Privacy Policy

How Independent Consultants handles your personal data.

Privacy Policy

1. Data Controller

Independent Consultants AS is the data controller for personal data collected through our websites and services. If you have questions about our processing of personal data, please contact us at post@ic.no.

2. What Personal Data Do We Collect?

We collect the following personal data depending on how you use our services:

  • Contact information: Name, email address, phone number and company (upon member registration)
  • CV: If you upload your CV to be matched with relevant assignments
  • Profile photo: If you choose to upload a profile photo
  • Interest registrations: Information about which assignments you have expressed interest in
  • Profile preferences: Seniority, skills, preferred locations and working modes (optional information used to improve matching)
  • Consent logs: Timestamp, consent text, IP address and browser information to document obtained consent (GDPR Art. 7(1))

3. Purpose of Processing

We process your personal data for the following purposes:

  • Managing your member account and profile
  • Matching you with relevant consulting assignments based on your CV and expertise
  • Handling interest registrations and forwarding your CV and contact information to the hiring company when you express interest
  • Sending you information and updates about the service, and email notifications about matching assignments if you have opted in
  • Improving and developing our services

4. Legal Basis

Our processing of personal data is based on the following legal grounds:

  • Consent (GDPR Art. 6(1)(a)): Acceptance of the privacy policy and terms upon registration, uploading your CV and profile photo, and opting in to email notifications about matching assignments are based on your explicit consent. Each consent event is logged with timestamp and text. You may withdraw consent at any time by deleting your CV, changing notification settings, or deleting your account.
  • Contract (GDPR Art. 6(1)(b)): Processing of contact information and interest registrations is necessary to fulfil the agreement to facilitate consulting services.
  • Legitimate interest (GDPR Art. 6(1)(f)): Improving our services and communicating with you as a member.

5. Sharing of Personal Data

Your CV and profile information is shared with (a) employees at Independent Consultants AS who work with assignment matching, and (b) the relevant hiring company when you explicitly express interest in a specific assignment. You will be informed of this sharing before you submit your interest. We do not share your personal data with other third parties without your explicit consent, except for:

  • Data processors: We use services from Clerk (authentication), Supabase (data storage and CV file hosting), Resend (email delivery), Sanity (content management) and Vercel (hosting). These process data on our behalf under data processing agreements (DPA).
  • International transfer: Some processors (Clerk, Resend, Sanity, Vercel) operate infrastructure in the USA. Such transfers occur on the basis of the European Commission's Standard Contractual Clauses (SCC) and the adequacy decision for the EU-US Data Privacy Framework, cf. GDPR Chapter V.
  • Legal requirements: We may disclose information if required by law.

6. Retention

We retain your personal data as long as your account is active. When you delete your account, all your personal data is deleted, including profile, CV, interest registrations and consent logs. Consent logs are retained for the lifetime of the member account as documentation of obtained consent, in accordance with GDPR Art. 7(1).

7. Your Rights

You have the following rights under GDPR. To exercise these rights, contact us at post@ic.no:

  • Right of access: You may request a copy of all personal data we have stored about you.
  • Right to rectification: You can update your information at any time via your profile page.
  • Right to erasure: You can delete your CV at any time via the profile page, or delete your entire account. All your data will then be permanently removed from our systems.
  • Right to data portability: You may request to receive your personal data in a structured, machine-readable format.
  • Right to withdraw consent: You may withdraw consent at any time for processing based on consent, for example by deleting your CV or turning off email notifications in your profile.
  • Right to object: You may object to processing based on legitimate interest, cf. GDPR Art. 21.

8. Security

We take the security of your personal data seriously. All communication with our websites is encrypted with TLS. Data is stored with reputable cloud services with robust security measures, and access to personal data is restricted to authorised personnel.

9. Contact and Complaints

For questions about privacy or to exercise your rights, contact us at post@ic.no. If you believe our processing of personal data does not comply with regulations, you have the right to lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no).

Last updated: 6 May 2026