Privacy Policy

Last updated: 27 May 2026

This Privacy Policy describes how Coyle Co (“we”, “us”, or “our”), operated by Tiffany Coyle, Bergen, Norway, collects, uses, and protects your personal data when you use our website at coyleco.no (“the Site”).

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and applicable privacy laws.

1. Data controller

Tiffany Coyle, operating as Coyle Co
Bergen, Vestland, Norway
Email: hello@coyleco.no

2. What data we collect

We collect the following categories of personal data:

Contact data: Name, email address, company name, and message content when you submit the contact form or communicate with us.
Chat data: Messages and conversation history submitted through the chat on the Site, processed via Google Cloud Vertex AI for the duration of the conversation.
Server logs: Standard request logs (IP address, browser type, requested URL, timestamps) collected by our hosting infrastructure for security and operational purposes. These logs are not used for behavioural tracking or advertising.

We do not currently use analytics or marketing cookies. Only strictly necessary cookies (such as your theme preference and any future consent state) are stored in your browser. If we add analytics or marketing tools in the future, we will request your consent through the on-site banner before loading them.

3. Legal basis for processing

Contractual necessity and pre-contractual steps (Article 6(1)(b) GDPR): Processing contact form submissions to respond to service enquiries, and scheduling a call you request through the chat, for which we collect your name and email to create and confirm the booking.
Legitimate interests (Article 6(1)(f) GDPR): Routing and qualifying enquiries through the chat intake, operational logging, security monitoring, and fraud prevention.
Consent (Article 6(1)(a) GDPR): Where you have explicitly consented, such as for any future analytics, marketing cookies, or marketing communications.

4. How we use your data

Responding to enquiries and providing requested services
Processing and managing client engagements
Improving the Site and our services
Complying with legal obligations
Protecting against fraud and security threats

We do not sell your personal data. We may share data with:

Service providers: Google Cloud Platform (Vertex AI for chat processing, hosting), and Resend (transactional email delivery for the contact form), operating under Data Processing Agreements with Standard Contractual Clauses where required for international transfers.
Legal authorities: Where required by law or to protect our legal rights.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR. The Vertex AI region used is europe-west4 (Netherlands), keeping chat data inside the EU by default.

6. Retention

We retain personal data only as long as necessary for the purposes described above, then delete it, in line with the GDPR storage limitation principle (Article 5(1)(e)). Chat conversations are kept only as long as needed for the purpose they were collected for, which is routing your enquiry and service quality. Where a conversation leads to a booking or an enquiry, the related contact details follow the contact and enquiry period below. Contact and enquiry data is retained for up to 3 years. Server logs are retained for up to 12 months. You may request deletion at any time.

7. Your rights

Under GDPR, you have the following rights:

Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure (Article 17)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
Right to object (Article 21)
Right not to be subject to automated decision-making (Article 22)

To exercise any of these rights, contact us at hello@coyleco.no. We will respond within 30 days.

The Site uses only technically necessary local storage and cookies (for example, your theme preference and your cookie consent choice). We do not use tracking cookies or third-party advertising cookies. A consent banner is displayed on first visit so you can record a decision. Should we introduce analytics or marketing cookies in the future, they will only load after you accept.

9. AI systems and automated processing

The chat on the Site uses Google Cloud Vertex AI to assist with intake routing. Conversations may be reviewed by the Coyle Co team for service quality and product improvement. No solely automated decisions with legal or similarly significant effects are made about individuals based on chat data.

10. Supervisory authority

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page indicates when the policy was last revised. Continued use of the Site after changes constitutes acceptance of the revised policy.