{"id":3,"date":"2026-05-21T19:54:22","date_gmt":"2026-05-21T19:54:22","guid":{"rendered":"http:\/\/167.99.214.203\/?page_id=3"},"modified":"2026-05-31T23:35:19","modified_gmt":"2026-05-31T23:35:19","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.nxtl.ai\/?page_id=3","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<style id=\"nxtl-page-title-normal-weight\">\n.page-id-3 .wp-block-post-title { font-style: normal !important; }\n<\/style>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Effective date: 15 January 2026<\/strong><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">Summary (what this policy is about)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When you use a website that has integrated&nbsp;<strong>NXTL<\/strong>, we process:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the messages you send in the assistant<\/li>\n\n\n\n<li>some technical and usage data (like page URL, browser info, timestamps)<\/li>\n\n\n\n<li>certain identifiers\/cookies, where permitted<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We do this mainly:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>to provide the assistant and keep your conversation coherent<\/li>\n\n\n\n<li>to help the website owner understand and improve how NXTL works on their site<\/li>\n\n\n\n<li>to secure and maintain the service<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The website owner is usually the&nbsp;<strong>data controller<\/strong>&nbsp;for your use of NXTL on their site.&nbsp;<strong>The Next Level AS<\/strong>&nbsp;is mostly a&nbsp;<strong>data processor<\/strong>, and for some limited purposes also a controller (e.g. security and service maintenance).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We&nbsp;<strong>do not sell<\/strong>&nbsp;your personal data and we&nbsp;<strong>do not use customer data to train global models across customers<\/strong>. We aim to be transparent and to restore trust between users and providers of technical solutions.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">1. About The Next Level AS<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Next Level AS (\u201c<strong>The Next Level<\/strong>\u201d, \u201c<strong>we<\/strong>\u201d, \u201c<strong>us<\/strong>\u201d or \u201c<strong>our<\/strong>\u201d) is a independent company located in Norway. We provide&nbsp;<strong>NXTL<\/strong>, a conversational AI assistant that our customers embed on their own websites and services (together, the \u201c<strong>Service<\/strong>\u201d or \u201c<strong>NXTL<\/strong>\u201d).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">Company details<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Company:<\/strong>&nbsp;The Next Level AS<\/li>\n\n\n\n<li><strong>Address:<\/strong>&nbsp;Hetlandsgata 9, 4344 Bryne, Norway<\/li>\n\n\n\n<li><strong>Organisation no.:<\/strong>&nbsp;933 671 48<\/li>\n\n\n\n<li><strong>Email:<\/strong>&nbsp;contact@nxtl.ai<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This page informs you of our policies regarding the collection, use and disclosure of personal data when you interact with NXTL and the choices you have associated with that data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We use your data to provide, secure and improve NXTL. If you do not wish to provide personal data (directly or via the website where you use NXTL), we may not be able to provide the full functionality of the Service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Unless otherwise defined in this Privacy Policy, the terms used here have the same meanings as in our terms and conditions and in our agreements with the website owners who use NXTL.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">2. General Statement of Applicability of This Privacy Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This Privacy Policy applies to our collection, use and processing of personal data in connection with&nbsp;<strong>NXTL<\/strong>, including when:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>you use NXTL as an assistant or chat widget on a website or in an application operated by one of our customers (the \u201c<strong>Website Owner<\/strong>\u201d), and<\/li>\n\n\n\n<li>we process data on behalf of, or in relation to, that Website Owner.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">Who is responsible for your data?<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The&nbsp;<strong>Website Owner<\/strong>&nbsp;is generally the&nbsp;<strong>data controller<\/strong>&nbsp;for the use of NXTL on their own site or application. They decide&nbsp;<strong>whether<\/strong>&nbsp;and&nbsp;<strong>how<\/strong>&nbsp;NXTL is used, and which categories of data are shared with NXTL.<\/li>\n\n\n\n<li><strong>The Next Level AS<\/strong>&nbsp;typically acts as the Website Owner\u2019s&nbsp;<strong>data processor<\/strong>, processing data on their instructions.