legal

Privacy Policy

Last updated: March 2026 · Effective date: March 2026

This Privacy Policy explains how Kresda (operated by Kristoffer Tengesdal, enkeltpersonforetak (sole proprietorship), org. nr. 929 595 440) collects, uses, and protects your personal information when you visit kresda.com or interact with our services. By using our website or submitting your information, you agree to the practices described here.

01 Who We Are

Kresda is an AI-powered lead generation and marketing services agency operating under the sole proprietorship of Kristoffer Tengesdal (enkeltpersonforetak, Norwegian organisation number 929 595 440), with a registered business address at Myklabergbakken 38, 4052 Sola, Norway.

Kresda operates the website located at kresda.com and provides marketing, lead generation, and reputation management services to businesses in the United States and internationally.

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR) and relevant Norwegian data protection legislation, Kristoffer Tengesdal trading as Kresda is the data controller of your personal information.

02 Information We Collect

We may collect the following categories of personal information:

Contact and Identity Information

Full name
Email address
Phone number, including mobile number
Business name and industry
Business address

Communication Information

Messages and inquiries submitted through our website
Records of calls, emails, and SMS communications with us
Appointment booking information and scheduling preferences
Responses to surveys or questionnaires

Technical and Usage Information

IP address and approximate geographic location
Browser type, version, and operating system
Pages visited, time spent on pages, and navigation patterns
Referring URLs and traffic sources
Device identifiers and advertising identifiers
Cookie data and similar tracking identifiers

Business and Service Information

Information about your business provided during consultations
Details about your marketing goals and service requirements
Any other information you voluntarily provide to us

03 How We Collect Information

Directly from You

When you submit a contact form, book a strategy call, respond to our outreach, or otherwise communicate with us, you provide us with personal information directly.

Automatically Through Your Use of Our Website

When you visit kresda.com, we automatically collect certain technical information through cookies, pixels, and similar technologies, including information about your device, browser, and how you interact with our website.

From Third-Party Sources

We may receive information about you from third-party data providers as part of our business development activities. This may include publicly available business contact information obtained from professional directories, business registrations, and similar sources for the purpose of identifying potential clients. This information is used solely for legitimate business purposes.

Through Third-Party Platforms

If you interact with our content or advertisements on third-party platforms such as social media networks or advertising platforms, those platforms may share certain information with us in accordance with their own privacy policies and your settings on those platforms.

04 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate our website, understand how visitors use it, and to deliver relevant advertising.

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. Similar technologies include pixel tags, web beacons, browser fingerprinting, and local storage objects, which function in a comparable way.

Categories of Cookies We Use

Essential Cookies are strictly necessary for our website to function. They cannot be disabled without affecting core functionality and do not store personally identifiable information.

Functional Cookies allow our website to remember your preferences and provide an enhanced experience.

Analytical and Performance Cookies collect aggregated, anonymised information about how visitors use our website. We use this data to improve how our website works.

Marketing and Advertising Cookies are used to deliver advertising relevant to your interests. They may be used to build a profile of your interests and show you relevant content and advertisements on other websites and platforms. If you do not allow these cookies, you will experience less targeted advertising.

Third-Party Tracking Technologies

We may use tracking pixels, tags, and scripts provided by third-party advertising and analytics platforms. These technologies may collect information about your browsing behaviour across websites and applications over time. The categories of platforms we may use include, but are not limited to:

Advertising platforms that use pixel-based tracking to measure advertising effectiveness, build custom audiences, and enable retargeting of visitors who have previously interacted with our website
Search and display advertising networks that use conversion tracking and remarketing tags to measure campaign performance and serve relevant advertisements
Web analytics services that collect aggregated data about website usage to help us understand visitor behaviour and improve our website
Customer relationship management and marketing automation platforms that may set cookies or tracking identifiers to support lead tracking and communication workflows

These third-party technologies operate under their own privacy policies. We encourage you to review the privacy policies of any third-party services you interact with.

Cookie Consent and Your Choices

When you first visit our website, you will be presented with a cookie consent notice allowing you to accept or decline non-essential cookies. You may change your preferences at any time using our cookie settings tool available on our website.

You can also control cookies through your browser settings. For advertising cookies, you may opt out of interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

05 How We Use Your Information

To Provide and Deliver Our Services

The following activities are carried out on the lawful bases of contractual necessity and legitimate interests:

To respond to your inquiries and booking requests
To schedule and conduct strategy calls and consultations
To deliver lead generation, marketing, and reputation management services
To manage our client relationships

To Communicate With You

Appointment and service communications are carried out on the basis of contractual necessity. Marketing communications are carried out on the basis of consent, which you may withdraw at any time:

To send appointment confirmations, reminders, and follow-up messages
To respond to your questions and requests
To send service-related updates and information
To send marketing communications where you have consented to receive them

To Operate and Improve Our Website

The following activities are carried out on the basis of legitimate interests, as we have a genuine business interest in ensuring our website functions effectively and our marketing activities are optimised:

To ensure our website functions correctly and securely
To analyse how visitors use our website and identify areas for improvement
To understand the effectiveness of our marketing activities

