Privacy Policy
This policy explains how WeForm handles personal data when you use weform.agency or contact us.
Last updated: 10 July 2026
1. Who is responsible
WeForm AS (organisation number 984 023 413 MVA) is responsible for the processing described here. Questions and privacy requests can be sent to hello@weform.agency.
2. Data we process
- Contact form: If you contact us, we process the name, contact details, company information, website, phone number and message you choose to provide. The form sends the message through Resend, or through a separately configured delivery integration. Contact submissions are not stored in our public Sanity content dataset.
- Newsletter: If you subscribe, Mailchimp processes your email address and any subscription metadata needed to send and manage the newsletter. You can unsubscribe through the link in each email.
- Aggregate analytics: We use Plausible to understand overall website traffic. It processes page URL, referrer, browser, operating system, device type and approximate location. Plausible does not use analytics cookies or store raw IP addresses or full user-agent strings. Vercel Speed Insights measures aggregate performance and web-vital data.
- Security and abuse prevention: Our server uses request data such as IP address and user agent to create a salted hash for short-lived rate-limit keys in Upstash. The raw IP address and user agent are not stored in the key.
- Embedded video: Pages with Vimeo video send standard connection data to Vimeo. We request Vimeo's Do Not Track mode where supported, but Vimeo may still process technical data or set security and essential cookies needed to deliver the player.
- Project collaboration: If you choose to exchange project files with us through Dropbox, Dropbox processes the files and account information required to provide that shared workspace.
3. Why we process data
We process enquiries to respond to you, prepare requested proposals and take steps toward a contract. Newsletter data is processed on the basis of your consent. Security, service reliability, aggregate analytics and website improvement are based on our legitimate interests in operating a secure and useful website.
4. Service providers and sharing
We do not sell personal data. We use service providers only where needed to operate the website and our services. These may include Vercel for hosting and performance measurement, Plausible for aggregate analytics, Resend for contact email delivery, Upstash for short-lived rate limiting, Mailchimp for newsletters, Vimeo for embedded video, Dropbox for project collaboration and Sanity for public website content.
Providers process data under their own terms and applicable data-processing agreements. A configured contact-delivery integration may also receive the information you submit so that our team can respond.
5. Retention
We keep contact correspondence only as long as needed to respond, manage a potential or active client relationship, meet legal obligations and resolve disputes. Newsletter data remains in Mailchimp until you unsubscribe or ask for deletion. Upstash rate-limit keys expire automatically after a short period. Aggregate analytics and service logs are retained according to the relevant provider settings and operational needs.
6. International transfers
Some providers may process data outside Norway or the European Economic Area. Where required, transfers are protected through an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism.
7. Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).
8. Security
We use appropriate technical and organisational measures to protect personal data. No internet transmission or storage system can be guaranteed completely secure.
9. Changes
We may update this policy when our services or legal obligations change. The current version and update date will remain available on this page.
10. Contact
For questions or requests, email hello@weform.agency.