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">For certain limited and clearly defined purposes (for example security, abuse prevention, diagnostics and platform-level service improvement), The Next Level AS may also act as an&nbsp;<strong>independent data controller<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where we act as controller, this Privacy Policy describes how we process your data and on what legal bases. Where we act as processor, we process your data according to our agreements with the Website Owner, and the Website Owner\u2019s privacy policy will provide the primary information about how and why your data is used.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If there is any conflict between this Privacy Policy and the Website Owner\u2019s privacy or cookie notice, the Website Owner\u2019s notice will normally govern their use of NXTL on their site.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">3. The Next Level AS\u2019s Processing of Your Personal Data<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">3.1 Types of Personal Data Processed (\u201cInformation we collect\u201d)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Depending on how you interact with NXTL and how the Website Owner has configured the integration, we may process the following categories of personal data.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">a) Interaction and conversation data<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you use NXTL, we process the content of your interactions, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>messages you send to NXTL (user prompts)<\/li>\n\n\n\n<li>messages NXTL returns to you (assistant responses)<\/li>\n\n\n\n<li>metadata linked to those messages (e.g. which page you were on when you sent the message)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This data may contain personal data if you choose to include it in your messages (for example your name, contact details or other information about yourself or others).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">b) Signals, events and telemetry<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">NXTL\u2019s SDK and backend generate and store \u201csignals\u201d and events related to how the assistant is used, such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>opening or closing the assistant<\/li>\n\n\n\n<li>clicking specific buttons or options<\/li>\n\n\n\n<li>sending or receiving a message<\/li>\n\n\n\n<li>certain errors or technical events<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Signals can contain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>a&nbsp;<strong>signal type<\/strong>&nbsp;(e.g. user, assistant, event, telemetry)<\/li>\n\n\n\n<li>a&nbsp;<strong>signal identifier or session identifier<\/strong><\/li>\n\n\n\n<li>a&nbsp;<strong>timestamp<\/strong>&nbsp;for when the event occurred<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Some signals may include or be linked to the message content and metadata described above.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">c) Website and usage data<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you use NXTL, we may process data about the context in which the interaction takes place, for example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the&nbsp;<strong>URL or path<\/strong>&nbsp;where NXTL is used<\/li>\n\n\n\n<li>the&nbsp;<strong>referrer host<\/strong>&nbsp;(the site you came from)<\/li>\n\n\n\n<li><strong>UTM parameters<\/strong>&nbsp;and similar campaign parameters in the URL<\/li>\n\n\n\n<li>the&nbsp;<strong>language<\/strong>&nbsp;configured in your browser<\/li>\n\n\n\n<li><strong>screen resolution<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We may also process technical usage and diagnostic data, such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>browser type and version<\/li>\n\n\n\n<li>approximate geographic area inferred from IP address (e.g. country or region)<\/li>\n\n\n\n<li>time and date of interactions<\/li>\n\n\n\n<li>performance and error logs related to NXTL<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We do&nbsp;<strong>not<\/strong>&nbsp;attempt to determine your precise GPS location.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">d) Cookie and identifier data<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When NXTL is integrated on a website, we may use cookies or similar technologies to keep track of interactions from the same browser over time. This may include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the NXTL cookie&nbsp;<strong>nxtl_signal<\/strong>, which stores a compact \u201csignal stack\u201d of your interactions with NXTL to help link them into coherent sessions<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">For more detailed information about cookies and nxtl_signal, including duration and purposes, please see our&nbsp;<strong>Cookie Policy<\/strong>&nbsp;(see section 3.4).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">e) Data provided by the Website Owner<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The Website Owner may send additional metadata to NXTL, such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>an internal&nbsp;<strong>user ID<\/strong>, username or account identifier<\/li>\n\n\n\n<li>your&nbsp;<strong>role<\/strong>&nbsp;or segment (e.g. \u201cadmin\u201d, \u201cprospect\u201d, \u201cexisting customer\u201d)<\/li>\n\n\n\n<li>other profile attributes relevant to how they want NXTL to respond<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The exact data of this kind is determined by the Website Owner and described in their privacy policy. We process this data on their behalf when acting as a data processor.