)(b)) | Up to 24 months after our last exchange |
| Customer account data: name, work email, company, organisation number, user settings | Providing the service, support, and important notices about your account | Performance of our contract (art. 6(1)(b)) | While you are a customer, then up to 12 months |
| Billing data: billing contact, country, subscription, invoices. Card details are handled only by Paddle and never reach us. | Charging for subscriptions, tax and accounting | Contract (art. 6(1)(b)) and legal obligation (art. 6(1)(c)) | 5 years after the end of the financial year, as Norwegian bookkeeping law requires |
| Product emails, only if you opt in | Telling you about new integrations | Consent (art. 6(1)(a)), which you can withdraw at any time | Until you unsubscribe |
The contact form on this website sends nothing to us. It opens your own email app with the message filled in, and nothing reaches us until you press send. The website uses no cookies, advertising trackers, social media pixels or third-party fonts. If we ever add cookies that need consent, we will ask first.
Who receives your data
We never sell personal data. We share it only with:
- Paddle.com Market Limited (Paddle), our reseller and Merchant of Record. Paddle processes your payment, billing and tax details when you buy a subscription, as an independent controller under the Paddle privacy notice.
- Service providers who process data on our behalf under data processing agreements: Cloudflare (website hosting, security and statistics), Amazon Web Services (servers and storage for the integration service, in AWS European regions), and Zoho Corporation (email).
- The systems you connect, such as your accounting system, but only the data you tell an integration to send there.
- Professional advisers, such as accountants, auditors and lawyers, when needed and under confidentiality.
- Authorities, when the law requires it.
Transfers outside the EEA
FJORDGRID (SMC-PRIVATE) LIMITED is based in Pakistan, and some of our providers process data outside the European Economic Area. Each such transfer is protected by an adequacy decision, such as the EU–US Data Privacy Framework, or by the European Commission’s Standard Contractual Clauses. For transfers to us, those clauses come with additional safeguards: data encrypted in transit and at rest, and access limited to the staff who need it. Email us for a copy of the safeguards that apply to your data.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy
- rectification of data that is wrong or incomplete
- erasure of your data
- restriction of how we use it
- portability: get your data in a machine-readable format
- object to processing based on our legitimate interests
- withdraw consent at any time, where we rely on consent, without affecting earlier processing
- complain to a supervisory authority. In Norway that is Datatilsynet. You can also complain where you live or work.
To use any of these rights, email [email protected]. We will respond within one month. If a request is about data in an integration, we will pass it to the business that controls that data and help them answer it.
How we protect your data
We protect personal data with appropriate technical and organisational measures. These include HTTPS everywhere, encryption of stored credentials, least-privilege access, multi-factor authentication on our administrative accounts, and regular backups. The website itself has no login, no database and no forms that send data to a server.
Children
Our website and service are for businesses and are not directed at children.
Changes
If we change this notice, we will update it here and change the date at the top. If a change materially affects customers, we will also tell them by email.