DEVERFLOW / YOUR DATA

Privacy, without the fog.

Privacy, without the fog.

Privacy, without the fog.

This policy explains what personal information DEverflow may receive, why it is used, who may process it, and the choices you have.

This policy explains what personal information DEverflow may receive, why it is used, who may process it, and the choices you have.

IN PLAIN ENGLISH

We collect only what is needed to respond to enquiries, arrange calls, evaluate potential partnerships, deliver agreed work, and meet legal obligations. We do not sell personal information.

Effective 24 October 2026

01

Who is responsible

Who is responsible

DEverflow, operated by Tobias Bugge Bøkenes in Norway, is responsible for the personal information described in this policy when acting as the data controller. This policy applies to the DEverflow website, partnership enquiries, booking activity, and direct business communications.

DEverflow, operated by Tobias Bugge Bøkenes in Norway, is responsible for the personal information described in this policy when acting as the data controller. This policy applies to the DEverflow website, partnership enquiries, booking activity, and direct business communications.

02

Information we may receive

Information we may receive

When you book a call or contact DEverflow, we may receive your name, email address, social profile or business details, scheduling information, messages, and anything else you choose to share. If a partnership begins, we may also process project, billing, contractual, performance, and payment information, including YouTube channel and analytics data you give us access to, needed to deliver and administer the work.

When you book a call or contact DEverflow, we may receive your name, email address, social profile or business details, scheduling information, messages, and anything else you choose to share. If a partnership begins, we may also process project, billing, contractual, performance, and payment information, including YouTube channel and analytics data you give us access to, needed to deliver and administer the work.

The website is hosted with Framer. Framer’s built-in analytics are designed to provide aggregated website metrics without cookies or persistent identifiers. DEverflow does not currently use a native contact form on this site.

03

Why we use information

Why we use information

Information is used to respond to enquiries, schedule and prepare for calls, assess whether a partnership is a good fit, negotiate or perform an agreement, communicate about active work, maintain security, improve the website and offer, keep business records, and comply with legal obligations.

Information is used to respond to enquiries, schedule and prepare for calls, assess whether a partnership is a good fit, negotiate or perform an agreement, communicate about active work, maintain security, improve the website and offer, keep business records, and comply with legal obligations.

Depending on the situation, the legal basis is taking steps at your request before entering a contract, performing a contract, complying with law, or pursuing legitimate interests such as operating and improving the business. Consent is used where the law specifically requires it, and may be withdrawn at any time without affecting earlier lawful processing.

04

Where information comes from

Where information comes from

Most information comes directly from you. DEverflow may also review information that you or your business have made public, such as LinkedIn and YouTube profiles, websites, and published content, when researching or evaluating a potential partnership.

Most information comes directly from you. DEverflow may also review information that you or your business have made public, such as LinkedIn and YouTube profiles, websites, and published content, when researching or evaluating a potential partnership.

05

Service providers and sharing

Service providers and sharing

Personal information may be processed by providers that support the website and business, including Framer for hosting, Calendly for booking, Google for calendar invites and video calls, and professional or technical providers used for communication, storage, accounting, or project delivery. They receive only the information reasonably needed for their role.

Personal information may be processed by providers that support the website and business, including Framer for hosting, Calendly for booking, Google for calendar invites and video calls, and professional or technical providers used for communication, storage, accounting, or project delivery. They receive only the information reasonably needed for their role.

Information may also be disclosed when required by law, to protect legal rights or security, in connection with a business reorganisation, or when you have asked or authorised DEverflow to share it. Personal information is not sold.

06

International transfers

International transfers

Some providers may process information outside Norway or the European Economic Area. Where required, DEverflow relies on recognised safeguards such as an adequacy decision or approved standard contractual clauses, together with additional protections where appropriate.

Some providers may process information outside Norway or the European Economic Area. Where required, DEverflow relies on recognised safeguards such as an adequacy decision or approved standard contractual clauses, together with additional protections where appropriate.

07

How long information is kept

How long information is kept

Information is kept only for as long as reasonably necessary for the purpose it was collected for. Enquiry information may be retained while a potential partnership is being considered and for a limited follow-up period. Client, contractual, accounting, and transaction records may be retained longer where needed to perform an agreement, establish or defend legal claims, or satisfy mandatory bookkeeping and tax requirements.

Information is kept only for as long as reasonably necessary for the purpose it was collected for. Enquiry information may be retained while a potential partnership is being considered and for a limited follow-up period. Client, contractual, accounting, and transaction records may be retained longer where needed to perform an agreement, establish or defend legal claims, or satisfy mandatory bookkeeping and tax requirements.

08

Your rights

Your rights

Subject to applicable law, you may ask for access to your personal information, correction of inaccurate information, deletion, restriction, portability, or an objection to processing based on legitimate interests. Where processing relies on consent, you may withdraw it.

Subject to applicable law, you may ask for access to your personal information, correction of inaccurate information, deletion, restriction, portability, or an objection to processing based on legitimate interests. Where processing relies on consent, you may withdraw it.

You also have the right to complain to Datatilsynet, the Norwegian Data Protection Authority. DEverflow may need to verify your identity before responding to a request.

09

Security

Security

Reasonable organisational and technical measures are used to protect personal information. No internet service can guarantee absolute security, so please avoid sending sensitive personal information through booking notes or ordinary email unless it is genuinely necessary and an appropriate secure method has been agreed.

Reasonable organisational and technical measures are used to protect personal information. No internet service can guarantee absolute security, so please avoid sending sensitive personal information through booking notes or ordinary email unless it is genuinely necessary and an appropriate secure method has been agreed.

10

Cookies and analytics

Cookies and analytics

Framer’s built-in website analytics are described by Framer as cookie-free and anonymised. If DEverflow later adds advertising pixels, third-party analytics, embedded media, or other technology that requires consent, this policy and the website’s consent controls will be updated before that technology is used where required.

Framer’s built-in website analytics are described by Framer as cookie-free and anonymised. If DEverflow later adds advertising pixels, third-party analytics, embedded media, or other technology that requires consent, this policy and the website’s consent controls will be updated before that technology is used where required.

11

Children

Children

The website and partnership services are intended for business users and are not directed to children under 18. DEverflow does not knowingly seek personal information from children through this website.

The website and partnership services are intended for business users and are not directed to children under 18. DEverflow does not knowingly seek personal information from children through this website.

12

Changes to this policy

Changes to this policy

This policy may be updated when services, providers, or legal requirements change. The effective date at the top of the page shows the latest revision. Material changes will be highlighted where appropriate.

This policy may be updated when services, providers, or legal requirements change. The effective date at the top of the page shows the latest revision. Material changes will be highlighted where appropriate.

Questions or privacy requests?

For privacy requests, email tobias@deverflow.com. Please write “Privacy request” in the subject line so it can be handled promptly.