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">f) Contact, support and business communication data<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you contact us directly (e.g. by email):<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>we may process your&nbsp;<strong>name<\/strong>,&nbsp;<strong>email address<\/strong>,&nbsp;<strong>message content<\/strong>&nbsp;and any other information you choose to share<\/li>\n\n\n\n<li>if you act on behalf of a Website Owner or potential customer, we may also process your&nbsp;<strong>company<\/strong>&nbsp;and&nbsp;<strong>role<\/strong><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" style=\"font-style:normal\">g) Children\u2019s data<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">NXTL is not intended to be used by children as a stand-alone service. However, it may appear on websites that are open to a broad audience. We do not knowingly target or profile children under the age applicable in your jurisdiction.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If we become aware that we have processed personal data of a child in a way that requires parental consent under applicable law and such consent has not been obtained, we will take appropriate steps to delete the data or to obtain the necessary consent.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">3.2 Our Use of Your Personal Data (\u201cHow we use it\u201d)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use the data described above for the following purposes:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>To provide and maintain NXTL<\/strong>\n<ul class=\"wp-block-list\">\n<li>Deliver the assistant\u2019s core functionality: understand your messages, generate relevant responses and adapt to the Website Owner\u2019s configuration and content.<\/li>\n\n\n\n<li>Maintain conversation context within and, where configured, between visits in the same browser.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>To keep conversations coherent and useful<\/strong>\n<ul class=\"wp-block-list\">\n<li>Link your interactions from the same browser or session so that NXTL can \u201cremember\u201d limited context, using identifiers and cookies where permitted.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>To support the Website Owner<\/strong>\n<ul class=\"wp-block-list\">\n<li>Provide logs, diagnostics and aggregated statistics to the Website Owner so they can understand how NXTL is being used and improve their own services.<\/li>\n\n\n\n<li>Help the Website Owner respond to support requests or investigate issues related to NXTL.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>To improve and develop NXTL (without cross-customer model training on your data)<\/strong>\n<ul class=\"wp-block-list\">\n<li>Analyse signals and usage patterns (often in aggregate or pseudonymised form) to improve the accuracy, stability and user experience of NXTL.<\/li>\n\n\n\n<li>Use anonymised or aggregated statistics across customers to improve NXTL\u2019s features, where permitted by our agreements and applicable law.<\/li>\n\n\n\n<li><strong>We do not use customer data to train global models across customers in a way that would expose one customer\u2019s identifiable data or patterns to other customers.<\/strong>&nbsp;We aim to be a counterweight to misuse of user data and do not sell data onward.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>To monitor, secure and troubleshoot the Service<\/strong>\n<ul class=\"wp-block-list\">\n<li>Detect, prevent and address abuse, spam or misuse of NXTL.<\/li>\n\n\n\n<li>Monitor usage and performance to maintain a secure and reliable platform.<\/li>\n\n\n\n<li>Detect, investigate and fix technical issues and security incidents.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>To comply with legal obligations and handle disputes<\/strong>\n<ul class=\"wp-block-list\">\n<li>Comply with retention, accounting or disclosure duties under applicable law.<\/li>\n\n\n\n<li>Defend or exercise legal claims and enforce our agreements with Website Owners and others.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We do&nbsp;<strong>not<\/strong>&nbsp;sell your personal data and we do&nbsp;<strong>not<\/strong>&nbsp;use your data to build marketing profiles about you for advertising purposes.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">3.3 Legal Basis for Processing Personal Data Under the General Data Protection Regulation (GDPR)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When NXTL is used on a Website Owner\u2019s site, we may process personal data as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>a&nbsp;<strong>data processor<\/strong>, acting on the Website Owner\u2019s instructions; and\/or<\/li>\n\n\n\n<li>an&nbsp;<strong>independent data controller<\/strong>, for limited platform-level purposes.