Privacy Notice

Who we are

FairEleven is a service operated by WEBSERVICES - ENDRESEN, organisation number 995 879 859, registered in Norway at Vågslien 7, 5113 Tertnes, Norway. WEBSERVICES - ENDRESEN is the data controller responsible for the personal data described in this notice.

You can reach us at privacy@faireleven.com for any question about this notice or your personal data, at support@faireleven.com for general support, or at legal@faireleven.com for legal correspondence.

Scope of this notice

FairEleven does not use analytics, advertising cookies, tracking pixels, or any non-essential tracking technology anywhere on this site. The only feature that currently collects personal data is the optional email newsletter signup described below, and this notice is scoped to that feature. The newsletter signup form exists in FairEleven’s codebase but is not currently switched on for public use — it remains behind an internal, off-by-default setting until FairEleven completes its own enablement review. This notice describes the newsletter flow as it is actually built today, not features that may be added later.

Newsletter data we collect

If you sign up for the newsletter, we collect:

• your email address, stored in a normalized (trimmed, lower-case) form;
• your first name, if you choose to give one — this field is optional;
• your subscription status (for example: pending confirmation, active, unsubscribed, or suppressed);
• your preferred language, which currently defaults to English;
• a record of consent-related events (such as requesting to subscribe, confirming your subscription, or withdrawing consent) together with the date and time each occurred;
• the version identifier of the consent wording you accepted, so we can show which exact text you agreed to;
• the state of your confirmation token — never the token itself, only a one-way cryptographic hash of it, plus whether and when it was used or expired; and
• if applicable, a record that delivery to your address has been suppressed, and the reason (for example: you unsubscribed, an email bounced, or you complained about an email).

Newsletter data we do not collect

The newsletter signup flow does not collect or store your raw IP address, your full browser user-agent string, any analytics or advertising identifier, or any form of open tracking (detecting whether you opened an email) or click tracking (detecting whether you clicked a link inside an email).

Why we process this data

We use newsletter data to:

• process your subscription request;
• send you a confirmation email and confirm your subscription once you click it;
• send you the match analysis and newsletter updates you signed up for;
• keep evidence of when and to what wording you gave or withdrew consent, so we can demonstrate that a subscription was properly authorized; and
• prevent sending further emails to an address after you withdraw consent, after an email to it bounces or is marked as unwanted, or after your contact record is deleted.

Our legal basis for processing

We send you newsletter emails on the basis of the consent you give when you check the consent box and complete double opt-in confirmation. Where we keep a suppression record or a record of withdrawn consent after you unsubscribe, complain, or ask us to stop, we do so because we have a legitimate interest in — and, in some circumstances, a legal obligation to — avoid contacting you again and to be able to show that we honored your request. We rely on this basis only to the extent needed to maintain that evidence, not to keep sending you anything further.

How double opt-in works

Signing up is always voluntary. Submitting the signup form does not activate your subscription by itself — we send a confirmation email containing a one-time link, and your subscription only becomes active once you click that link and confirm it. That link expires 24 hours after it is sent. If you never confirm, no newsletter is sent to you.

Who we share data with

We use a small number of service providers to operate the newsletter, each acting on our instructions and only for the purpose described:

• Neon — our database provider. Neon stores your contact record, consent events, confirmation-token state, and suppression records as the single authoritative record of your subscription.
• Resend — our transactional email delivery provider. Resend is given your email address only to send you the confirmation email (and, once your subscription is active, newsletter content); it is never given your first name, and it does not perform open or click tracking for these emails.
• Vercel — our application hosting provider. Vercel runs the web application and handles the HTTP requests your browser makes to it.
• Zoho Mail — our email provider for the support, privacy, and legal correspondence addresses listed in this notice.

We do not sell or rent your personal data to anyone, and we do not use any provider beyond the four listed above for the newsletter.

International processing. Some service providers may process personal data outside Norway or the European Economic Area. Where this occurs, FairEleven requires an applicable legal transfer mechanism and appropriate safeguards. You may contact privacy@faireleven.com for further information.

How long we keep information

• We keep your active contact record for as long as you remain subscribed.
• An unconfirmed subscription request’s confirmation token expires after 24 hours.
• We retain consent-event evidence (what you agreed to, and when) as necessary to document the consent lifecycle and to respond to legal or rights-related questions.
• We retain suppression records as necessary to prevent unwanted future marketing after an unsubscribe, complaint, hard bounce, provider suppression, deletion, or another valid suppression event.
• Deletion and rights requests are handled manually during this stage of FairEleven’s development (see “Your rights” below).
• We review retention periodically and do not retain personal data for longer than necessary for the purpose described in this notice.

Your rights

Subject to applicable law, you may ask us to confirm what personal data we hold about you, to correct it, to delete it, or to restrict or object to our processing of it. At this stage of FairEleven’s development, we do not yet have a self-service tool for these requests — every request is currently handled manually by contacting us at privacy@faireleven.com. We will respond as promptly as we reasonably can.

Withdrawing consent and unsubscribing

You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting privacy@faireleven.com. Either way, we will record your withdrawal and stop sending you further newsletter emails. A full self-service preference center is planned as a future improvement.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first at privacy@faireleven.com so we can try to resolve it. You also have the right to lodge a complaint with your local data protection supervisory authority; in Norway, this is Datatilsynet (the Norwegian Data Protection Authority).

Security and data minimization

We collect only the newsletter data described above and no more. Confirmation tokens are never stored in a form that could be used to confirm a subscription on their own — only a one-way cryptographic hash is kept. We do not log or store your email address or confirmation token in application error logs; internal failures are recorded using fixed, generic messages instead.

What we do not do

• We do not sell your personal data.
• We do not use your data for advertising, profiling, or retargeting.
• We do not make automated decisions about you based on your subscriber data.

Changes to this notice

If we change this notice, we will update the version and effective date at the top of this page. Consent already given under an earlier version of our consent wording (currently version 2026-07-30) remains valid under that version even after the wording is later updated.

Contact us

WEBSERVICES - ENDRESEN, Vågslien 7, 5113 Tertnes, Norway. Email privacy@faireleven.com for privacy questions, support@faireleven.com for general support, or legal@faireleven.com for legal correspondence.