Privacy Policy

1. Introduction

SOF Active AS, operating under the brand “Corp Active” (“we”, “us”, or the “Company”), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website http://corpactive.io/ and related services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).

2. Data controller

The data controller responsible for your personal data is:

SOF Active AS Dalsveien 13B, 0376 Oslo, Norway Email: Contact@CorpActive.io Phone: +47 92 29 13 99

3. Information we collect

We may collect the following categories of information:

• Information you provide directly: name, email address, phone number, company name, job title, billing details, and any other information you submit through forms, account registration, or communications with us.
• Information collected automatically: IP address, browser type and version, device information, operating system, referring URL, pages visited, time spent on pages, and other usage data collected through cookies and similar technologies.
• Information from third parties: information we receive from service providers, business partners, analytics providers, and publicly available sources.

4. How we use your information

We use personal data for the following purposes:

• to provide, operate, and maintain the services;
• to process transactions and send related information;
• to create and manage user accounts;
• to communicate with you, including responding to inquiries and sending service-related notices;
• to send marketing communications where you have consented or where permitted by law;
• to improve the Website and develop new features;
• to analyze usage and trends;
• to detect, prevent, and address fraud, security issues, and technical problems;
• to comply with legal obligations and enforce our Terms.

5. Legal basis for processing

In accordance with the GDPR, we process personal data on the following legal bases:

• Contract (Art. 6(1)(b)): to perform a contract with you or take pre-contractual steps at your request.
• Consent (Art. 6(1)(a)): where you have given consent — for example, for marketing communications or non-essential cookies.
• Legitimate interests (Art. 6(1)(f)): for our legitimate interests in operating, improving, and securing the services, provided these are not overridden by your rights and freedoms.
• Legal obligation (Art. 6(1)(c)): to comply with applicable laws, including Norwegian accounting and tax legislation.

6. Cookies and tracking technologies

We use cookies and similar technologies to operate the Website, analyze traffic, and improve your experience. Cookies fall into the following categories: strictly necessary, performance/analytics, functional, and marketing. You can manage cookie preferences through the cookie banner on the site or through your browser settings. Disabling certain cookies may affect Website functionality. For details, see our [Cookie Policy] if available.

7. Sharing of personal data

We may share personal data with:

• Service providers who process data on our behalf (e.g., hosting, email delivery, analytics, payment processing, customer support);
• Professional advisors such as lawyers, accountants, and auditors;
• Authorities or third parties where required by law, court order, or to protect rights, property, or safety;
• Business transfers in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal data.

8. International transfers

Your personal data is primarily processed within the European Economic Area (EEA). Where personal data is transferred outside the EEA, we put in place appropriate safeguards as required by the GDPR — typically the European Commission’s Standard Contractual Clauses (SCCs) — to ensure your data receives an equivalent level of protection.

9. Data retention

We retain personal data for as long as necessary to fulfil the purposes set out in this Policy, comply with legal obligations (including a five-year retention period for accounting records under Norwegian law), resolve disputes, and enforce agreements. When data is no longer needed, it is deleted or anonymized.

10. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• access to your personal data;
• correction of inaccurate or incomplete data;
• erasure (“right to be forgotten”);
• restriction of processing;
• objection to processing, including for direct marketing;
• data portability;
• withdrawal of consent at any time, without affecting prior lawful processing.

To exercise these rights, contact us at Contact@CorpActive.io. We will respond within the period required by applicable law (normally within one month).

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) — see www.datatilsynet.no — if you believe our processing of your personal data infringes the GDPR.

11. Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is fully secure, and we cannot guarantee absolute security.

12. Children’s privacy

The services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

13. Third-party websites

The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies.

14. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Material changes will be communicated where reasonably practicable.

15. Contact

For questions or concerns about this Privacy Policy or our data practices, contact:

SOF Active AS (Corp Active) Dalsveien 13B, 0376 Oslo, Norway

Email: Contact@CorpActive.io

Phone: +47 92 29 13 99