Plain-language version

Privacy
policy

Short and honest. Here's what we collect, why, and what you can do about it.

Last updated — 26 October 2026

Who we are

Nitty Gritty is a bar and grill in Tromsø, Norway. We are the data controller for the personal information described on this page.

Nitty Gritty
Storgata 93a, 9008 Tromsø, Norway
Email: elisabeth@thenittygritty.no
Phone: +47 90 09 83 31

What we collect

Only what we need to answer you, take a booking, or send the newsletter you signed up for.

Contact form

  • Your name
  • Your email address
  • The subject and message you write

Job applications

  • Your name, email address and phone number
  • The position, availability and start date you choose
  • Your CV and what you write about yourself

Newsletter

  • Your email address
  • The date you signed up

Bookings

Table reservations are handled by DinnerBooking. They process your name, contact details, and booking info under their own privacy policy.

Server logs

Our hosting provider keeps standard access logs (IP address, time, page requested) for security and abuse prevention.

Site statistics (only if you say yes)

If you accept in the cookie banner, PostHog counts your visit: the pages you open, where you came from, your device and browser type, your IP address (used for a rough location, like country and city) and clicks on the booking, phone, gift card and social media links. Nothing else on the page is recorded: no screen recordings, no mouse movements, no advertising profile.

Why we collect it

Each piece of data has one job. We don't repurpose it.

  • Contact form — to read your message and reply. Legal basis: your consent (GDPR art. 6(1)(a)).
  • Job applications — to consider you for a job and get in touch about it. Legal basis: steps you ask us to take before a possible employment contract (GDPR art. 6(1)(b)).
  • Newsletter — to send you the updates you opted into. Legal basis: your consent (GDPR art. 6(1)(a)). You can unsubscribe at any time.
  • Bookings — to hold your table. Legal basis: performance of a contract (GDPR art. 6(1)(b)).
  • Server logs — to keep the site secure and working. Legal basis: legitimate interest (GDPR art. 6(1)(f)).
  • Site statistics — to see which pages people use and make the site better. Legal basis: your consent (GDPR art. 6(1)(a)). You can say no, or change your mind at any time.

Who we share it with

We don't sell your data. We don't share it for advertising. We use a small set of processors that help us run the site:

  • Brevo — delivers contact form messages and job applications (with your CV) by email to the people who handle them for Nitty Gritty, and sends you a confirmation. Based in the EU.
  • Sanity — stores the website's content, and short-lived spam-protection counters (scrambled codes of IP and email addresses, deleted after a day).
  • Cloudflare — Turnstile, the spam and robot check on the contact form. Cloudflare may receive your IP address and technical browser information. Based in the USA.
  • DinnerBooking — handles table reservations.
  • Vercel — hosts the website.
  • PostHog — site statistics, only with your consent. Hosted in the EU (Frankfurt).
  • Our email provider — stores the email correspondence between us.

Some of these providers may store data outside Norway/EU. When that happens, transfers rely on the EU Standard Contractual Clauses or equivalent safeguards.

How long we keep it

  • Contact form messages — kept while we're helping you, then up to 24 months for follow-up. After that, deleted.
  • Job applications — deleted within 6 months after we've filled the position, unless you agree that we keep them longer.
  • Newsletter subscriptions — kept until you unsubscribe.
  • Booking records — handled by DinnerBooking under their retention policy.
  • Server logs — typically 30 days.
  • Site statistics — kept in PostHog for up to 12 months, then deleted.

Your rights

Under GDPR you have the right to:

  • Ask what data we hold on you
  • Correct anything that's wrong
  • Have it deleted
  • Restrict or object to how we use it
  • Get a copy in a portable format
  • Withdraw consent at any time (without affecting anything we did before you withdrew)
Want to use one of these rights?

Email elisabeth@thenittygritty.no with what you want done. We'll reply within 30 days.

Cookies

Nothing that tracks you is set until you choose in the cookie banner. If you accept, PostHog sets a cookie and a browser storage entry to tell visits apart. If you decline, nothing is set. We never use cookies for advertising.

We also keep a few small things in your browser that the site needs to work: your cookie choice, and that you closed a banner. Change your cookie choice.

Embedded content (booking widget, social links) may set their own cookies if you interact with it. That's covered by the relevant provider's policy.

Contact & complaints

Questions about this policy? Email elisabeth@thenittygritty.no or call +47 90 09 83 31.

If you think we've handled your data badly, you can complain to the Norwegian Data Protection Authority (Datatilsynet).