Privacy / Plain language
Your information should never disappear into a black box.
This page explains what happens on the site, what changes when you choose WhatsApp or email, and what still needs to be confirmed before public launch.
Who is responsible
Controller: Nordic Growth Lab
Contact: hello@nordicgrowthlab.com
Operating area: Finland / remote collaboration
Pre-launch requirement. The registered legal name, Business ID, and business address must be added here before this website is published. Nordic Growth Lab is currently shown as the public studio identity; it is not a substitute for the controller's legal identity.
What the website does now
This prototype uses no analytics, advertising pixels, marketing trackers, or non-essential cookies. The website planner and growth brief run locally in your browser. Your selections are not submitted to Nordic Growth Lab and are not stored by the website.
If you choose to open WhatsApp, the site creates a pre-filled draft and sends it to WhatsApp only when you click the link. Nothing is sent as a message until you review it and choose to send it inside WhatsApp.
A production hosting provider may process limited technical logs needed to deliver and secure the website. The provider and exact log-retention details must be documented here when hosting is selected.
Enquiry data and why it is used
When you contact us by WhatsApp or email, we may receive your name, work email, company, website, project challenge, investment range, project context, and subsequent correspondence.
We use that information to answer your enquiry, assess project fit, prepare a scope or proposal, take steps you request before a possible contract, administer an active business relationship, and protect the security of our communications.
The legal bases are steps taken at your request before entering a contract, our legitimate interests in responding to and administering genuine business enquiries, and legal obligations that apply to business records.
Who may receive the data
Access is limited to people authorised to handle Nordic Growth Lab enquiries and delivery, plus service providers needed for communication, hosting, security, and business administration.
When you use WhatsApp, WhatsApp Ireland Limited and related Meta companies process information under their own terms. Personal message content is end-to-end encrypted, while WhatsApp still processes account, device, connection, and usage information described in its EEA privacy policy.
Retention and international processing
Enquiries that do not become a project are intended to be deleted or anonymised within 12 months. Active client correspondence is retained for the relationship and as long as reasonably needed afterwards. Contract, invoicing, and accounting records are retained for the periods required by applicable law.
WhatsApp and other future technology providers may process information outside the European Economic Area using the safeguards described in their own privacy documentation. Provider choices and the internal deletion routine must be confirmed before launch.
Your rights
Depending on the situation, you may request access to your personal data, correction, deletion, restriction, or portability, and you may object to processing based on legitimate interests. Contact hello@nordicgrowthlab.com to make a request.
You may also contact Finland's Office of the Data Protection Ombudsman. The authority normally asks that you contact the controller first.
Changes to this notice
This notice will be updated before analytics, new enquiry tools, scheduling, or other data-processing services are introduced. Material changes will be reflected on this page.
Last updated: 22 July 2026