Last updated: 16.06.2026

This Privacy Policy explains how Elleve AS ("Elleve", "we", "us", or "our") processes personal data when you visit and use the Curate marketing website at getcurate.elleve.no (the "Website").

This policy covers the Website only. If you become a Curate customer, the processing of personal data within the Curate product and service is governed by the separate agreement and data processing terms you enter into at sign-up, not by this policy.

We are committed to protecting your personal data and processing it in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).

1. Data controller

The data controller responsible for personal data collected through this Website is:

Elleve AS Organisation number: 927 034 425 Ryfylkegata 9, 4014 Stavanger, Norway Email: hallo@elleve.no

For any questions about this policy or about how we handle your personal data, contact us at hallo@elleve.no.

2. What personal data we collect

We only collect personal data that you choose to provide or that is generated automatically when you use the Website.

Information you provide to us. When you fill in a contact form, request a quote, or book a call through the Website, we collect the information you submit. This typically includes your name, email address, company or organisation name, and the content of your message or enquiry.

Information collected automatically. When you visit the Website, certain technical information is generated automatically, such as aggregated and largely anonymised usage statistics (for example pages visited, approximate region, device and browser type, and referring source). This is collected through Framer Analytics, which is designed to be privacy-friendly and does not use cookies for tracking.

Cookies and similar technologies. Some functionality on the Website, including our contact and booking forms provided through HubSpot, may set cookies. See section 7 below for details.

We do not intentionally collect special categories of personal data through the Website, and we ask that you do not include sensitive personal information in free-text form fields.

3. Why we process your data and our legal basis

We process personal data for the following purposes and on the following legal bases under GDPR Article 6:

To respond to your enquiries and requests. When you contact us, request a quote, or book a call, we use your information to reply, prepare a response, and follow up. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b)), and our legitimate interest in responding to enquiries (Article 6(1)(f)).

To operate, secure, and improve the Website. We use technical and usage information to keep the Website running, understand how it is used, and improve it. Legal basis: our legitimate interest in maintaining and improving our Website (Article 6(1)(f)).

To send follow-up or marketing communications, where relevant. If we contact you about Curate after you have shown interest, we do so on the basis of your consent or our legitimate interest, depending on the circumstances. You can opt out at any time. Legal basis: consent (Article 6(1)(a)) or legitimate interest (Article 6(1)(f)).

To comply with legal obligations. We may process data where required by applicable law. Legal basis: legal obligation (Article 6(1)(c)).

4. How we collect and store data — our tools

We use the following providers to operate the Website and handle enquiries. These providers process personal data on our behalf as data processors.

HubSpot — used to manage our contact, quote, and booking forms and to store and follow up on enquiries in our customer relationship management (CRM) system.

Framer — used to host and operate the Website, including Framer Analytics for privacy-friendly usage statistics.

These providers may process data outside Norway and the EU/EEA. Where that happens, we rely on appropriate safeguards as described in section 8.

5. Who we share data with

We do not sell your personal data.

We share personal data only with:

• the service providers listed in section 4, acting as our data processors under data processing agreements;

• public authorities or other third parties where we are required to do so by law; and

• professional advisers (such as legal or accounting advisers) where necessary and under a duty of confidentiality.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy.

Enquiry and contact information is retained for as long as needed to handle your request and to maintain our business relationship, and thereafter for a reasonable period in line with our legitimate interests, unless you ask us to delete it earlier or we are required to keep it longer by law. Technical and aggregated usage data is retained on a shorter, rolling basis.

If you would like your data deleted, contact us at hallo@elleve.no.

7. Cookies and consent

A cookie is a small text file stored on your device when you visit a website. Cookies can be strictly necessary (required for the site to function) or non-essential (for example for analytics or marketing).

On this Website:

• Framer Analytics is used for usage statistics and is designed to operate without tracking cookies.

• HubSpot may set cookies in connection with our forms and CRM functionality.

Where cookies are not strictly necessary, we ask for your consent before they are set, through the cookie consent banner shown when you first visit the Website. You can accept or decline non-essential cookies, and you can change or withdraw your choice at any time through the banner or your browser settings. Declining non-essential cookies will not prevent you from browsing the Website.

[NOTE TO ELLEVE — REMOVE BEFORE PUBLISHING] This section describes a cookie consent banner. Make sure a working consent banner is actually live on the site before this policy goes public, and that it blocks non-essential/HubSpot cookies until consent is given. If no banner is in place yet, this text should not be published as-is. Confirm the exact cookie names and durations (HubSpot publishes these) and list them here or link to a dedicated cookie list if your counsel recommends it.

8. International transfers

Some of our service providers (including those listed in section 4) may store or process personal data outside Norway and the EU/EEA, including in the United States. Where personal data is transferred outside the EU/EEA, we rely on appropriate legal safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision, to ensure your data remains protected.

9. Your rights

Under GDPR, you have the right to:

• access the personal data we hold about you;

• request correction of inaccurate or incomplete data;

• request erasure of your data;

• request restriction of, or object to, our processing;

• data portability, where applicable; and

• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at hallo@elleve.no. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no) if you believe our processing of your personal data does not comply with the law.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this Website, and the "Last updated" date at the top shows when it was last revised. Material changes will be communicated where appropriate.

11. Contact

Elleve AS Ryfylkegata 9, 4014 Stavanger, Norway Organisation number: 927 034 425 Email: hallo@elleve.no