Website Privacy Policy

August 28, 2025

‍1. Introduction

This Privacy Policy explains how Kindly AS ("Company," "we," "us," or "our") collects, uses, and protects your personal data when you visit and interact with our website, https://www.kindly.ai ("Website").

We are committed to safeguarding your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using the Website, you agree to the terms outlined in this Privacy Policy.

2. Who We Are and How to Contact Us

Kindly AS, located at Fred Olsens gate 1, 0152 Oslo, Norway, is the Data Controller for the personal data collected through this Website. This means we determine why and how your data is processed.

If you have any questions about this Privacy Policy or your data, please contact our Data Protection Officer:

Email: dpo@kindly.ai
Mail: Fred Olsens gate 1, 0152 Oslo, Norway

3. What Information We Collect

When you use our Website, we may collect the following types of personal data:

a. Information You Provide Directly

This includes information you actively submit to us:

Name
Email address
Phone number
Any other information you provide through contact forms or chatbots.

b. Information Collected Automatically (Usage Data)

This data is gathered as you interact with our Website:

IP address (Internet Protocol address)
Browser type and version
Device type and operating system
Referring pages and pages visited on our Website
Time and date of your visits
Cookie data and unique identifiers (for more details, see our Cookie Policy)

4. How We Use Your Information and Our Legal Basis (GDPR)

We use your personal data for the following purposes, always based on a valid legal reason as required by GDPR:

To Operate and Maintain the Website: To ensure our Website functions correctly and securely.
- Legal Basis: Our legitimate interests in providing a functional and secure online presence.
To Respond to Your Inquiries or Support Requests: To communicate with you and address your questions or service needs.
- Legal Basis: Performance of a contract (e.g., if your inquiry relates to a service agreement) or our legitimate interests in effective customer communication.
To Analyze Website Usage and Improve Our Services: To understand how our Website is used and make improvements to its features and performance.
- Legal Basis: Our legitimate interests in continuously enhancing our services and user experience.
To Send Marketing Communications: To provide you with news, special offers, and information about our products and services that may interest you. You can opt out at any time.
- Legal Basis: Your consent (for direct marketing where required) or our legitimate interests (for existing customers under "soft opt-in" rules).
To Deliver Personalized Advertising: To tailor and display content and advertisements based on your interests and Website interactions.
- Legal Basis: Our legitimate interests in promoting our services and, where required, your consent for certain types of advertising cookies.
To Comply with Legal Obligations: To fulfill legal requirements, enforce our terms, or protect our legal rights.
- Legal Basis: Legal obligations.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like web beacons, tags, and scripts) to enhance your user experience, analyze Website traffic, and serve targeted advertisements. These technologies help us:

Provide essential Website functionalities.
Remember your preferences (e.g., login details, language).
Understand how you use our Website.
Deliver relevant advertisements.

You can manage your cookie preferences via our Cookie Banner or through your browser settings.

For more detailed information on the types of cookies we use, their specific purposes, their providers, and how you can manage your preferences, please see our dedicated [Cookie Policy].

6. Who We Share Your Data With

We do not sell or rent your personal data to third parties. We may share your data in specific situations:

Service Providers
We share your personal information with trusted third-party companies who perform services on our behalf. These include:

Analytics Providers: (e.g., Google Analytics, Hotjar, LinkedIn Insight) to monitor and analyze Website usage.
CRM & Sales Tools: (e.g., HubSpot, Salesloft) for managing customer relationships, sales processes, and communications.
Email Marketing Services: (e.g., HubSpot) for managing and sending emails.
Account-Based Marketing & Targeting: (e.g., 6sense) for identifying and engaging potential business prospects.
Other providers who assist in operating and improving our Service. These providers are considered Data Processors under GDPR and are contractually obligated to protect your data and only use it as instructed by us.

Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions.

Affiliates and Group Companies: We may share your information with our parent company, subsidiaries, joint venture partners, or other companies under common control, ensuring they honor this Privacy Policy.

Authorities (Legal Compliance): We may disclose your data when required by law, court order, or governmental regulation, or if we believe it's necessary to protect our rights, property, or safety, or that of others.

Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. Your personal data may be transferred as part of such a transaction.

With Your Consent: We may share your information for any other purpose if you give us your explicit consent.

7. International Data Transfers

Your information, including Personal Data, is processed at Kindly AS's operating offices in Norway and at other locations where our service providers may be located. This means your information may be transferred to—and maintained on—computers outside of your country, or other governmental jurisdiction, where data protection laws may differ.

When personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data. This typically includes using Standard Contractual Clauses (SCCs) approved by the European Commission, or relying on other legally compliant transfer mechanisms that provide equivalent protection. By continuing to use our Service and providing your information, you agree to such transfers.

8. Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. This means we keep your data for as long as you use our services or interact with us, and then for a period to comply with our legal, accounting, or reporting obligations, or to resolve disputes and enforce our legal agreements.

Usage data is generally kept for a shorter period unless it is used to strengthen the security or improve the functionality of our Service, or if we are legally obligated to retain this data for longer time periods.

9. Your Data Protection Rights (GDPR)

Under GDPR, you have important rights regarding your personal data. We are committed to respecting the confidentiality of your Personal Data and guaranteeing you can exercise these rights:

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete data we hold about you.
Right to Object to Processing: You have the right to object to our processing of your personal data where we are relying on a legitimate interest as the legal basis, or for direct marketing purposes.
Right to Erasure ("Right to be Forgotten"): You have the right to ask us to delete or remove your personal data when there is no good reason for us to continue processing it (e.g., if it's no longer necessary for the purposes for which it was collected).
Right to Restriction of Processing: You have the right to ask us to limit the way we use your personal data in certain circumstances (e.g., if you contest the accuracy of the data).
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transferred to another organization, where technically feasible. This right applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time. This won't affect any processing that occurred before you withdrew your consent.

To exercise any of these rights, please contact us at dpo@kindly.ai. We may ask you to verify your identity before responding to such requests. We will do our best to respond to your request as soon as possible.

You also have the right to lodge a complaint with your local data protection supervisory authority. For Norway, this is Datatilsynet (the Norwegian Data Protection Authority).

10. Security

The security of your Personal Data is important to us. We take appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, and destruction. However, please remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

11. Children's Privacy

Our Website is not intended for anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we will take steps to remove that information from our servers.

12. Links to Other Websites

Our Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We may also let you know via email and/or a prominent notice on our Service, prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact our Data Protection Officer:

Email: dpo@kindly.ai
Mail: Fred Olsens gate 1, 0152 Oslo, Norway

‍