Privacy Policy

1. Data Controller

Aureum Collective is operated by NorwegianSpark SA, organisation number 834 984 172, registered in Norway. We are the data controller for all personal data collected through this website.

2. What Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and message content when you use our contact form.
• Newsletter information: Email address when you subscribe to our newsletter.
• Usage data: Pages visited, time on site, browser type, IP address, and referring URLs — collected via Vercel Analytics.
• Affiliate click data: Which affiliate links are clicked and when, for the purpose of commission attribution and editorial improvement.

3. Legal Basis for Processing

Under GDPR Article 6, we process your personal data on the following legal bases:

• Consent: Newsletter subscriptions.
• Legitimate interests: Website analytics, affiliate tracking, security monitoring.
• Contract performance: Responding to contact form enquiries.

4. How We Use Your Data

• To respond to your enquiries and contact requests
• To send newsletters to subscribers (with opt-out on every email)
• To analyse website performance and improve content
• To attribute affiliate commissions correctly
• To comply with legal obligations

5. Data Retention

Contact form data is retained for 2 years. Newsletter subscriber data is retained until unsubscribe. Usage analytics data is retained for 12 months. We do not sell personal data.

6. Your Rights Under GDPR

As a data subject, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Complaint: Lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority) at datatilsynet.no.

To exercise any of these rights, email: norwegianspark@gmail.com

7. Third-Party Services

We use the following third-party services which may process your data:

• Vercel Analytics: Privacy-first analytics, no personal data stored.
• Resend: Email delivery for contact form and newsletters.
• Affiliate networks: Affiliate click tracking when you follow our affiliate links.

8. Cookies

We use minimal cookies. No advertising cookies. No third-party tracking cookies. Our analytics provider (Vercel) is cookie-free.