Last updated: 13 September 2026 · Les erklæringen på norsk

This notice explains how Circumflex AS handles personal data on circumflex.no and booking.circumflex.no, including purchases, customer accounts, licensing, downloads, and support for Circumflex Booking Pro.

Controller and contact

Circumflex AS, Norwegian organisation number 928 728 684, Bjørnlivegen 42, 3917 Porsgrunn, Norway, is the controller for data used to provide and support the product. Send privacy questions or requests to support@circumflex.no.

Data we process

  • Account and contact data: email address, language preference, and information submitted in support or purchase requests.
  • Purchase and subscription data: buyer type, personal or business name, billing details, Stripe customer and subscription references, payment, invoice, and refund status. We do not receive or store full card details.
  • Licence and installation data: licence status, releases and downloads, activation time, and a one-way site identifier. The platform does not normally store the readable URL of the activated WordPress installation.
  • Security and operations: login and security events, timestamps, technical request data, and limited audit records needed for abuse prevention and troubleshooting.

The platform does not receive bookings or data about customers, practitioners, services, exercise areas, or Airspace reservations from the WordPress plugin.

Purposes and legal bases

  • Creating an account and providing licences, downloads, updates, subscriptions, and support: necessary to enter into or perform the contract.
  • Handling purchase and contact requests before a contract: necessary to take steps you request before a possible contract.
  • Accounting, tax, disputes, and legally required records: necessary to comply with legal obligations.
  • Securing the service, preventing fraud and abuse, maintaining a limited audit trail, and improving operational reliability: our legitimate interest in secure and reliable operation.
  • We send marketing only where we have a valid legal basis. A support or purchase request is not treated as marketing consent.

Payments and recipients

Stripe/Link provides payment, subscription, invoicing, and tax functions and may act as merchant of record for purchases made through Stripe Managed Payments. Stripe processes payment and transaction data under its own terms and privacy notices. We receive only the information needed to connect a confirmed payment to the correct account and licence.

We use Google services for email delivery and administrator sign-in. We may also use providers for hosting, backups, and technical operations. Access is limited to what is necessary, and providers are subject to applicable contracts and security requirements. Data may be processed outside Norway or the EEA when a provider operates there; where required, we use a valid transfer mechanism and appropriate safeguards.

Retention

  • Expired one-time login links and download grants are normally removed within 7 days.
  • Abandoned or failed checkout attempts are normally removed after 30 days.
  • Processed Stripe webhook content is minimised after 30 days; technical event references may remain to prevent duplicate processing.
  • Completed checkout journals and closed customer, support, and purchase requests are normally removed after 24 months.
  • Account, subscription, licence, and installation records remain while needed for the contract, documented rights, security, and legal obligations. Accounting and transaction records may be retained longer where required by law.

Cookies

The WordPress website and customer platform use necessary cookies and similar technologies for language choice, security, form protection, and authentication. Circumflex does not use these cookies for advertising profiles. Any non-essential analytics or marketing tools will be described and will require consent where the law requires it.

Your rights

You may request access, correction, erasure, restriction, or portability, or object to processing where data-protection law provides those rights. Submit a request through your account or email support@circumflex.no. We may request reasonable identity verification. You may also complain to the Norwegian Data Protection Authority or the competent authority where you live.

Security and changes

We use access controls, encrypted transport, restricted service accounts, backups, and security logging to protect data. No system is entirely risk-free. Material changes to this notice will be published here with a revised date.