Privacy Policy – Leadkit Inbox
Last updated: March 5, 2026
Leadkit Inbox is operated by Nettbureau AS (“we”, “our”, or “us”). This Privacy Policy explains how personal data is processed in the Leadkit Inbox applications, the Leadkit web platform, and related Nettbureau services.
Leadkit Inbox is a business tool used by authorized partners of Nettbureau AS to receive and manage leads generated through Nettbureau-operated services.
1. Roles and Responsibilities
Nettbureau AS acts as a data controller for the collection, generation, and distribution of leads through its services and platforms.
When a lead is delivered to a partner through Leadkit, the receiving partner acts as an independent data controller for their own processing of the personal data contained in the lead. This may include contacting the consumer, providing services, or managing their own customer relationships.
Nettbureau AS and partner companies therefore operate as independent controllers (controller–controller) for their respective processing activities. Each party is responsible for complying with applicable data protection laws for the processing under their control.
Partners receiving leads are responsible for providing their own privacy information to consumers regarding how they process personal data after receiving a lead.
2. Lead Sources
Leads delivered through Leadkit originate from consumers submitting requests for products or services through Nettbureau-operated websites and digital services across multiple markets and service categories.
These services may include comparison services, request forms, and other lead-generation platforms operated or managed by Nettbureau or its partners. The specific website or service used by the consumer may vary depending on the country and the type of service requested.
Depending on the service requested and geographic location, leads may be shared with authorized partner companies operating in the relevant country or service area.
3. Purpose and Legal Basis for Processing
Nettbureau processes personal data for the following purposes:
- Delivery of leads to authorized business partners
- User authentication and account management for partner users
- Notifications about new leads (push notifications)
- Operation and monitoring of the service
- Security and fraud prevention
The legal bases for processing may include performance of a contract, legitimate interests in operating and improving the service, and compliance with legal obligations.
4. Categories of Personal Data
Depending on the service type, personal data processed may include:
- Name
- Email address
- Phone number
- Address or location information
- Details about the requested service
The service may also process certain technical information, such as:
- IP address
- Device identifiers
- Push notification tokens
- Application usage logs
- Crash reports and diagnostic data
5. Recipients of Data
Personal data may be shared with the following categories of recipients:
- Authorized business partners receiving leads relevant to their services
- Service providers and data processors used to operate the service
Examples of service providers include:
- Firebase (Google) – authentication, infrastructure, and notifications
- Sentry – application monitoring and error reporting
- Hosting and infrastructure providers used to operate the Leadkit platform
6. International Data Transfers
Some service providers may process data outside the European Economic Area (EEA). When such transfers occur, Nettbureau uses appropriate safeguards in accordance with applicable data protection laws, such as Standard Contractual Clauses (SCCs) or adequacy decisions where available.
7. Data Retention
Personal data is retained only as long as necessary to provide the service and fulfill legal obligations. Typical retention periods include:
- Lead data: retained as necessary for the delivery and documentation of services
- Account information: retained while the partner relationship is active
- Technical logs and security data: typically retained for up to 90 days
- Crash and diagnostic reports: retained for a limited operational period
8. Data Security
Nettbureau AS implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
9. Data Subject Rights
Individuals whose personal data is processed through Nettbureau services may have rights under applicable data protection laws, including the right to:
- Access their personal data
- Request correction of inaccurate data
- Request deletion of personal data
- Object to certain processing activities
- Request restriction of processing
Requests regarding personal data can be sent to This email address is being protected from spambots. You need JavaScript enabled to view it..
Information about how Leadkit Inbox users can request account deletion is available here: Account Deletion Instructions.
10. Right to Lodge a Complaint
If you believe your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority.
Individuals in the EEA may lodge a complaint with their local data protection authority. In Norway, the competent authority is Datatilsynet.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with an updated revision date.
12. Contact
Nettbureau AS
General inquiries: This email address is being protected from spambots. You need JavaScript enabled to view it.
Data protection inquiries: This email address is being protected from spambots. You need JavaScript enabled to view it.
