Privacy policy

Last updated: 8 April 2026

1. Data controller

Bu Composite AS (org. no. 931 469 371) is the data controller for personal data collected via this website and our services.

Contact:
Email: [email protected]
Phone: +47 903 62 498
Address: Bergen, Norway

2. What data we collect

Booking a roof inspection or meeting

When you book an inspection or a meeting via the website, we collect: name, email address, phone number and address (for inspections). This data is necessary to deliver the service you request.

Legal basis: Contract (GDPR art. 6(1)(b)).

Email communication

Emails sent in connection with bookings and customer follow-up are stored to ensure good customer service and traceability. The content is available to relevant employees at Bu Composite.

Legal basis: Legitimate interest (GDPR art. 6(1)(f)).

Analytics and cookies

We use analytics tools to understand how the website is used. Analytics tools are loaded only after your consent via the cookie banner. No analytics cookies are set without your active consent.

Legal basis: Consent (GDPR art. 6(1)(a)).

Necessary cookies

We use one cookie (cookie_consent) to remember your cookie choice. This one is technically necessary and does not require consent.

Visitor statistics

We collect anonymised visitor data to understand how the website is used. This includes page views, device type, screen size and approximate geographic location (country/city). Data is not linked to individuals unless you actively identify yourself (for example when booking).

Legal basis: Legitimate interest (GDPR art. 6(1)(f)).

3. Advertising and marketing

We use our own tools to manage advertising campaigns on social media.

Ad tracking

We use tracking tools from advertising platforms to measure the effect of our ads. The following events may be sent to the advertising platform:

• When you book an inspection
• When a booking is confirmed
• When a quote is accepted

Personal data (email, phone, name) is encrypted before being sent. The advertising platform cannot read the data directly, but uses it to match events with user profiles for ad optimisation.

Legal basis: Legitimate interest (GDPR art. 6(1)(f)).

Ad targeting

Our ads may be targeted based on geographic location, age group and interests. We do not use sensitive personal data for targeting.

4. AI tools

We use AI services internally to improve our services, among other things for analysing inspection data and producing content. Personal data is not sent to AI services — only anonymised data and product information is used.

5. Calendar and email

When you book, a calendar event is created and a confirmation email is sent automatically. These services process your name, email address and appointment time.

6. Sharing of data

We do not share personal data with third parties, with the exception of:

• Cloud providers — email, calendar, database and hosting (data processors)
• Advertising platforms — encrypted event data for ad optimisation

All data processors are subject to GDPR-compliant agreements.

7. Storage and deletion

Personal data related to bookings and projects is stored for as long as the customer relationship is active, and deleted within 3 years of the last activity unless a statutory retention obligation applies.

Encrypted data held by advertising platforms is deleted in accordance with their retention rules. You may contact us at any time to request deletion of your data.

8. Your rights

You have the right to:

• Request access to the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for analytics cookies
• Object to processing based on legitimate interest
• Lodge a complaint with the Norwegian Data Protection Authority

To exercise your rights, contact us at[email protected].

9. Automatic deletion via social media

If you remove our app from your social media account, we automatically receive a deletion request. We then delete all data we have stored that is linked to your user ID within 30 days.

10. Changes

We may update this policy. Material changes will be announced via the website. The current version is always available on this page.