PRIVACY
Privacy Policy
Last updated: 29 October 2026
This policy explains how Nova Motion Agency (“we”, “us”) handles personal information when you visit digitalservicelab.com, send us a project inquiry, or email us about a project.
1. Who we are
Nova Motion Agency is the trading name of a Norwegian sole proprietorship (enkeltpersonforetak, ENK), which is the data controller for the information described here.
- Brand: Nova Motion Agency
- Registered business name: HEADSHOTIST ABUSHAAR
- Organisation number: 838 726 712, registered in the Central Coordinating Register for Legal Entities (Enhetsregisteret). Not registered in the Norwegian VAT Register (MVA).
- Registered business address: Urtegata 20A, 0187 Oslo, Norway
- Contact email (including privacy questions): hello@digitalservicelab.com
2. What we collect
When you send the project inquiry form, we receive:
- your name and email address;
- your business or brand name, and your website if you give one;
- the type of video, the package you chose and your preferred delivery date;
- your project description;
- confirmation that you agreed to this policy.
When you email us directly, we receive your email address and whatever you choose to write.
When you visit the website, our hosting provider automatically processes technical information needed to deliver the pages, such as your IP address, browser type and the pages requested (see section 5).
What we do not collect on the website:
- no payment card details (see section 6);
- no account or login;
- no analytics, advertising or tracking tools;
- no cookies set by us.
3. How we use your information
We use your inquiry only to:
- reply to you;
- discuss and confirm the scope, price and timeline of your project;
- prepare a quotation and, if you approve, a Stripe invoice;
- deliver the project and keep the business records the law requires.
We do not sell your information. We do not send newsletters or marketing emails, and sending an inquiry never adds you to a mailing list. Your inquiry is used only to discuss your project with you. If we offer optional updates in the future, we will ask for your separate consent first, every message will include an easy way to unsubscribe, and we will update this policy.
Legal basis: we are based in Norway, so the GDPR applies through the Norwegian Personal Data Act (personopplysningsloven). We process your inquiry to take steps you asked for before entering into a contract, and to perform that contract. Technical security measures (section 5) are based on our legitimate interest in keeping the website and inbox safe from abuse.
4. How long we keep it
- Inquiries that don’t become paid projects: deleted 12 months after our last communication with you.
- Paying clients: we keep two kinds of records, for different periods.
- Project communications (your brief, emails, feedback and project files): kept while we deliver the work, then for 24 months after the project is completed, so we can support you if you return for revisions or new versions of your video. After that they are deleted.
- Invoices and accounting records (for example, the invoice, your name or business name and the payment details shown on it): kept for the periods required by the Norwegian Bookkeeping Act (bokføringsloven § 13): accounting documentation such as invoices for five years after the end of the financial year, and documentation such as agreements and significant correspondence about a booked transaction for three years and six months after the end of the financial year. We keep only what those rules require.
- Anti-spam records: see section 5; these are used for one hour only, and expired records are deleted automatically.
Earlier deletion: you can ask us at any time to delete your inquiry, project communications or project files before these periods end (see section 8). We will do so unless the law requires us to keep something. Invoices and accounting records, for example, must be kept for the legally required period even if you ask for deletion. In that case we keep only those records and delete the rest.
5. Security and anti-spam measures
- The website is served over HTTPS (encrypted).
- Inquiries are sent from our server to our mailbox by authenticated, encrypted email.
- To prevent spam, the server limits how often one connection can send the form. It keeps a short record of submission times, linked to a scrambled (hashed) form of the visitor’s IP address, not the address itself. Those records are used for one hour only; expired records are deleted automatically the next time the form is used.
- The form includes a hidden spam trap field and a short timing check. Neither stores information about you.
- Error logs record only technical failures and never contain your form details.
6. Payments
No payment is taken on this website. If you approve a quotation, we send you a secure invoice through Stripe. Stripe processes your payment details under its own privacy policy. We see only limited payment information, such as whether the invoice was paid. We never see your full card number.
7. Who processes your information for us
- Hostinger: website hosting and the business mailbox hello@digitalservicelab.com. Hostinger stores the website, the inquiry emails and its own server logs (Hostinger privacy policy).
- Stripe: invoicing and payments, only if you go ahead with a project.
Where your data is stored:
- Website and inquiry processing: Hostinger servers in Frankfurt, Germany (EU).
- Website backups: Hostinger, in France (EU).
- Business mailbox: provided by Hostinger, which stores the inquiry emails we receive under its data processing terms.
- Stripe: may process payment data outside the EEA, under its own safeguards.
Where any provider transfers data outside the EEA, it uses safeguards recognised by the GDPR, such as standard contractual clauses. We do not share your information with anyone else unless the law requires it.
8. Your rights
Under the GDPR you have the right to:
- ask what personal information we hold about you;
- ask us to correct or delete it;
- object to or restrict how we use it;
- receive a copy of it;
- withdraw consent where we rely on consent.
To use any of these rights, email hello@digitalservicelab.com. We will reply within one month, as the GDPR requires.
If you are unhappy with how we handled your information, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the data protection authority where you live.
9. Embedded content and links
Our portfolio videos are hosted on our own website, with no third-party video players. Links to other sites, such as Stripe or Hostinger, are governed by those sites’ own policies.
10. Children
Our services are for businesses. We do not knowingly collect information from children.
11. Changes to this policy
We may update this policy when our services or tools change. The “Last updated” date at the top shows the latest version.