HMOOD

Privacy

Privacy, explained clearly

This page explains which personal data may be processed when you use the website, submit an enquiry or use the HMOOD assistant.

Last updated: 24 August 2026

Who is responsible?

HMOOD processes personal data as described in this privacy notice. Privacy questions can be sent to hei@hmood.no.

Data that may be processed

When you use the contact form, HMOOD may receive:

  • your name
  • company name, if provided
  • email address
  • phone number, if provided
  • the type of enquiry
  • the project description

Technical providers may also process necessary technical information, such as IP addresses and operational logs, for operation, security, spam protection and delivery of the enquiry.

Why the data is used

The information is used to:

  • receive and respond to your enquiry
  • understand what you or your business needs help with
  • follow up any further project discussion
  • protect the form and website from misuse

The information is not used for newsletters or advertising.

Legal basis

Processing a project enquiry will normally be necessary to take steps at your request before entering into a possible agreement. Where this does not apply, processing may rely on HMOOD’s legitimate interest in handling relevant enquiries and protecting the service from misuse.

The applicable legal basis depends on the enquiry and remains part of the ongoing privacy review.

Technical providers

HMOOD uses Resend for the technical delivery of contact-form emails. The enquiry is sent to HMOOD’s email address, and the email address you provide is set as Reply-To so HMOOD can respond directly.

The website is hosted on Render. Resend and Render may process information necessary for email delivery, operation, security and technical logs. Provider terms, data-processing arrangements, processing locations and any international transfers still need to be documented and reviewed.

Retention and deletion

Enquiries are retained for as long as needed to follow up the request and any subsequent communication about the project. They are deleted when no longer needed unless HMOOD has a legal duty or legitimate reason to retain them longer.

The website has no database of its own for contact enquiries. Content may still be stored in the email systems used by HMOOD and its providers. A specific deletion routine still needs to be established and documented.

Sharing information

HMOOD does not sell personal data. Necessary technical providers, such as hosting and email-delivery providers, may process data to the extent required to run the website and handle the enquiry.

Cookies and tracking

HMOOD does not use Google Analytics, Meta Pixel or other analytics, advertising or marketing tools. The website currently sets no first-party cookies and is not used for newsletters.

Your rights

You can contact HMOOD to request access to your personal data, correction or deletion of that data, restriction of processing, or to object to processing where applicable. Your rights may depend on the circumstances and legal basis.

Send your request to hei@hmood.no. You may also lodge a complaint with the Norwegian Data Protection Authority if you believe your personal data is being processed in breach of applicable data protection rules.

Security

HMOOD limits the information collected. The contact form uses server-side validation, rate limiting and simple spam protection. Secrets remain on the backend, and contact enquiries are not stored in a separate website database.

No online solution can be guaranteed to be entirely risk-free. The measures should therefore be reviewed regularly and when operations or providers change.

The HMOOD assistant and OpenAI

When you use the HMOOD assistant, your questions, the page language and the limited conversation history in the open chat window are sent to OpenAI’s API to generate a response. Do not enter sensitive personal data, passwords, payment information or details that are unnecessary for the question.

The chatbot does not use the website’s own database and has no long-term memory, customer data or access to a customer portal. Requests are sent with OpenAI’s response storage setting disabled (`store: false`), so responses are not stored for later retrieval by the HMOOD application. OpenAI states that API use may still be included in abuse-monitoring logs by default. Current provider terms and privacy arrangements require continued review.

Changes to this notice

This notice may be updated if the website, providers or processing of personal data changes. The date at the top shows when it was last updated.