Privacy Policy for NordLyd Podcast Studio

Effective date: 2026-04-26

1. Introduction and company information

This privacy policy explains how NordLyd Podcast Studio collects, uses, stores, shares, and protects personal data when you visit our website, contact us, book studio services, participate in podcast production, or otherwise interact with us.

NordLyd Podcast Studio is the data controller for the processing of personal data described in this policy.

Company name: NordLyd Podcast Studio
Address: Hausmanns gate 19, 0182 Oslo, Norway
Email: [email protected]
Phone: +47 21 45 78 36

This policy applies to personal data relating to clients, prospective clients, guests, collaborators, website visitors, and other individuals whose data we process in connection with our podcast-studio business.

2. Data collection and processing

We may collect and process the following categories of personal data:

• Identification and contact data: name, email address, phone number, postal address, company name, and role/title.
• Booking and service data: appointment details, project information, preferences, invoices, payment status, and communication history.
• Production-related data: voice recordings, audio files, video recordings, photographs, transcripts, episode notes, guest information, and content submitted for editing or publication.
• Technical data: IP address, browser type, device information, log data, cookies, and website usage information.
• Communication data: emails, messages, call notes, feedback, and support requests.
• Billing and accounting data: payment details, transaction records, and information required for bookkeeping and tax compliance.

We generally collect personal data directly from you, but we may also receive data from clients, collaborators, booking systems, payment providers, analytics tools, and publicly available sources where relevant and lawful.

3. Purpose of data processing

We process personal data for the following purposes:

• to respond to inquiries and provide customer support;
• to manage bookings, studio sessions, and podcast production projects;
• to communicate with clients, guests, and collaborators;
• to record, edit, store, and deliver podcast-related content;
• to issue invoices, process payments, and maintain accounting records;
• to operate, secure, and improve our website and services;
• to comply with legal obligations, including accounting and tax requirements;
• to protect our rights, property, and legitimate business interests;
• to send marketing communications where permitted by law and, where required, with your consent.

4. Legal basis for processing

We process personal data only where we have a valid legal basis. Depending on the context, our legal bases may include:

• Performance of a contract: when processing is necessary to provide studio services, manage bookings, or fulfill agreements with you.
• Consent: when you have given us clear consent, for example for certain marketing communications or the use of optional cookies.
• Legal obligation: when processing is necessary to comply with applicable laws, such as accounting, tax, and record-keeping obligations.
• Legitimate interests: when processing is necessary for our legitimate business interests, such as improving our services, maintaining security, preventing fraud, and managing business operations, provided that your interests and fundamental rights do not override those interests.

5. Data sharing and third parties

We may share personal data with third parties only when necessary and appropriate for the purposes described in this policy. These third parties may include:

• IT and hosting providers;
• email and communication service providers;
• booking, scheduling, and customer management platforms;
• payment processors and financial service providers;
• accountants, auditors, and legal advisors;
• audio, video, transcription, and editing service providers;
• analytics and website performance providers;
• public authorities, where required by law.

We require third parties to handle personal data in accordance with applicable data protection requirements and to use the data only for the services they provide to us or as otherwise permitted by law.

6. Data transfer to third countries

Some of our service providers may process personal data outside Norway, the EEA, or the European Union. If personal data is transferred to a country that does not provide an adequate level of data protection, we will implement appropriate safeguards as required by applicable law, such as standard contractual clauses or equivalent transfer mechanisms.

Where relevant, we take steps to ensure that transferred data remains protected and that the transfer is lawful.

7. Storage duration

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

• Client and project data: retained for the duration of the business relationship and for a reasonable period thereafter.
• Accounting and tax records: retained for the period required by applicable law.
• Communication records: retained as long as needed to handle the inquiry or maintain the relevant business relationship.
• Marketing data: retained until you withdraw consent or object, where applicable.
• Technical logs and analytics data: retained for a limited period necessary for security, troubleshooting, and service improvement.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with our retention practices and legal obligations.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: the right to request confirmation of whether we process your personal data and to receive a copy of that data.
• Rectification: the right to request correction of inaccurate or incomplete personal data.
• Erasure: the right to request deletion of your personal data in certain circumstances.
• Restriction: the right to request that we limit the processing of your personal data in certain cases.
• Data portability: the right to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Objection: the right to object to processing based on legitimate interests and, where applicable, to direct marketing.

To exercise your rights, please contact us using the details in the Contact information section below. We may need to verify your identity before responding to your request.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we will stop the relevant processing unless we have another lawful basis to continue processing.

10. Right to complain

If you believe that our processing of personal data violates applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority.

Without limiting that right, we encourage you to contact NordLyd Podcast Studio first so that we can try to resolve your concern directly and promptly.

11. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, and regular review of our security practices.

While we take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

12. Contact information

If you have questions about this privacy policy or our processing of personal data, or if you wish to exercise your rights, please contact us:

NordLyd Podcast Studio
Hausmanns gate 19, 0182 Oslo, Norway
Email: [email protected]
Phone: +47 21 45 78 36

13. Changes to privacy policy

We may update this privacy policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. The updated version will be published on our website with a revised effective date.

We encourage you to review this privacy policy periodically to stay informed about how NordLyd Podcast Studio processes personal data.