Privacy policy

Last updated: October 2026

Who is responsible?

Megapiksel AS, org. no. 927 618 842, Voldgata 27, 2000 Lillestrøm, Norway, is the data controller for the personal data described here. Questions about privacy can be sent to hei@megapiksel.no.

What data we process, and why

When you contact us

If you send us an enquiry via the form, email or phone, we process your name, email address, phone number and what you write to us. The purpose is to reply and follow up on a possible collaboration. The legal basis is our legitimate interest in responding to enquiries, and that you ask for a quote before a possible agreement (GDPR Article 6(1)(b) and (f)).

When you’re a client

For clients we process contact details for contact persons and the information needed to deliver the assignment and invoice. The legal basis is the agreement with the client and our legal obligations, including under the Norwegian Bookkeeping Act.

Statistics and analytics

If you consent, we use Google Analytics (via Google Site Kit) and Metricool to measure traffic and understand how the website is used. These tools collect information such as page views, approximate location, device and browser. The data is used in aggregate and not to identify you. The legal basis is consent, which you give or decline in the consent banner.

Film and photos we make for clients

When we film or photograph on assignment, the client is usually the data controller for images and video of people. We then process the data on behalf of the client and according to the client’s instructions. If you want a photo or video of yourself removed from content we’ve published on our own channels, please contact us.

Cookies

The website uses cookies that are necessary for it to work, and cookies for statistics. Statistics cookies are only set if you consent. You can change or withdraw your consent at any time via the «Cookie settings» link at the bottom of the page, or delete cookies in your browser.

Videos on the website are shown via Vimeo and YouTube. These services may set their own cookies when you play a video.

How long we keep the data

We keep personal data for as long as necessary for the purpose. Enquiries that don’t lead to a collaboration are deleted when they’re no longer relevant. Accounting records are kept for five years after the end of the financial year, as required by the Norwegian Bookkeeping Act.

Who we share data with

We never sell personal data. We use some suppliers who process data on our behalf (data processors) and who have an agreement with us for this:

• Hostinger, which hosts the website
• Google, for statistics (Google Analytics)
• Metricool, for statistics
• Base44, which runs the studio booking system
• Stripe, for payment when booking the studio
• The provider of our email service

Some of these suppliers may transfer data to countries outside the EU/EEA, such as the USA. Such transfers are based on the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

You have the right to

• access the data we process about you, and get a copy
• have incorrect data corrected
• have data deleted, when we have no obligation or basis to keep it
• restrict processing
• object to processing based on legitimate interest
• receive data you’ve given us in a machine-readable format (data portability)
• withdraw your consent at any time

Send an email to hei@megapiksel.no and we’ll reply within 30 days. For your security, we may ask you to confirm your identity.

Complaints

If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet). See datatilsynet.no. We’d appreciate it if you contact us first, so we can put things right.

Changes

We update this privacy policy when needed. The current version is always on this page.