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Where we act as&nbsp;<strong>data processor<\/strong>, the Website Owner is responsible for determining and communicating the legal basis (for example, consent, legitimate interests or performance of a contract). Our processing is then based on our data processing agreement with the Website Owner.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where we act as an&nbsp;<strong>independent controller<\/strong>, our typical purposes and legal bases are:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Purpose (as controller)<\/strong><\/td><td><strong>Examples of data categories<\/strong><\/td><td><strong>Legal basis under GDPR<\/strong><\/td><\/tr><\/thead><tbody><tr><td>Provide and secure the NXTL platform<\/td><td>Interaction data, signals, technical and diagnostic data<\/td><td><strong>Legitimate interests<\/strong>&nbsp;and\/or&nbsp;<strong>contract<\/strong><\/td><\/tr><tr><td>Detect and prevent abuse, security incidents<\/td><td>Logs, IP-based region, event metadata<\/td><td><strong>Legitimate interests<\/strong>;&nbsp;<strong>legal obligation<\/strong>&nbsp;in some cases<\/td><\/tr><tr><td>Improve the performance and quality of NXTL (platform-level)<\/td><td>Aggregated or pseudonymised usage statistics, technical metrics<\/td><td><strong>Legitimate interests<\/strong>; and&nbsp;<strong>consent<\/strong>&nbsp;where required for certain analytics\/cookies<\/td><\/tr><tr><td>Use non-essential cookies\/identifiers (e.g. analytics)<\/td><td>Cookie\/ID data (e.g. nxtl_signal)<\/td><td><strong>Consent<\/strong>&nbsp;(where required by local law, e.g. EEA\/UK)<\/td><\/tr><tr><td>Comply with legal and regulatory obligations<\/td><td>Records required by law<\/td><td><strong>Legal obligation<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><br>In jurisdictions where consent is required for certain cookies or analytics (for example under ePrivacy rules in the EEA\/UK), we rely on the&nbsp;<strong>consent collected by the Website Owner<\/strong>&nbsp;via their cookie banner or privacy tools. If consent is not given, we will not use cookie-derived interaction data for non-essential analytics and improvement, but we may still process strictly necessary signals to provide the core functionality and security of NXTL.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Withdrawal of consent (through the Website Owner\u2019s tools) does not affect the lawfulness of processing based on consent before it was withdrawn, but may limit some functionality.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">3.4 Cookies and similar technologies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When NXTL is embedded on a Website Owner\u2019s site, we may use cookies and similar technologies to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>remember interactions from the same browser and keep conversations coherent<\/li>\n\n\n\n<li>support basic telemetry, diagnostics and platform security<\/li>\n\n\n\n<li>(where permitted) understand how the assistant is used to improve stability and user experience<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The main cookie used by NXTL is:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>nxtl_signal<\/strong>&nbsp;\u2013 a persistent cookie that stores a compact \u201csignal stack\u201d of your interactions with NXTL (such as events, user messages, assistant messages and technical telemetry). It typically has an expiry of up to 12 months from your last interaction and may contain the text you enter into the assistant.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Whether and how nxtl_signal is used, and for which purposes, can depend on:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>how the Website Owner has configured their cookie banner or consent solution, and<\/li>\n\n\n\n<li>which choices you make in that banner or settings panel.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In jurisdictions where consent is required for non-essential cookies or analytics, nxtl_signal will only be used for such purposes if valid consent has been obtained.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For&nbsp;<strong>full and up-to-date details<\/strong>&nbsp;about the cookies we use, including their names, purposes, lifetimes and legal bases, please see our dedicated&nbsp;<strong>Cookie Policy<\/strong>:&nbsp;<a href=\"https:\/\/www.nxtl.ai\/?page_id=32\">Cookie Policy<\/a>&nbsp;<strong><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Website Owner may also use their own cookies and third-party cookies on the same site. Those cookies are described in the Website Owner\u2019s own cookie and\/or privacy policy.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">4. Retention of Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Next Level AS retains personal data only for as long as necessary for the purposes set out in this Privacy Policy and in our agreements with Website Owners.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In particular:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Interaction and signal data<\/strong>\n<ul class=\"wp-block-list\">\n<li>Retained for the time needed to provide the Service, maintain conversation context (where configured), support and troubleshoot for the Website Owner, improve and secure NXTL, and comply with legal obligations.