Privacy by design & zero tracking.
23 Flow operates under the Norwegian Personal Data Act (Personopplysningsloven) and EU GDPR. We believe in total data sovereignty: zero tracking cookies and tenant-native enterprise execution.
We do not use tracking cookies, analytics pixels, or advertising profiling trackers on this website. Because we do not track your behavior, there is no annoying cookie banner.
1. Zero Tracking Cookies
This website serves lightweight, static assets without third-party tracking scripts, remarketing tags, or tracking pixels. Local storage is used strictly for storing your theme preference (light/dark mode), which never leaves your device.
2. Inquiries and Direct Communications
When you contact us via email (hello@23flow.com) or submit a call request through our booking modal, we collect only the information you voluntarily provide (name, work email, topic, note). We use this information solely to coordinate meetings and provide advisory responses. We never sell, rent, or transfer contact details to third parties.
3. Public Sector Architecture & Data Sovereignty
During client advisory and implementation sprints with Norwegian municipalities and public bodies, our solutions run directly inside your organization’s Microsoft 365 tenant boundary. We do not extract, store, or process municipal case data on external third-party infrastructure, guaranteeing full compliance with Schrems II, Noark-5, and Norwegian public archival regulations.
4. Exercise Your GDPR Rights
If you have questions regarding data protection or wish to exercise your statutory rights under GDPR (access, rectification, or deletion of communications data), contact our privacy team directly at hello@23flow.com.