Privacy policy.

Who is responsible

Kalirox AS is the data controller (behandlingsansvarlig) for personal data processed via kalirox.com. We are a private limited company registered in Norway.

Reach us at info@kalirox.com for any privacy-related question or to exercise the rights described below.

What we collect on this site

• Email address — only if you submit it through the contact form on the homepage.
• Form metadata — the locale you used when submitting and a Cloudflare Turnstile token that proves you are not a bot. The token is one-time and cannot be used to identify you.
• Technical request data — IP address, user-agent string, and time of request. This is processed by Cloudflare as our edge provider for security, abuse prevention, and basic routing. We do not run our own analytics.
• Locale preference — stored locally in your browser (localStorage) so the site remembers your choice. This never leaves your device.

Why we process this data

We process the email address you give us in the contact form solely to reply to your inquiry. We do not add submitters to a newsletter and we do not sell or share contact data.

Technical request data is processed to protect the site from abuse, keep it fast, and diagnose operational issues.

Legal basis (GDPR art. 6)

• Consent (art. 6 (1) (a)) — when you actively submit the contact form, you consent to us using your email to reply.
• Legitimate interests (art. 6 (1) (f)) — for keeping the site available, secure, and free from automated abuse, balanced against the limited and ordinary nature of the data involved.

Who we share data with

We use a small number of carefully selected sub-processors. None of them are given the data for their own marketing.

• Cloudflare, Inc. — hosting, CDN, DDoS protection and the Turnstile bot challenge. Data: request metadata, Turnstile tokens. Location: global edge.
• Resend, Inc. — transactional email delivery for contact-form submissions. Data: your email and message content. Location: United States, with the EU Standard Contractual Clauses in place.
• Google LLC (Google Workspace) — receiving mail at info@kalirox.com once the contact form has forwarded it. Data: email and message content. Location: EU with global infrastructure.

Transfers outside the EEA

Some of our sub-processors are based outside the European Economic Area. Where that is the case we rely on the European Commission's Standard Contractual Clauses (2021/914) and supplementary measures as appropriate. We do not transfer data to countries without an adequate level of protection unless one of those safeguards applies.

How long we keep it

• Contact-form inquiries: kept in our mailbox until the conversation is concluded and for a reasonable period afterwards (typically up to 24 months) for follow-ups, then deleted.
• Edge logs (Cloudflare): retention follows Cloudflare's default policies; typically days to weeks.
• We do not store form submissions in a database of our own.

Your rights

Under the GDPR and the Norwegian Personal Data Act (personopplysningsloven) you can ask us to:

• see a copy of the data we hold on you (right of access),
• correct inaccurate data (rectification),
• delete your data where we no longer need it (erasure),
• limit our processing (restriction),
• receive your data in a portable format (portability),
• object to processing based on legitimate interests,
• withdraw consent at any time without affecting prior lawful processing.

Complaints

If you believe we are mishandling your data, please contact us first at info@kalirox.com so we can put it right. You also have the right to lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or with the supervisory authority in your country of residence.

Cookies and similar technologies

We do not set advertising or tracking cookies. Cloudflare Turnstile may set a short-lived first-party cookie (cf_clearance) to remember that your browser has passed a bot challenge — this is strictly necessary for the contact form and cannot be used to track you across sites.

Your language preference is stored in localStorage under the key kalirox.locale. You can clear it from your browser's site-data settings at any time.

Children

The site is aimed at operators, investors and prospective partners. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

Changes to this notice

If we change how we handle personal data we will update this page and revise the "last updated" date at the top. Material changes will be communicated to anyone we are already in active conversation with.