Last updated: 29 July 2026

Privacy Policy

Osprey AS (org.no. 930 849 928) is the data controller for personal data collected via this website. Below is what we collect, how we use it, and your rights.

1. What we collect

Contact form submissions

We receive name, email address, optional company and phone number, and your message. We also receive technical context (the page URL you submitted from, referrer, any UTM parameters).

Chat assistant

The full conversation is stored in our quality management system (QMS). If you provide contact details in the chat (name, email), a lead is created automatically in the same system.

Technical data

Browser configuration (User-Agent), IP address and timestamp are logged by Azure Static Web Apps for security and operational purposes.

2. Cookies

We use cookies for technical, functional and (with consent) analytics purposes. We never sell data, and ad tracking is not enabled.

Strictly necessary (no consent required)

• Authentication token — required to sign in to protected parts of the site
• CSRF token — security protection against unauthorised requests

Functional (consent required)

• oi-lang — remembers your language choice (NO/EN)
• oi-chat-popup-dismissed — remembers whether you've closed the chat invitation
• oi-consent + oi-consent-ts — stores your cookie choice for 12 months

Analytics (consent required)

• Google Analytics (GA4) — measures page views and usage patterns so we can improve the site. Activates only after consent (Google Consent Mode); before consent, only anonymous, cookieless signals are sent. Processed by Google Ireland Limited under Google's privacy policy.

The first time you visit the site, a consent banner is shown. If you decline, no functional or analytics preferences are stored between visits, and neither functional nor analytics cookies are set.

3. Chat assistant

The chat assistant on the website is an AI-based service using the Claude language model (Anthropic). Messages are sent via our backend (qms.osprey.as) to Anthropic for processing. Anthropic processes data under their privacy policy.

Chat history is stored in our quality management system for quality assurance and to link conversations to any leads. We do not send chat data to other third parties.

4. Purposes and legal basis

We process personal data to:

• Respond to enquiries and deliver quotes (legal basis: pre-contractual measures, GDPR art. 6(1)(b))
• Operate and secure the website (legal basis: legitimate interest, art. 6(1)(f))
• Store your preferences (legal basis: consent, art. 6(1)(a) — applies to functional cookies)

5. Sharing with third parties

We do not share personal data with third parties for commercial purposes. The following data processors are used:

• Microsoft Azure (website and QMS hosting)
• Anthropic (AI processing of chat messages)
• Microsoft Graph / Office 365 (email notifications)
• Google Ireland Limited (Google Analytics, consent-gated only)

6. Retention

Leads and enquiries are stored for as long as needed to manage the customer relationship, then for up to 5 years for accounting purposes.

Chat conversations with no associated lead are deleted after 12 months.

Technical logs are typically kept for 90 days.

7. Your rights

Under GDPR you have the right to:

• Access your personal data
• Correct inaccurate information
• Erasure ("right to be forgotten") where applicable
• Restriction of processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)

8. Contact

For privacy enquiries or to exercise your rights, contact us at:

Email: info@ospreyinspection.no
Address: Osprey AS, Bergen, Norway
Org. no.: 930 849 928