Privacy Policy
Last updated: 17 September 2026
Introduction
To be able to provide our services and comply with our legal obligations, we must process personal data about our customers (“customer data”). Ship O Hoi AS, represented by the highest administrative manager, is the data controller and is responsible for ensuring that personal data is processed in accordance with applicable legislation, including the EU General Data Protection Regulation (GDPR), the Accounting Act (documenting expenses and invoicing), and the Marketing Act.
In the following, we explain how we process customer data and what rights you have in this regard. If you have any questions or would like to exercise your rights as a data subject, you may contact us at hei@ship-ohoi.no. You also have the right to lodge a complaint with the Norwegian Data Protection Authority regarding any matter related to the processing of your personal data.
Why and How We Collect Customer Data
When you create a profile, we will register information such as your name, phone number, and email address. If you rent out a boat and receive payouts through Ship O Hoi, we also verify your identity with BankID and register your national identification number, date of birth and address, because we are required by law to report sellers on digital platforms to the tax authorities. The purpose of processing this data is to fulfill our agreement with you and comply with our legal obligations.
When you use our service, we will store your rental history to safeguard against potential damages or breaches during a rental period and to keep a record of who has rented a vessel or berth.
We also use your customer data as described above in our communications with you via the app, email, and SMS—this includes booking confirmations, time-sensitive notifications related to your rental period, and receipts.
If you have consented, we may also send you information about products and services that may be beneficial to you via email or app notifications.
Additionally, we process data to better understand your needs and to further develop our services. The legal basis for this is our legitimate interest in improving our services, as we consider the impact of this processing to be minimal for you. Where possible, we limit the use of personal data, anonymize data, and assess the impact of processing to reduce its effect.
Examples of data use for statistics or development purposes:
- Collecting and analyzing data to better understand service usage and improve user experience, e.g., through surveys (online or by phone) or voluntary feedback via phone or chat.
- Using aggregated statistical data to understand how the service is used and to group users with similar characteristics (e.g., number of rentals, general location, age). In these cases, data is anonymized, and you cannot be personally identified.
- Using data to troubleshoot or fix errors.
Examples of data use for service delivery:
- Invoicing and payment information for processing payments.
- Use of real-time data during bookings, such as your last known position from your mobile device, to assist with navigation or customer support.
- Logging and handling customer inquiries (online or by phone) to provide assistance when needed.
- Automatic translation of listing descriptions and reviews, so that they can be read in your language.
Legal Basis for Processing
We only process personal data when we have a legal basis for doing so under the GDPR:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, bookings, payments, payouts, messages between renters and owners, and customer support | Performance of a contract (GDPR Art. 6(1)(b)) |
| Accounting, identity verification and reporting of sellers to the tax authorities, and disclosure to public authorities when required | Legal obligation (GDPR Art. 6(1)(c)) |
| Security, logging, rate limiting, abuse and fraud prevention, and service reliability | Legitimate interest in keeping the service safe and stable (GDPR Art. 6(1)(f)) |
| Making public boat inventory available through AI assistants and other approved integrations | Legitimate interest in making our marketplace available (GDPR Art. 6(1)(f)) |
| Statistics, product development and personalization | Legitimate interest in improving our services (GDPR Art. 6(1)(f)) |
| Newsletters and marketing, and analytics and marketing cookies | Consent (GDPR Art. 6(1)(a)), which you can withdraw at any time |
Where we rely on legitimate interest, you have the right to object to the processing (see “Your Rights” below).
AI Assistants and Public Inventory Services
Ship O’Hoi may make publicly available boat inventory accessible through third-party AI assistants and other approved integrations. When these services communicate with Ship O’Hoi, we may process technical information such as IP address, request metadata and timestamps for security, rate limiting, abuse prevention, service reliability and analytics. We do not provide private account information, payment information or private owner or renter information through these public inventory services.
The public inventory only contains information that is already shown publicly on ship-ohoi.no, such as boat details, prices, availability, ratings and images. The names and contact details of private owners are never included, the location of boats rented out by private owners is only shown approximately, and contact information in listing descriptions is removed.
What you write to an AI assistant is processed by the provider of that assistant (for example OpenAI, Anthropic or Google) under their own privacy policy. Ship O’Hoi only receives the search criteria the assistant sends us, such as destination, dates and number of guests. Links from an AI assistant to ship-ohoi.no are marked with the name of the assistant, so that we can measure how many visitors come from these services.