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Logs and diagnostic data<\/strong>\n<ul class=\"wp-block-list\">\n<li>Retained for a period appropriate to security, performance and troubleshooting needs, unless a longer period is required by law.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Support and contact data<\/strong>\n<ul class=\"wp-block-list\">\n<li>Retained as long as needed to handle your request and to maintain proper records of our communications.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Where we act as data processor, we may delete or return personal data earlier if instructed by the Website Owner, in line with our data processing agreement.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">5. Transfer of Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may process and store personal data in countries other than the one you are located in. This may include transfers:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>within the European Economic Area (EEA); and\/or<\/li>\n\n\n\n<li>to countries outside the EEA that may have different data protection laws.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Where we transfer personal data to a country that is not recognised by the European Commission as providing an adequate level of protection, we will ensure that appropriate safeguards are in place, such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Standard Contractual Clauses<\/strong>&nbsp;approved by the European Commission; or<\/li>\n\n\n\n<li>other appropriate safeguards permitted under data protection law.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You can contact us if you would like more information about the safeguards we use for international transfers.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">6. Disclosure of Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We do&nbsp;<strong>not<\/strong>&nbsp;sell your personal data. We may share personal data only in the following situations:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>With the Website Owner<\/strong>\n<ul class=\"wp-block-list\">\n<li>We share interaction data, signals and diagnostics with the Website Owner in accordance with our agreement with them, so they can operate and improve their services and their use of NXTL.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>With our service providers (sub-processors)<\/strong>\n<ul class=\"wp-block-list\">\n<li>We use trusted third parties to provide services such as hosting, storage, logging, monitoring and platform analytics. These providers process personal data on our behalf and only according to our instructions. A list of our main sub-processors is available to our customers on request or through our customer information channels.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>With professional advisers and auditors<\/strong>\n<ul class=\"wp-block-list\">\n<li>Where necessary, we share limited data with lawyers, auditors or other professional advisers, subject to confidentiality obligations.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>For legal reasons and protection of rights<\/strong>\n<ul class=\"wp-block-list\">\n<li>To comply with legal obligations, enforceable governmental or court orders.<\/li>\n\n\n\n<li>To protect and defend the rights, property or safety of The Next Level AS, our customers, users of NXTL or others, including enforcing our agreements.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In all cases, we limit the data shared to what is necessary for the specific purpose and require appropriate privacy and security safeguards.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">7. Links to Other Sites<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NXTL may be integrated into websites that contain links to external sites not operated by us. If you click a third-party link, you will be directed to that third party\u2019s site.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party websites or services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We encourage you to review the privacy policy of every site you visit, including the Website Owner\u2019s own privacy policy.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">8. Your Data Protection Rights<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Depending on your location and applicable law (for example, if you are in the&nbsp;<strong>European Economic Area (EEA)<\/strong>&nbsp;or the&nbsp;<strong>United Kingdom<\/strong>), you may have the following rights regarding your personal data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Right of access<\/strong>&nbsp;\u2013 to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy.<\/li>\n\n\n\n<li><strong>Right to rectification<\/strong>&nbsp;\u2013 to have inaccurate or incomplete personal data corrected.<\/li>\n\n\n\n<li><strong>Right to erasure (\u201cright to be forgotten\u201d)<\/strong>&nbsp;\u2013 to request deletion of your personal data in certain circumstances.