Privacy notice

This notice explains how GG Consult ("we", "us") handles your personal data when you use GG Consult. We are the data controller. Contact us at info@ggconsultnorway.com or Prinsessealleen 2F, 0276 Oslo, Norway. Our service is for people aged 18 and over.

What we collect

• Account details: your name and email address, and your Google account name if you sign in with Google. You can create an account just to use the Requirements Hub; we then store only these details.
• Contact details when you request a package: your phone or WhatsApp number, citizenship and the country you live in.
• Application details: your education, grades, work experience, English test results, study preferences, any notes you give us and, if you choose to share it, your personal story for your motivation letters.
• Documents you upload: for example your CV, transcripts, diploma and English test certificate.
• Payments: which package you bought, the amount and date, and the reference of your bank transfer or Mobile Money payment. We never ask for your bank or Mobile Money login or PIN.
• Messages and status updates about your application, and meetings you book with your consultant.
• Courses you save in the Requirements Hub, and which deadline reminders we have sent you.
• Documents we prepare for you, such as your assessment, CV, course shortlist and letters, including earlier drafts.
• Technical data: your IP address, browser and the pages you request, recorded in our providers' sign-in and server logs for security. These logs are kept for a limited time and never used for advertising.

Why we use it, and our legal basis

• To provide the service you ordered (reviewing your background, tailoring your CV, matching programmes): necessary to perform our contract with you.
• To take payment and keep accounting records: contract and legal obligation.
• Requirements Hub account: to show you deadlines and full admission requirements: necessary to provide the service you signed up for.
• Deadline reminders and tips: only if you tick the box in your portal (consent). You can turn them off at any time; emails about your account and orders are sent regardless.
• AI-assisted drafting: we may use an AI tool (Claude, by Anthropic) to prepare first drafts that your consultant then reviews and edits. We only do this with your separate consent, which you can give or withdraw at any time on your order in the portal. We send only what the draft needs: your answers about education, experience, English and goals, and your CV. We don't add your name, email address or phone number ourselves, but your CV may contain them.
• Checking that motivation letters are individual: before a letter is released, we compare its wording with other letters we have written, so that no two clients receive similar text. This comparison happens inside our own system; other clients never see your letter. Our legitimate interest in delivering original work.
• Your agreement to our terms: when you send an order we record when you accepted our terms and which version, as proof of our agreement (contract).
• To keep the service secure (for example sign-in and abuse prevention): our legitimate interest.

Who we share it with

We use trusted service providers who process data on our behalf under data processing agreements:

• Supabase: database, sign-in and document storage, hosted in the EU (Stockholm).
• Resend: sending emails about your account and application.
• Anthropic: AI-assisted first drafts, only if you consent. Under its commercial terms, Anthropic does not use this data to train its models.
• Google (Firebase App Hosting and Google Cloud): hosting of the website and our daily scheduled tasks, in the EU (the Netherlands).
• Google Workspace: our business email, for messages you send to our contact address and our replies.
• The video-call service named in your meeting link (for example Google Meet), if you book a meeting with your consultant.
• Google sign-in: our sign-in pages load Google's sign-in button, so Google receives your IP address and browser details when you open them; your Google account details reach us only if you choose to sign in with Google.
• Cloudflare: our domain name service and the redirect from www.ggconsultnorway.com.

Some providers may process data outside the EU/EEA. Where they do, we rely on safeguards such as the EU Standard Contractual Clauses. We do not sell your data, and we do not share it with universities unless you ask us to.

How long we keep it

• Uploaded documents: deleted automatically 12 months after your case is closed, or sooner if you ask.
• Documents we prepare for you: kept while your account exists, so you can download them again, and deleted with your account.
• Your account and application details: kept while your account is active, and deleted when you delete your account (you can do this yourself in your portal) or ask us to.
• Payment and accounting records: kept for as long as Norwegian bookkeeping law requires.
• Backups: a weekly copy of our database and stored files, kept in a private Google Cloud bucket in the Netherlands and deleted automatically after 90 days. Data you delete also disappears from backups within 90 days.

Cookies

We only use cookies that are needed to keep you signed in. We do not use advertising or analytics cookies.

Your rights

You can ask to see, correct, download or delete your data, object to or restrict how we use it, and withdraw consent at any time. In your portal, under "Your data and account", you can download all your data and delete your account yourself. For anything else, email info@ggconsultnorway.com. You can also complain to a data protection authority, for example Datatilsynet in Norway or the Data Protection Commission in Ghana.

Changes

If we change this notice, we'll update the date above and tell you about significant changes by email.