Analytics and Logging
Server and request logs: When you or a service communicates with our website, app or API, our servers automatically log technical information such as IP address, requested address (URL), browser or app type, referring page, response status and timestamp. We use these logs to operate the service, investigate errors, and detect and prevent attacks and abuse. Rate limiting uses the IP address temporarily in memory and is not stored.
Error reporting: We use Sentry (stored in the EU) to detect and fix errors. Error reports are filtered so that passwords, form content, cookies and payment information are not included.
Analytics: We use PostHog (stored in the EU), Google Analytics and DataFast to understand how our website and app are used, for example which pages are visited and where visitors come from. If you are logged in, analytics events may be linked to your user ID so that we can understand how the service is used across devices. DataFast is also used to measure visits from search engines and AI crawlers.
Transfer of Personal Data to Third Countries
Ship O Hoi primarily stores and processes data in Norway and within the EU/EEA. In some cases, however, we cooperate with partners outside the EU/EEA (“third countries”). In such situations, we take additional precautions to ensure data is processed in line with our standards, including using EU Standard Contractual Clauses, the EU–U.S. Data Privacy Framework, or transferring data only to countries pre-approved by the EU.
Who We Share Personal Data With
Ship O Hoi does not sell personal data to third parties. We only grant access to third parties if it is necessary to manage your customer relationship, for marketing or analytics purposes, or to deliver personalized content.
If you have consented, your data may also be used to provide tailored content on other websites. Third-party access may also be granted if you have given explicit consent.
When you book a boat, the owner or rental company receives the information needed to carry out the rental, such as your name and booking details. When you book a charter boat, your name and booking details are sent to the charter company through its booking system.
Ship O Hoi uses third-party tools to deliver services, meaning some data is shared with these providers. They only process data on our behalf and are prohibited from using it for other purposes.
Customer data may also be disclosed to public authorities if required by law, for example, in response to a police request, or when we report sellers to the tax authorities.
This is a list of third parties that receive and process personal data on behalf of Ship O Hoi AS:
| Third-party data processors | Purpose | Data storage |
|---|---|---|
| Stripe | Payment provider for processing secure payments and payouts | Within and outside the EU/EEA |
| Poweroffice | Accounting provider for invoicing and bookkeeping | Within the EU/EEA |
| Intercom | Service for providing customer support via email, chat, and other electronic channels | Outside the EU/EEA |
| AWS | Storage and processing of data in connection with the operation of the service | Within the EU/EEA |
| Vercel | Hosting of our website | Within and outside the EU/EEA |
| Google Firebase | Login, chat messages between renters and owners, file storage and push notifications | Within and outside the EU/EEA |
| Google Maps | Maps and address search | Within and outside the EU/EEA |
| Google Workspace | Email and office applications used in connection with the operation of the service | Within and outside the EU/EEA |
| Twilio | Sending SMS messages | Outside the EU/EEA |
| SendGrid | Sending emails and newsletters | Outside the EU/EEA |
| OpenAI | Automatic translation of listing descriptions and reviews, and help writing listing descriptions | Outside the EU/EEA |
| Idura (Criipto) | Identity verification with BankID | Within the EU/EEA |
| Booking Manager (MMK Systems) | Booking system used by charter companies to receive charter bookings | Within the EU/EEA |
| Sentry | Error reporting | Within the EU/EEA |
| PostHog | Analytics | Within the EU/EEA |
| Google Analytics | Analytics | Within and outside the EU/EEA |
| DataFast | Analytics, including measurement of visits from AI crawlers | Within and outside the EU/EEA |
Data Retention
Ship O Hoi deletes or anonymizes personal data as soon as it is no longer necessary for the purpose for which it was collected, unless retention is required by law (e.g., accounting regulations) or necessary to handle complaints or claims. We apply the following retention periods:
| Data | Retention period |
|---|---|
| Profile and account information | For as long as you have an account. After the account is closed, the data is deleted or anonymized when the periods below have expired |
| Booking and rental history, messages and customer support inquiries | 3 years after the booking or inquiry ended, which corresponds to the general limitation period for claims |
| Accounting records (invoices, receipts and payment information) | 5 years after the end of the financial year, as required by the Norwegian Bookkeeping Act |
| Identity verification with BankID | The verification session is deleted after no more than 24 hours |
| Information about sellers reported to the tax authorities | For as long as the rules on reporting for digital platforms require, up to 10 years |
| Server logs, request logs and error reports | 90 days, unless needed to investigate a specific security incident or abuse |
| Rate limiting data | Only held briefly in memory and never stored |
| Analytics data | Up to 26 months |
| Newsletter subscription | Until you unsubscribe |
| Records of consent | For as long as we need to document that consent was given |
Your Rights
You always have the right to:
- Access You have the right to know what personal data we hold about you and how it is processed. Most of this information is available under Settings in the app. A full export can also be requested via your account.
