Data protection
Last updated: October 10, 2026
This page explains how we protect your data, how to exercise your rights under the GDPR, and which cookies we use.
1. Controller and contact
Pay It Forward International, org.nr. 938096406, Husabøryggen 102, 4083 Hundvåg, Stavanger, Norway. For any data protection matter: hi@payitforward.international.
2. Principles we apply
- We collect only the data needed for each purpose.
- We do not sell or share data for advertising purposes.
- Only the team members who need the data can access it.
- We sign data processing agreements with all our providers.
- We regularly review what data we hold and delete what is no longer needed.
3. Security measures
- Encrypted connections (HTTPS) across the whole website.
- Role-based access control and secure authentication on the platform.
- Backups managed by our providers.
- Providers with recognized security certifications (for example SOC 2).
4. Your rights
| Right | What it means |
|---|---|
| Access | Know what data we hold about you and receive a copy |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Ask us to delete your data, except what the law requires us to keep |
| Restriction | Ask us to stop using your data temporarily |
| Portability | Receive your data in a structured format |
| Objection | Object to processing based on legitimate interest |
| Withdraw consent | At any time, without affecting what was done before |
5. How to exercise them
Write to hi@payitforward.international stating which right you want to exercise. We may ask you to confirm your identity. We reply within a maximum of 30 days and the process is free of charge.
6. Complaints
If you are not satisfied with our reply, you can complain to Datatilsynet, the Norwegian data protection authority (datatilsynet.no), or to the authority in your EEA country of residence.
7. Security breaches
If a breach affecting personal data occurs, we notify Datatilsynet within a maximum of 72 hours, and the people affected when there is a high risk to them.
8. Minors
The website is not aimed at children under 16. We do not knowingly collect data from minors without their guardians' authorization.