PRIVACY POLICY

1. Introduction
This Privacy Policy explains how HoldFastX (“we”, “us”) collects, uses, and protects personal data when you use holdfastx.org. We are committed to handling your information responsibly and in compliance with the General Data Protection Regulation (GDPR).

2. Data We Collect
We may collect:

  • Account information: name, email address, password, and optional profile details.

  • Contact information: if you email us or request downloads.

  • Technical information: IP address, browser type, device data, cookies.

  • Usage information: downloads accessed, pages visited, login activity.

3. How We Use Your Data
We process personal data to:

  • Provide access to your account and downloads.

  • Communicate important updates or respond to inquiries.

  • Prevent misuse of the Website (spam, bots, attacks).

  • Improve our services and user experience.

We do not sell your data to third parties.

4. Legal Basis for Processing (GDPR)

  • Consent: when you sign up for an account or newsletter.

  • Contract: to deliver the account or download you request.

  • Legitimate interest: to maintain security and improve the Website.

  • Legal obligation: to comply with Norwegian/EU law if applicable.

5. Data Retention

  • Account data is kept until you delete your account.

  • Technical logs may be kept up to 12 months for security.

  • Legal/transaction records (if sales begin later) may be stored as required by law.

6. Security

  • We take reasonable steps to protect your data with secure hosting and SSL encryption.

  • You must keep your account login private.

  • Accounts may not be used to spread malware, spam, or automated access.

7. Sharing with Third Parties
We may share limited data with:

  • Hosting and service providers who operate the Website.

  • Platforms where we embed content (YouTube, Vimeo, Spotify, Instagram, SoundCloud). These services may collect their own data via cookies.

  • Email or newsletter providers (if you subscribe).

8. International Transfers
Some providers (e.g. YouTube, Vimeo, Mailchimp) may process data outside the EU/EEA. In such cases, standard contractual clauses or equivalent safeguards apply.

9. Your Rights
Under GDPR, you have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Withdraw consent at any time.

  • Object to or restrict processing.

  • File a complaint with Datatilsynet (the Norwegian Data Protection Authority).

10. Cookies
The Website uses cookies for functionality and analytics. You can disable cookies in your browser, but some features may not work properly.

11. Children
Accounts for users under 18 require consent from a parent or guardian. Parents should be aware that videos uploaded may be public and part of campaigns.

12. Changes
We may update this Privacy Policy at any time. The latest version will always be posted here.

13. Contact
If you have questions or requests regarding your data, contact us at: hello@holdfastx.org