- Rectification You can request corrections if your data is inaccurate. Most information can be updated in your app profile, or you can contact us at hei@ship-ohoi.no to request updates.
- Restriction of Processing You can request limitations on how your data is used under certain circumstances, for example while we check whether your data is correct.
- Objection Where we process your data based on legitimate interest, you have the right to object to the processing. You can always object to the use of your data for direct marketing.
- Data Portability You have the right to receive your personal data in a structured, commonly used, machine-readable format. You can request a full export via your account.
- Withdrawal of Consent If processing is based on consent, you can withdraw it at any time by contacting us at hei@ship-ohoi.no. Withdrawal does not affect processing carried out before consent was withdrawn.
- Erasure (Right to be Forgotten) You can close your account directly in the app under Settings. Your account and listings are then deactivated and no longer visible in the service. Your personal data is deleted or anonymized when the retention periods described above have expired, except for data we are legally required to retain (e.g., accounting records). You can also ask us to delete your data by contacting hei@ship-ohoi.no.
- Right to Complain If you believe we are in breach of data protection laws or our policy, you may contact us directly or file a complaint with the Norwegian Data Protection Authority (www.datatilsynet.no)
We will respond to requests about your rights without undue delay, and no later than within one month.
Cookies
Ship-ohoi.no and our app use cookies. Cookies are small text files stored on your computer or mobile device when you visit our website or use our app.
If you do not wish to allow cookies, you can adjust this in your browser or device settings.
We use:
- Functional cookies: remember your choices to improve your experience.
- Performance cookies: help us understand how you use our website and app.
We also allow third-party providers, including Google, Meta, and Snapchat, to use targeted cookies and anonymous identifiers to display ads based on your visits to our and other websites. These are placed with our consent.
Ship O Hoi uses remarketing, demographic and location-based marketing, and other interest-based marketing through these providers.
| Third-party data processors | Purpose | Data storage |
|---|---|---|
| Meta Pixel | Used to deliver targeted marketing in their channels, as well as optimization of advertisements. | Within and outside the EU/EEA |
| Snap Pixel | Used to deliver targeted marketing in their channels, as well as optimization of advertisements. | Within and outside the EU/EEA |
| LinkedIn Pixel | Used to deliver targeted marketing in their channels, as well as optimization of advertisements. | Within and outside the EU/EEA |
| Google Tag Manager | Used to deliver targeted marketing in their channels, as well as optimization of advertisements. | Within and outside the EU/EEA |
| Microsoft Clarity | Used to understand how visitors use our website, for example through heatmaps. | Within and outside the EU/EEA |
Personalization
To provide the best possible service, we personalize parts of ship-ohoi.no, the Ship O Hoi app, and our communication with you. The legal basis is our legitimate interest in tailoring our services.
Examples include personalized offers in the app, suggested vessels, trips, or journeys based on your rental history, and other relevant marketing through our services. We also use third-party providers to deliver parts of this personalized communication, such as email delivery services.
Marketing
We offer all users the option to receive communication with suggestions, tips, and offers via email, SMS, and app notifications. You can adjust these preferences in your profile settings in the app or by contacting us at hei@ship-ohoi.no.
From time to time, we may also communicate updates about features, changes, or news necessary for service delivery. This communication may occur via phone, email, postal mail, or app notifications.
By subscribing to our newsletter, you consent to receive marketing content, including information about Ship O Hoi and relevant partners. This may include both Ship O Hoi’s own communication and selected third-party content.
Changes to This Privacy Policy
Ship O Hoi reserves the right to amend this privacy policy at any time. All registered users will be notified of changes and asked to accept them. Acceptance of this privacy policy, including updates, is a prerequisite for continued use of Ship O Hoi’s services.