<\/li>\n\n\n\n<li><strong>Right to restriction of processing<\/strong>&nbsp;\u2013 to request that we restrict processing in specific situations.<\/li>\n\n\n\n<li><strong>Right to object<\/strong>&nbsp;\u2013 to object to processing based on our legitimate interests, on grounds relating to your particular situation.<\/li>\n\n\n\n<li><strong>Right to data portability<\/strong>&nbsp;\u2013 to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, have it transferred to another controller.<\/li>\n\n\n\n<li><strong>Right to withdraw consent<\/strong>&nbsp;\u2013 where processing is based on consent, to withdraw that consent at any time.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Because NXTL is usually used on a Website Owner\u2019s site, it may be more appropriate to exercise some of these rights&nbsp;<strong>through the Website Owner<\/strong>, who is normally the primary data controller for your interactions with NXTL. We may coordinate with the Website Owner to respond to your request, or direct you to them where appropriate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We may ask you to verify your identity before responding and may not be able to fully comply with a request where we have overriding legal obligations or compelling legitimate interests.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You also have the right to lodge a complaint with your local data protection authority. In Norway, this is the&nbsp;<strong>Norwegian Data Protection Authority (Datatilsynet)<\/strong>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">9. Changes to This Privacy Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may update this Privacy Policy from time to time, for example if we change how we process personal data in NXTL or if legal requirements change.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When we make changes, we will:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>update the&nbsp;<strong>effective date<\/strong>&nbsp;at the top of this Privacy Policy; and<\/li>\n\n\n\n<li>where appropriate, notify our customers (Website Owners) so they can update their own information to users.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We encourage you to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">10. Jurisdiction and Applicable Law<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Subject to any mandatory local law that applies, this Privacy Policy shall be governed by and construed in accordance with the laws of&nbsp;<strong>Norway<\/strong>, and be subject to the non-exclusive jurisdiction of the courts of Norway.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This does not affect any rights you may have under applicable data protection laws in your country.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">11. How to Contact Us<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you have any questions about this Privacy Policy or about how we process personal data in connection with NXTL, you can contact us:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The Next Level AS<\/strong><br>Hetlandsgata 9<br>4344 Bryne, Norway<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organisation \/ company number:&nbsp;<strong>933 671 48<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Email:&nbsp;<strong>contact@nxtl.ai<\/strong><\/li>\n\n\n\n<li>Subject:&nbsp;<em>Privacy \/ NXTL<\/em><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You can also contact the Website Owner directly with questions about how they use NXTL and other services on their site, and about the legal bases they rely on for processing your data.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-style:normal\">Related privacy information<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.nxtl.ai\/?page_id=30\" data-type=\"page\" data-id=\"30\">Privacy Summary<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.nxtl.ai\/?page_id=3\" data-type=\"page\" data-id=\"3\">Privacy Policy<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.nxtl.ai\/?page_id=32\" data-type=\"page\" data-id=\"32\">Cookie Policy<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Effective date: 15 January 2026 Summary (what this policy is about) When you use a website that has integrated&nbsp;NXTL, we process: We do this mainly: The website owner is usually the&nbsp;data controller&nbsp;for your use of NXTL on their site.&nbsp;The Next Level AS&nbsp;is mostly a&nbsp;data processor, and for some limited purposes also a controller (e.g. security [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.nxtl.ai\/index.php?rest_route=\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.nxtl.ai\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.nxtl.ai\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.nxtl.ai\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.nxtl.ai\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3"}],"version-history":[{"count":7,"href":"https:\/\/www.nxtl.ai\/index.php?rest_route=\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":56,"href":"https:\/\/www.nxtl.ai\/index.php?rest_route=\/wp\/v2\/pages\/3\/revisions\/56"}],"wp:attachment":[{"href":"https:\/\/www.nxtl.ai\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}