Privacy policy

Who we are

SiteRemake makes proposals for new websites for businesses in Norway and the United Kingdom. The controller is the company behind SiteRemake; you will find full contact details at the bottom of this page.

What information we process, and where it comes from

We use both publicly available information about the business and information you give us yourself. The sources are:

• Public company registers: for Norwegian businesses, the Brønnøysund Register Centre (company name, organisation number, business address and industry code). For UK businesses we use the company details you give us in the form.
• The business’s own website: publicly published content such as text, images, services and contact details (phone, email, address).
• Enquiries you send us: name, phone, email and content you provide in forms or by email, for example when you make a request, place an order or write a review.
• Use of the service: information about orders and payment status, sign-in and technical logs needed for secure operation.
• Chat on the front page: When you use the chat, we process the messages and any attachments you send, contact details you provide, and technical information needed to deliver and secure the conversation. We use the information to answer your enquiry and follow up the matter.

We do not buy personal data, and we do not track you across other websites.

What we use the information for, and on what basis

• To analyse the business’s existing website and make a proposal for a new website without obligation, and to contact the business about the proposal. Basis: legitimate interest (GDPR Article 6(1)(f)), offering a relevant service to registered businesses based on public information. You can object at any time, see your rights below.
• To follow up requests before an agreement and deliver an agreed service when you are a party to the agreement yourself. Basis: contract, or steps you have asked for before entering into a contract (Article 6(1)(b)).
• To answer other enquiries and manage contact with employees and other contact persons at business customers. Basis: legitimate interest in answering enquiries and following up the customer relationship (Article 6(1)(f)). The contract basis is not used just because your employer is a customer.
• To secure sign-in, prevent misuse and keep the service running. Basis: legitimate interest in protecting the service and the information it processes (Article 6(1)(f)).
• To keep accounting records such as invoices and payments. Basis: legal obligation under the Norwegian Bookkeeping Act (Article 6(1)(c)).
• The Quick check on the front page: the address you check is used to carry out the measurement. The result is reused for up to 24 hours. Basis: legitimate interest.

How long we keep the information

• Proposals and analyses for businesses that do not become customers: deleted in the regular deletion round once the business has had no activity for 18 months. The deletion round is set up to run monthly.
• Customer relationships: information is kept for as long as it is needed for the agreement and its wind-down. It is then deleted or anonymised. Information we must keep under bookkeeping rules, such as invoices and payment records, is normally kept for five years after the end of the financial year.
• Unsubscribes and deletions: we keep the organisation number, an opt-out marker and the necessary record of the deletion. This stops the business from being collected again from public registers and contacted again. The information is not used for further marketing.
• Quick check measurements: results are reused for up to 24 hours. Expired results are deleted when new measurements are stored.
• Backups: deleted through normal rotation. A deletion in the live service may therefore be complete before the same information is gone from all backups.
• Chat conversations: kept for as long as they are needed to follow up the enquiry and any customer relationship. If you ask, we delete the conversation.

Cookies and fonts

These pages use cookies for secure sign-in to the customer portal and for the chat on the front page. We run the chat ourselves, and it is not a third-party service. We do not use marketing or tracking cookies from third parties, and we show no adverts.

The chat uses a cookie to link the browser to your conversation, so that you can receive replies and continue the conversation. It contains a technical conversation identifier. You can remove it by clearing site data in your browser.

The fonts on these pages are served from our own domain. Your browser does not contact Google Fonts to show the text.

The front page stores locally in your browser whether the invitation to a free proposal has been shown or dismissed, and whether the form has been sent. This prevents repeated invitations. The markers contain no contact details and have no automatic expiry date. You can remove them by clearing site data in your browser.

Storage and sharing

The information is stored on servers we control. We do not sell or share information with third parties for marketing purposes. We use only processors that are needed to deliver the service (for example sending email and payment processing).

Your rights

Data protection rights apply to information about you as a person, also when you are a contact person at a business. You can ask for access, rectification and erasure. The right to erasure has exceptions, among them accounting records we must keep. Opt-out information and the necessary record of deletion are kept as explained under retention. We explain what information may have to be kept and why.

• Objection: You can object to processing based on legitimate interest. If the objection concerns direct marketing, we stop using the personal data for that purpose.
• Restriction: You can ask for the use of the information to be restricted when the conditions are met, for example while the accuracy of the information is being checked.
• Data portability: When the processing is automated and based on contract or consent, you can get the information you have given us in a common, machine-readable format and ask for it to be transferred to another provider where technically possible.

You can also opt out of further email from us at any time using the unsubscribe link in our emails. If the business wants an analysis or a website proposal removed, you can contact us.

If you believe we process information in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the data protection authority where you live or work, in the UK the Information Commissioner’s Office.

Security and subcontractors

The chat runs on our own server, operated by us. The conversations are not shared with others and are not used for marketing.

The service runs on our own servers at Hetzner Online GmbH (Germany, EEA). We use these subcontractors in the delivery:

• Stripe Payments Europe, Ltd. (Ireland): payment processing. Card data goes directly to Stripe and is never stored by us.
• Resend, Inc. (USA, EU standard contractual clauses): sending email, such as proposals, sign-in links and receipts.
• Cloudflare, Inc. (USA, EU standard contractual clauses): DNS services for our domains.
• Hetzner Online GmbH (Germany): server operation and storage, including backups.
• Anthropic, PBC (USA, EU standard contractual clauses): automated analysis of publicly available website content when we prepare proposals. The content is not used to train models.
• Serper (search API): lookups of publicly available information about the business, for example its web address.

For customers who choose the monthly service Consent, the customer’s website loads the consent tool from CookieHawk at cookiehawk.com. When it is loaded, the server delivering the tool receives the visitor’s IP address and the technical browser information sent with the request. The purpose is to deliver the consent tool on the customer’s website. This description applies to the optional customer service.

This list is kept up to date here. Customers with a data processing agreement are notified at least 30 days before we add or replace a subcontractor that processes personal data on their behalf.

Contact us (controller)

The controller is Webkompaniet AS, Norwegian organisation number 999 529 860, Fiskekroken 14, 0139 Oslo, Norway. Send an email to hei@siteremake.com, or reply to the email you have received from us, and we will help you with access, rectification or erasure. We answer such requests without undue delay and within one month at the latest. If the matter is particularly complex or we receive many requests, the deadline may be extended by up to two months. You will then be told why within the first month. If there is reasonable doubt about your identity, we may ask for the information needed to make sure the answer goes to the right person.

Last updated: 13 October 2026.