For Marketing and Advertising

The following activities are carried out on the basis of consent, obtained through your acceptance of marketing and advertising cookies, or legitimate interests where applicable:

To show relevant advertisements to people who have visited our website
To create custom and lookalike audiences for advertising on third-party platforms
To measure the performance and reach of our advertising campaigns

To Comply With Legal Obligations

The following activities are carried out on the basis of legal obligation:

To comply with applicable laws and regulations in Norway, the EEA, and relevant jurisdictions
To respond to lawful requests from public authorities
To enforce our Terms and Conditions and protect our legal rights

06 Communications and Messaging

How We Obtain Your Consent to Communicate

We obtain your consent to send communications at the specific point at which you provide your contact information. For example, when you submit a form on our website that includes your phone number or email address, that form will include clear disclosure of the types of communications you are consenting to receive, along with a link to this Privacy Policy. Consent to receive communications is tied to that specific, affirmative action — it is not assumed by general use of our website.

SMS and Text Messages

If you have provided your mobile phone number through a form or booking process on our website and have expressly consented to receive SMS communications, we may send you text messages related to your inquiry, scheduled appointments, appointment reminders, follow-up communications, and information about our services. Message frequency will vary based on your interaction with us and the nature of our service relationship.

Message and data rates may apply depending on your mobile carrier plan. You can opt out of SMS communications at any time by replying STOP to any message you receive from us. After opting out, you may receive one final confirmation message. To opt back in, reply START. For help, reply HELP or contact us at [email protected].

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS consent and phone numbers collected for SMS purposes will not be shared with any third party.

Email Communications

We may send you emails related to your bookings, inquiries, and where you have consented, marketing communications. You may unsubscribe from marketing emails at any time by clicking the unsubscribe link included in every marketing email or by contacting us directly. Transactional and service-related emails cannot be opted out of while you remain an active client, as they are necessary to deliver our services.

Voice Calls

We may contact you by phone to conduct strategy calls, follow up on inquiries, or discuss our services. By providing your phone number through a form or booking process and proceeding with a consultation or inquiry, you consent to receive such calls. You may request removal from our calling list at any time by informing us during a call or by contacting us directly.

Carriers and Third-Party Platforms

SMS and voice communications are delivered through third-party telecommunications carriers and communication platforms. These providers are not responsible for the content of messages sent. Carrier messaging programmes and delivery are subject to each carrier's terms of service.

07 How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

Service Providers and Technology Partners

We work with carefully selected third-party service providers including CRM platforms, communication tools, website hosting, analytics services, scheduling systems, and advertising technology platforms. These providers may only use your information to perform services on our behalf and are contractually required to protect it.

Advertising and Analytics Platforms

We may share hashed or aggregated data with advertising and analytics platforms for measuring campaign performance and audience creation. Where required by applicable law, we obtain your consent before sharing data through cookies and tracking technologies.

Legal Requirements

We may disclose your information where required by law, regulation, legal process, or governmental request, or where necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If Kresda is involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or use of your personal information.

With Your Consent

We may share your information with other parties where you have given us explicit consent to do so.

08 Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. For individuals who have inquired about our services but not proceeded, we retain contact information for 24 months from the date of last meaningful interaction, after which it is deleted or anonymised. You may request deletion of your personal information at any time, subject to exceptions where we are legally required to retain data.

09 International Data Transfers

Kresda is based in Norway and primarily serves clients in the United States. Your personal information may be transferred to and processed in countries outside the EEA where data protection laws may differ. Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and data processing agreements with service providers.

10 Your Rights

Rights Under GDPR (EEA and UK Residents)

Right of Access — Request a copy of the personal information we hold about you
Right to Rectification — Request correction of inaccurate or incomplete information
Right to Erasure — Request deletion of your personal information in certain circumstances
Right to Restrict Processing — Request restriction of processing in certain circumstances
Right to Data Portability — Receive your personal information in a structured, machine-readable format
Right to Object — Object to processing based on legitimate interests
Right to Withdraw Consent — Withdraw consent at any time without affecting prior lawful processing

Rights for California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect and how it is used, the right to delete personal information, the right to opt out of the sale or sharing of personal information (we do not sell personal information), and the right to non-discrimination for exercising their privacy rights.

How to Exercise Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

To withdraw consent for cookie and tracking-based processing specifically, you may use the cookie settings tool available on our website at any time. This allows you to update or revoke your consent for non-essential cookies and third-party tracking technologies without affecting any other consent you have given.

For all other consent withdrawals, including SMS, email marketing, and voice communications, please contact us directly at [email protected] and we will process your request promptly.

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with Datatilsynet at datatilsynet.no.

11 Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, including secure hosting infrastructure, encrypted data transmission, and access controls. However, no method of transmission over the internet is completely secure. If you become aware of any potential security breach involving your personal information, please contact us immediately.

12 Children's Privacy

Our website and services are directed exclusively at business owners and professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently done so, we will immediately delete that information.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice on our website. Your continued use of our website and services after any changes constitutes your acceptance of the updated policy.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal information, please contact us: